1. www.epikh.eu The EPIKH Project (Exchange Programme to advance e-Infrastructure Know-How) Continue by your own… Riccardo Bruno (riccardo.bruno@ct.infn.it)riccardo.bruno@ct.infn.it COMETA Consortium Joint EPIKH/EUMEDGRID-Support Event in Amman

2. Remember The use of the Virtual Machine is recommended and supported ONLY for development purposes Next actions in Jordan –Support the creation of Robot Proxy Certificates –Installation of a Robot Proxy Server –Creation of Identity Federations and Identity providers –Create a Science Gateway in Jordan Algiers, Joint EPiKH/EUMEDGRID-Support in Algeria, 27.06.2010 2

3. Instructions below have to be done only once 3

4. 4 Certificate You got a personal certificate: File in P12 format: Contains a public and private key in a unique file A password that encrypts the private key Load this personal certificate into your web browser (each browser has different ways to load a personal certificates)

5. Registering to the EUMEDGRID VO Register to the eumed VO subcribing through the ROC Africa site (http://roc.africa-grid.org): Join as new user/EUMED/ The page displays several instructions you already performed At the step 3) Register to the EUMED VO click on the link: https://voms2.cnaf.infn.it:8443/voms/eumed/registe r/start.action https://voms2.cnaf.infn.it:8443/voms/eumed/registe r/start.action The web page opens only if you have your certificate loaded into the web brower you are using. VOMS server will accept Jordan CA certificates from 13/12/2011 5

6. VOMS Registration A web form will prompts you with a few questions; then click on subscribe The VO acceptance must be acknowledged confirming it trhough a link inside an incoming email. Then wait for your request acceptance by email 6

7. The Jordan UI All of you have an account on the Jordan UI: ui01.junet.edu.jo Copy your certificate into the Giordan UI You can copy it with WinSCP SSH client or from a ssh client with: –scp.p12 @ui01.junet.edu.jo: 7

8. Convert P12 -> pem The P12 certificate file must converted in ‘pem’ format Access the jordan user interface ssh @ui01.junet.edu.jo then execute: –mkdir.globus –mv.p12.globus/ –cd.globus 8

9. Public and private key in PEM format Generate the private key in pem format –openssl pkcs12 -nocerts -in.p12 -out userkey.pem –This command prompts you for the password associated to your certificate first –Then it will prompts for a new passord and its confirmation. –This new password will be associated to the new private key: userkey.pem Generate the public key in pem format –openssl pkcs12 -clcerts -nokeys -in.p12 -out usercert.pem –Thi command only prompts the password associated to your certificate only 9

10. PEM files access rights PEM files must have the following access rights: –chmod 400 userkey.pem –chmod 644 usercert.pem Detailed instructions on converting to pem format are available at: –https://gilda.ct.infn.it/wikimain/- /wiki/Main/HowToConvertPkcs12ToPem 10

11. Instructions below have to be done each time you want to submit jobs using the GILDA Liferay Virtual Machine 11

12. Generate a proxy certificate file From your certificate in PEM format you can create a proxy certificate Proxy certificate is a new certificate digitally signed with your personal certificate having a default lifetime of 12 hours To generate the proxy execute: –voms-proxy-init --voms eumed Then take note of the proxy certificate file produced by the command: –ls /tmp/x509up_u$(id -u) –/tmp/x509up_u41107 (this is an example of proxy filename) 12

13. Simulate the robot certificate in the VM Go to the Virtual Machine and copy the proxy certificate: –scp @ui01.junet.edu.jo:/tmp/x509up_u41107 /etc/GILDA/eToken/proxy.txt –(The file: x509up_u41107 is just an example, see slide above) This file allows the VM to simulate a robot proxy server Please be sure that /etc/hosts file contains the entry: 127.0.0.1myproxy.ct.infn.it Only root user or liferayadmin user with sudo command can change this file 13

14. Now you are ready to use the standalone code to submit your test job or Test your own portlet code As soon as your code is stable please ask to publish your Application to a production Science Gateway 14

15. Please do not forget … Register in the eumedgrid page: –http://www.eumedgrid.eu/index.php/community-register/loginhttp://www.eumedgrid.eu/index.php/community-register/login Register into the eumed application portal –https://applications.eumedgrid.eu/registerhttps://applications.eumedgrid.eu/register Fill up your application details for the EPIKH/EUMED application registry –Form: http://wiki.epikh.eu/applications/survey_limey/index.php?sid=686 22&lang=en http://wiki.epikh.eu/applications/survey_limey/index.php?sid=686 22&lang=en Fill the Grid School feedback form: –http://grid.ct.infn.it/feedback/epikh/africa7_appl/feedback.phphttp://grid.ct.infn.it/feedback/epikh/africa7_appl/feedback.php Stay tuned with the epikh mailing list –https://mailman.ct.infn.it/mailman/listinfo/epikh.usershttps://mailman.ct.infn.it/mailman/listinfo/epikh.users 15

16. References The Roc Africa and Arabia instructions for users: –http://roc.africa- grid.org/index.php?option=com_content&view=article&id=1171&I temid=492http://roc.africa- grid.org/index.php?option=com_content&view=article&id=1171&I temid=492 The GILDA Virtual services –You can find in it the GILDA Liferay VM –https://gilda.ct.infn.it/serviceshttps://gilda.ct.infn.it/services For any issue related to these instructions please contact: –riccardo.bruno@ct.infn.itriccardo.bruno@ct.infn.it –anwar@junet.edu.joanwar@junet.edu.jo All Grid School material available in the Agenda: –http://agenda.ct.infn.it/conferenceDisplay.py?confId=608http://agenda.ct.infn.it/conferenceDisplay.py?confId=608 16

17. Greetings Thank you very much for you collaboation and the patience while experiencing a very new training format Thanks to the tutors: –Rita Ricceririta.ricceri@ct.infn.itrita.ricceri@ct.infn.it –Riccardo Rotondoriccardo.rotondo@ct.infn.itriccardo.rotondo@ct.infn.it –Elisa Ingra’elisa.ingra@ct.infn.itelisa.ingra@ct.infn.it –Carla Carrubbacarla.carrubba@ct.infn.itcarla.carrubba@ct.infn.it The local team –Anwar Al Yousefanwar@junet.edu.joanwar@junet.edu.jo –Mohammed Almomanim.momani@junet.edu.jom.momani@junet.edu.jo Thanks for the very warm welcome in Jordan! 17