E-science grid facility for Europe and Latin America LFC Server Installation and Configuration Antonio Calanducci INFN Catania

2 Catania, Tutorial for Trainers, Installation Pre-requisites Start from a machine with Scientific Linux 4.x i386 installed. Syncronization among all gLite nodes is mandatory. It can be achieved by the NTP protocol with a time server. –Install ntp if not already available for your system: yum install ntp 2

3 Catania, Tutorial for Trainers, Installation Pre-requisite Check that your machine has a fully qualified name with: –hostname -f –you should get back the name of the machinine including the domain 3

4 Catania, Tutorial for Trainers, Installation Pre-requisites (Java) Verify that Java JDK 1.5 is installed. If not: –yum install jdk java sun-compat 4

5 Catania, Tutorial for Trainers, Host Certificates Install the host certificate: –Create the dir /etc/grid-security if not already there and download your certificates and set proper permissions: –chmod 644 /etc/grid-security/hostcert.pem –chmod 400 /etc/grid-security/hostkey.pem ll /etc/grid-security/ -rw-r--r-- 1 root root1127Jun 14 12:27 hostcert.pem -r root root887 Jun 14 12:28 hostkey.pem 5

6 Catania, Tutorial for Trainers, Set up YUM repositories The LFC version with the MySQL back-end requires the installation of the following metapackage: –ig_LFC_mysql This will install the needed RPMs to set up the machine The required repositories are: –"ca dag ig jpackage gilda" You can use the following bash code to populate /etc/yum.repos.d: – REPOS="ca dag ig jpackage gilda" – for name in $REPOS; do wget -O /etc/ yum.repos.d/$name.repo; done Additionaly download the following file to add the LFC yum repository (download inside the /etc/yum.repos.d/ dir): – wget lfc_mysql.repo 6

7 Catania, Tutorial for Trainers, Install the LFC metapackage 7 Run the proper YUM command: – yum install ig_LFC_mysql Install the Certificate Autorities stuff with: – yum install lcg-CA For a GILDA node, install the GILDA CA and VOMS certificates with: – yum install gilda_utils

8 Catania, Tutorial for Trainers, Site Configuration File All the configuration values to sites have to be set up in a site configuration file using key-value pairs. This file is shared among all the different gLite node types. So edit once and keep it in a safe place Create a copy of /opt/glite/yaim/examples/siteinfo/ig-site-info.def template to your reference directory for the installation : – cp /opt/glite/yaim/examples/siteinfo/ig-site-info.def  /opt/glite/yaim/etc/gilda/gilda-site-info.def The general syntax of the file is a sequence of bash-like assignments of variables ( =, no spaces are allowed around =). A good syntax test for your site configuration file is to try to source it manually running the command: source my-site-info.def 8

9 Catania, Tutorial for Trainers, gilda-site-info.def Set the following variables: – NTP_HOSTS_IP=”ntp-1.infn.it” – JAVA_LOCATION=”/usr/java/jdk1.5.0_14” – MYSQL_PASSWORD=set_this_to_a_good_password – GROUPS_CONF=/opt/glite/yaim/etc/gilda/gilda_ig- groups.conf – JAVA_LOCATION="/usr/java/jdk1.5.0_14“ – LFC_HOST=hostXX.$MY_DOMAIN – LFC_DB_PASSWORD=”whateveryouwant” – LFC_DB_HOST=$LFC_HOST – LFC_DB=cns_db – LFC_CENTRAL="gilda" – VOS="gilda” 9

10 Catania, Tutorial for Trainers, Node Configuration Now we can configure the node: /opt/glite/yaim/bin/ig_yaim -c -s /opt/glite/yaim/etc/gilda/gilda-site-info.def -n ig_LFC_mysql 10

11 Catania, Tutorial for Trainers, LFC Testing Log in on a User Interface and create a valid proxy with VOMS extensions. Set up the following env variabile to point to your fresh new LFC server: –LFC_HOST=hostXX.YOUR_DOMAIN 11

12 Catania, Tutorial for Trainers, LFC Testing Browse the virtual filesystem of the File Catalogue with: –lfc-ls -l / –lfc-ls -l /grid/gilda Create a directory undet /grid/gilda –lfc-mkdir /grid/gilda/test_dir 12

13 Catania, Tutorial for Trainers, File Upload and registration Upload a local file to a grid Storage Element and register it on the file catalogue: –touch new.txt –lcg-cr -v --vo gilda -d aliserv6.ct.infn.it -l lfn:/grid/gilda/test_dir/new.txt file:$PWD/new.txt –lfc-ls -l /grid/gilda/test_dir Try to download back the file: –lcg-cp -v --vo gilda lfn:/grid/gilda/test_dir/new.txt file:$PWD/new2.txt 13

14 Catania, Tutorial for Trainers, Firewall The following two ports should be opened up: –lfcdaemon 7111 lfcmgr 0u IPv TCP *:5010 (LISTEN) –lfc-dli 7158 lfcmgr 0u IPv TCP *:8085 (LISTEN) So add the appropriate rules to your /etc/sysconfing/iptables: –-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp -- dport j ACCEPT –-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp -- dport j ACCEPT 14

15 Catania, Tutorial for Trainers, Log Files The LFC log files are stored under: – /var/log/lfc lfc]# tail -f /var/log/lfc/log 06/23 15:31: ,0 Cns_srv_statg: returns 0 06/23 15:31: ,1 Cns_srv_statg: NS092 - statg request by /C=IT/O=GILDA/OU=Personal Certificate/L=Universita di Padova/CN=Niccolo Michieli (176,104) from grid032.ct.infn.it 06/23 15:31: ,1 Cns_srv_statg: NS098 - statg /grid/gilda/lTriPadova/rootsrc.tgz 06/23 15:31: ,1 Cns_srv_statg: returns 0 15

Catania, Tutorial for Trainers, Questions?