1. 16-26 June 2008, Catania (Italy) First South Africa Grid Training LFC Server Installation and Configuration Antonio Calanducci INFN Catania

2. 2 16-26 June 2008, Catania (Italy) First South Africa Grid Training in Catania Installation Pre-requisites Start from a machine with Scientific Linux 4.x i386 installed. Syncronization among all gLite nodes is mandatory. It can be achieved by the NTP protocol with a time server. – Install ntp if not already available for your system: yum install ntp 2

3. 3 16-26 June 2008, Catania (Italy) First South Africa Grid Training in Catania Installation Pre-requisite Check that your machine has a fully qualified name with: – hostname -f – you should get back the name of the machinine including the domain 3

4. 4 16-26 June 2008, Catania (Italy) First South Africa Grid Training in Catania Installation Pre-requisites (Java) Verify that Java JDK 1.5 is installed. If not you can install the following RPMS: – rpm -ivh http://grid-it.cnaf.infn.it/mrepo/ig_sl4- i386/RPMS.3_1_0_externals/jdk-1.5.0_14- fcs.i586.rpmhttp://grid-it.cnaf.infn.it/mrepo/ig_sl4- i386/RPMS.3_1_0_externals/jdk-1.5.0_14- fcs.i586.rpm – yum install ttmkfdir – rpm -ivh http://grid-it.cnaf.infn.it/mrepo/ig_sl4- i386/RPMS.3_1_0_externals/java-1.5.0-sun- compat-1.5.0.14-1.sl4.jpp.noarch.rpmhttp://grid-it.cnaf.infn.it/mrepo/ig_sl4- i386/RPMS.3_1_0_externals/java-1.5.0-sun- compat-1.5.0.14-1.sl4.jpp.noarch.rpm 4

5. 5 16-26 June 2008, Catania (Italy) First South Africa Grid Training in Catania Host Certificates Install the host certificate: – Create the dir /etc/grid-security if not already there and download your certificates and set proper permissions: – chmod 644 /etc/grid-security/hostcert.pem – chmod 400 /etc/grid-security/hostkey.pem ll /etc/grid-security/ -rw-r--r-- 1 root root1127Jun 14 12:27 hostcert.pem -r-------- 1 root root887 Jun 14 12:28 hostkey.pem 5

6. 6 16-26 June 2008, Catania (Italy) First South Africa Grid Training in Catania Set up YUM repositories The LFC version with the MySQL back-end requires the installation of the following metapackage: – ig_LFC_mysql This will install the needed RPMs to set up the machine The required repositories are: – "ca dag ig jpackage gilda" You can use the following bash code to populate /etc/yum.repos.d: – REPOS="ca dag ig jpackage gilda" – for name in $REPOS; do wget http://grid018.ct.infn.it/mrepo/repos/$name.repo -O /etc/ yum.repos.d/$name.repo; done http://grid018.ct.infn.it/mrepo/repos/$name.repo Additionaly download the following file to add the LFC yum repository (download inside the /etc/yum.repos.d/ dir): – wget http://grid-it.cnaf.infn.it/mrepo/repos/glite- lfc_mysql.repo

7. 7 16-26 June 2008, Catania (Italy) First South Africa Grid Training in Catania Install the LFC metapackage Run the proper YUM command: – yum install ig_LFC_mysql Install the Certificate Autorities stuff with: – yum install lcg-CA For a GILDA node, install the GILDA CA and VOMS certificates with: – yum install gilda_utils

8. 8 16-26 June 2008, Catania (Italy) First South Africa Grid Training in Catania Site Configuration File All the configuration values to sites have to be set up in a site configuration file using key-value pairs. This file is shared among all the different gLite node types. So edit once and keep it in a safe place Create a copy of /opt/glite/yaim/examples/siteinfo/ig-site-info.def template to your reference directory for the installation : – cp /opt/glite/yaim/examples/siteinfo/ig-site-info.def /opt/glite/yaim/etc/gilda/gilda-site-info.def The general syntax of the file is a sequence of bash-like assignments of variables ( =, no spaces are allowed around =). A good syntax test for your site configuration file is to try to source it manually running the command: source my-site-info.def 8

