1. www.epikh.eu The EPIKH Project (Exchange Programme to advance e-Infrastructure Know-How) Elisa Ingrà Consortium GARR- Roma elisa.ingra@ct.infn.it WMS LB BDII Installation and Configuration

2. The instructions provided in this presentation assume that you are going to use a machine with Scientific Linux 5.4 installed. –Virtual Machine image (GILDA VM Base_SLC4._i386) available at: https://gilda.ct.infn.it/VirtualServices.html https://gilda.ct.infn.it/VirtualServices.html 2 Preliminaries

3. ssh root@ceristxx.grid.arn.dzroot@ XX = 01, 02, 03, ….., 23 Password: GildaVM.10

4. 4 Repository settings Specify the mrepo host: export MREPO=http://wn03.grid.arn.dz/repos/SL4/ Configure the repository as follows: REPOS="dag ig glite-generic lcg-ca jpackage glite-bdii glite-wms" Get repositories with: for name in $REPOS; do wget $MREPO/$name.repo -O /etc/yum.repos.d/$name.repo; done Copy the gilda utils: wget http://grid018.ct.infn.it/mrepo/repos/gilda.repo -O /etc/yum.repos.d/gilda.repo

5. 5 System requirements Please check: –If you have a valid hostname –To verify, type: hostname -f –To edit the hostname: Install ntp yum install ntp  vim /etc/hosts  vim /etc/hostname  vim /etc/sysconfig/network  hostname  vim /etc/hosts  vim /etc/hostname  vim /etc/sysconfig/network  hostname

6. Modify the ig.repo as following: 6 ig Repo # # INFNGRID repositories # [ig_sl4_i386] name = INFNGRID 3.1 i386 baseurl = http://wn03.grid.arn.dz/mrepo/ig_sl4- i386/RPMS.3_1_0/ enabled = 1 protect = 0 [ig_sl4_i386_externals] name = INFNGRID 3.1 i386 (externals) baseurl = http://wn03.grid.arn.dz/mrepo/ig_sl4- i386/RPMS.3_1_0_externals/ enabled = 0 protect = 0

7. Modify the glite-generic.repo as following: 7 # # gLite generic repositories # [glite-generic_sl4_i386_release] name = gLite generic 3.1 i386 (release) baseurl = http://wn03.grid.arn.dz/mrepo/glite_sl4-i386/RPMS.generic-release/ enabled = 1 protect = 0 [glite-generic_sl4_i386_updates] name = gLite generic 3.1 i386 (updates) baseurl = http://wn03.grid.arn.dz/mrepo/glite_sl4-i386/RPMS.generic-updates/ enabled = 0 protect = 0 [glite-generic_sl4_i386_externals] name = gLite generic 3.1 i386 (externals) baseurl = http://wn03.grid.arn.dz/mrepo/glite_sl4-i386/RPMS.generic-externals/ enabled = 1 protect = 0

8. Then update your host: yum clean all Install CAs on ALL profiles: yum install -y lcg-CA Ig: yum install ig-yaim Gilda utils: yum install gilda_utils 8 YUM install

9. BDII install: yum install ig_BDII WMS install: yum install ig_WMS 9 YUM install

10. 10 Transaction Check Error Transaction Check Error: file /opt/glite/lib/libvomsapi_nog.a conflicts between attempted installs of glite-security-voms-api-cpp-1.9.10-8.slc4 and glite-security-voms-api-noglobus-1.8.8-2.slc4 file /opt/glite/lib/libvomsapi_nog.so conflicts between attempted installs of glite-security-voms-api-cpp-1.9.10-8.slc4 and glite-security-voms- api-noglobus-1.8.8-2.slc4 file /opt/glite/lib/libvomsapi_nog.so.0 conflicts between attempted installs of glite-security-voms-api-cpp-1.9.10-8.slc4 and glite-security-voms- api-noglobus-1.8.8-2.slc4 file /opt/glite/lib/libvomsapi_nog.so.0.0.0 conflicts between attempted installs of glite-security-voms-api-cpp-1.9.10-8.slc4 and glite- security-voms-api-noglobus-1.8.8-2.slc4 Transaction Check Error: file /opt/glite/lib/libvomsapi_nog.a conflicts between attempted installs of glite-security-voms-api-cpp-1.9.10-8.slc4 and glite-security-voms-api-noglobus-1.8.8-2.slc4 file /opt/glite/lib/libvomsapi_nog.so conflicts between attempted installs of glite-security-voms-api-cpp-1.9.10-8.slc4 and glite-security-voms- api-noglobus-1.8.8-2.slc4 file /opt/glite/lib/libvomsapi_nog.so.0 conflicts between attempted installs of glite-security-voms-api-cpp-1.9.10-8.slc4 and glite-security-voms- api-noglobus-1.8.8-2.slc4 file /opt/glite/lib/libvomsapi_nog.so.0.0.0 conflicts between attempted installs of glite-security-voms-api-cpp-1.9.10-8.slc4 and glite- security-voms-api-noglobus-1.8.8-2.slc4 If continuing having this error try yum remove glite-security-voms-cpp

