12th EELA Tutorial for Users and System Administrators E-infrastructure shared between Europe and Latin America User Interface installation and configuration Vanessa Hamar Universidad de Los Andes – Mérida, Venezuela 12 th EELA Tutorial Lima, September,2007

E-infrastructure shared between Europe and Latin America Lima, 12th EELA Tutorial, Outline What is a UI? Installing User Interface –Installation pre-requisites –Security pre-requisites –site-info.def –UI Installation and Configuration –Default VO Testing User Interface

E-infrastructure shared between Europe and Latin America Lima, 12th EELA Tutorial, What is a UI? The UI is a suite of clients and API that users and applications can use to access the gLite services. The gLite UI includes the following components: –VOMS command-line tools –Workload Management System clients and APIs –Logging and Bookkeeping clients and APIs –Data Transfer command-line clients and APIs –Data Catalog command-line clients and APIs –gLite I/O client and APIs –R-GMA client and APIs –LFC client

E-infrastructure shared between Europe and Latin America Lima, 12th EELA Tutorial, Installing User Interface

E-infrastructure shared between Europe and Latin America Lima, 12th EELA Tutorial, Preliminary and common steps Start from an instalation of SLC Install JAVA SDK Check the hostname Install and configure ntp daemon Install X.509 host certificates /etc/grid-security and check their file permissions. Install the latest version of glite-yaim Install the middleware

E-infrastructure shared between Europe and Latin America Lima, 12th EELA Tutorial, Installing pre-requisites JAVA is not included in distribution. Install it separately (>= 1.4.2_08) apt-get install j2sdk

E-infrastructure shared between Europe and Latin America Lima, 12th EELA Tutorial, Installing pre-requisites Check the FQDN hostname –Ensure that the hostnames of your machines are correctly set. Run the command: hostname -f

E-infrastructure shared between Europe and Latin America Lima, 12th EELA Tutorial, Installing pre-requisites Syncronization among all gLite nodes is mandatory. Install ntp if not already available for your system: – apt-get install ntp Add your time server in /etc/ntp.conf –restrict mask nomodify notrap noquery –server –(you can use ntp-1.infn.it – IP ) Edit /etc/ntp/step-tickers adding your(s) time server(s) hostname If you are running a firewall, you will have to allow inbound comminication on the NTP port: –-A INPUT -s -p udp --dport 123 -j ACCEPT Activate the ntpd service with the following commands:  ntpdate  service ntpd start  chkconfig ntpd on –You can check ntpd’s status with :  ntpq -p

E-infrastructure shared between Europe and Latin America Lima, 12th EELA Tutorial, Installing pre-requisites Install glite-yaim apt-get install glite-yaim-core apt-get install glite-yaim-clients

E-infrastructure shared between Europe and Latin America Lima, 12th EELA Tutorial, site-info.def All the configuration values to sites have to be configured in a site configuration file using key-value pairs. This file is shared among all the different gLite node types. So edit once and keep it in a safe place Create a copy of /opt/glite/yaim/examples/site-info.def template (coming from the glite-yaim-core package) to your reference directory for the installation (e.g. /root/siteinfo): – cp /opt/glite/yaim/examples/site-info.def /root/siteinfo/ site-info.def

E-infrastructure shared between Europe and Latin America Lima, 12th EELA Tutorial, site-info.def A good syntax test for your site configuration file is to try to source it manually running the command: source site-info.def The configuration is stored in a directory structure which will be extended in the near future. Currently the following files are used: site-info.def file and the vo.d directory.

E-infrastructure shared between Europe and Latin America Lima, 12th EELA Tutorial, vo.d directory The /root/siteinfo/vo.d directory Each file name in this directory has to be the lower-cased version of e VO name defined in site-info.def. The matching file should contain the definitions for that VO and will overwrite the ones which are defined in site-info.def. SW_DIR=$VO_SW_DIR/eela DEFAULT_SE=$CLASSIC_HOST STORAGE_DIR=$CLASSIC_STORAGE_DIR/eela

E-infrastructure shared between Europe and Latin America Lima, 12th EELA Tutorial, site-info.def Open /root/siteinfo/site-info.def file using a text editor and set the following values according to your grid environment: MY_DOMAIN=ring.pucp.edu.pe CE_HOST=grid001.$MY_DOMAIN RB_HOST=glite-rb.ct.infn.it WMS_HOST=lima01.$MY_DOMAIN PX_HOST=grid001.ct.infn.it BDII_HOST=lima01.$MY_DOMAIN MON_HOST=grid014.$MY_DOMAIN FTS_HOST=fts.$MY_DOMAIN REG_HOST=rgmasrv.ct.infn.it

E-infrastructure shared between Europe and Latin America Lima, 12th EELA Tutorial, site-info.def Add LFC settings: LFC_HOST=lima02.$MY_DOMAIN Check/Modify VO and VOMS specific configurations: VOS=“gilda alice eumed eela euchina … ALL_VOS=“gilda alice eumed eela euchina … ALL_VOMS=“gilda alice eumed eela euchina … #Specific VO settings VO_ _ =…

E-infrastructure shared between Europe and Latin America Lima, 12th EELA Tutorial, UI Installation and Configuration Install the node /opt/glite/yaim/bin/yaim -i -s /root/siteinfo/site- info.def -m glite-UI Configure the node /opt/glite/yaim/bin/yaim -c -s /root/siteinfo/site- info.def -n UI

E-infrastructure shared between Europe and Latin America Lima, 12th EELA Tutorial, Default VO You can set the default Virtual Organization for user accessing your UI editing the file /opt/glite/etc/glite_wmsui_cmd_var.conf [ ErrorStorage = "/tmp/glite/glite-ui" ; DefaultLogInfoLevel = 1 ; LoggingTimeout = 10 ; rank = - other.GlueCEStateEstimatedResponseTime ; NSLoggerLevel = 1 ; LoggingSyncTimeout = 10 ; DefaultVo = "gilda" ;  Set your default VO here OutputStorage = "/tmp/glite/glite-ui" ; ListenerStorage = "/tmp/glite/glite-ui" ; RetryCount = 3 ; DefaultStatusLevel = 1 ; requirements = other.GlueCEStateStatus == "Production" ; ]

E-infrastructure shared between Europe and Latin America Lima, 12th EELA Tutorial, Testing User Interface

E-infrastructure shared between Europe and Latin America Lima, 12th EELA Tutorial, Create user account # adduser # passwd Log on with user account # su – gildauser

E-infrastructure shared between Europe and Latin America Lima, 12th EELA Tutorial, Create.globus directory # mkdir.globus Copy your own certificates to the UI in directory.globus Verify permissions of the certificates # chmod 400 userkey.pem # chmod 644 usercert.pem

E-infrastructure shared between Europe and Latin America Lima, 12th EELA Tutorial, References gLite v3.0 Advanced Installation and Configuration Guide c/installation_guide_3.0-2.html YAIM guide for sysadmins

E-infrastructure shared between Europe and Latin America Lima, 12th EELA Tutorial, Questions …