9. 9 16-26 June 2008, Catania (Italy) First South Africa Grid Training in Catania gilda-site-info.def Set the following variables: – NTP_HOSTS_IP=”ntp-1.infn.it” – JAVA_LOCATION=”/usr/java/jdk1.5.0_14” – MYSQL_PASSWORD=set_this_to_a_good_password – GROUPS_CONF=/opt/glite/yaim/etc/gilda/gilda_ig- groups.conf – JAVA_LOCATION="/usr/java/jdk1.5.0_14“ – LFC_HOST=hostXX.$MY_DOMAIN – LFC_DB_PASSWORD=”whateveryouwant” – LFC_DB_HOST=$LFC_HOST – LFC_DB=cns_db – LFC_CENTRAL="gilda" – VOS="gilda” 9

10. 10 16-26 June 2008, Catania (Italy) First South Africa Grid Training in Catania Node Configuration Now we can configure the node: /opt/glite/yaim/bin/ig_yaim -c -s /opt/glite/yaim/etc/gilda/gilda-site-info.def -n ig_LFC_mysql 10

11. 11 16-26 June 2008, Catania (Italy) First South Africa Grid Training in Catania LFC Testing Log in on a User Interface and create a valid proxy with VOMS extensions. Set up the following env variabile to point to your fresh new LFC server: – LFC_HOST=hostXX.YOUR_DOMAIN 11

12. 12 16-26 June 2008, Catania (Italy) First South Africa Grid Training in Catania LFC Testing Browse the virtual filesystem of the File Catalogue with: – lfc-ls -l / – lfc-ls -l /grid/gilda Create a directory undet /grid/gilda – lfc-mkdir /grid/gilda/test_dir 12

13. 13 16-26 June 2008, Catania (Italy) First South Africa Grid Training in Catania File Upload and registration Upload a local file to a grid Storage Element and register it on the file catalogue: – touch new.txt – lcg-cr -v --vo gilda -d aliserv6.ct.infn.it -l lfn:/grid/gilda/test_dir/new.txt file:$PWD/new.txt – lfc-ls -l /grid/gilda/test_dir Try to download back the file: – lcg-cp -v --vo gilda lfn:/grid/gilda/test_dir/new.txt file:$PWD/new2.txt 13

14. 14 16-26 June 2008, Catania (Italy) First South Africa Grid Training in Catania Firewall The following two ports should be opened up: – lfcdaemon 7111 lfcmgr 0u IPv6 7797928 TCP *:5010 (LISTEN) – lfc-dli 7158 lfcmgr 0u IPv6 7798049 TCP *:8085 (LISTEN) So add the appropriate rules to your /etc/sysconfing/iptables: – -A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp - -dport 5010 -j ACCEPT – -A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp - -dport 8085 -j ACCEPT 14

15. 15 16-26 June 2008, Catania (Italy) First South Africa Grid Training in Catania Log Files The LFC log files are stored under: – /var/log/lfc [root@lfc-gilda lfc]# tail -f /var/log/lfc/log 06/23 15:31:57 7111,0 Cns_srv_statg: returns 0 06/23 15:31:57 7111,1 Cns_srv_statg: NS092 - statg request by /C=IT/O=GILDA/OU=Personal Certificate/L=Universita di Padova/CN=Niccolo Michieli (176,104) from grid032.ct.infn.it 06/23 15:31:57 7111,1 Cns_srv_statg: NS098 - statg /grid/gilda/lTriPadova/rootsrc.tgz 06/23 15:31:57 7111,1 Cns_srv_statg: returns 0 15

16. 16-26 June 2008, Catania (Italy) First South Africa Grid Training in Catania Questions?