11. 11 Error: Missing Dependency: google-perftools >= 1.0-1 is needed by package ig_WMS Error: Missing Dependency: google-perftools-devel >= 1.0-1 is needed by package ig_WMS Error: Missing Dependency: google-perftools >= 1.0-1 is needed by package ig_WMS Error: Missing Dependency: google-perftools-devel >= 1.0-1 is needed by package ig_WMS rpm -ivh http://google-perftools.googlecode.com/files/google-perftools-1.5- 1.i386.rpm rpm -ivh http://google-perftools.googlecode.com/files/google-perftools-devel- 1.5-1.i386.rpm yum install ig_WMS YUM install

12. wget http://wn03.grid.arn.dz/repos/SL4/glite-lb.repo Yum clean all yum install ig_LB 12 LB install

13. Place the host certificate in the right location: wget http://wn03.grid.arn.dz/cert/ALGIERS_host_certs/ceristXX.grid.arn.dz/ceristXX.grid.arn.dz-cert.pem wget http://wn03.grid.arn.dz/cert/ALGIERS_host_certs/ceristXX.grid.arn.dz/ceristXX.grid.arn.dz-key.pem –Move those in the right path mv ceristXX.grid.arn.dz-cert.pem /etc/grid-security/hostcert.pem mv ceristXX.grid.arn.dz-key.pem /etc/grid-security/hostkey.pem –Give them the right permissions chmod 400 /etc/grid-security/hostkey.pem chmod 644 /etc/grid-security/hostcert.pem [root@cerist04 ~]# ll /etc/grid-security/ total 32 drwxr-xr-x 2 root root 20480 Jun 27 12:08 certificates -rw-r--r-- 1 root root 887 Jun 16 10:02 hostcert.pem -r-------- 1 root root 887 Jun 16 10:02 hostkey.pem drwxr-xr-x 2 root root 4096 Jun 27 11:21 vomsdir 13

14. 14 site-info.def Copy the ig-site-info.def script template Open your own site-info.def and customize it: cp /opt/glite/yaim/examples/siteinfo/ig-site- info.def /opt/glite/yaim/examples/siteinfo/mysite- info.def vi /opt/glite/yaim/examples/siteinfo/mysite-info.def

15. 15 BDII Configuration BDII_HOST=grid-test-xx.trigrid.it SITE_NAME=GILDA_ALGERY BDII_HTTP_URL= " http://grid018.ct.infn.it/fileadmin/b dii/glite-bdii-update.conf " NTP_HOSTS_IP="193.206.144.10 ntp-1.infn.it" VOS= "gilda" /opt/glite/yaim/bin/ig_yaim -c -s /opt/glite/yaim/examples/siteinfo/mysite-info.def -n ig_BDII_top BDII Configuration

16. 16 BDII Post Configuration Set the CA autoupdate on /opt/glite/yaim/etc/gilda/set_CAs_autoupdate.sh vi /opt/bdii/etc/bdii.conf BDII_AUTO_UPDATE=yes BDII_MODIFY_DN=yes BDII_UPDATE_URL=http://grid018.ct.infn.it/fileadmin/ bdii/glite-bdii-update.conf Restart BDII /etc/init.d/bdii restart Test bdii ldapsearch -x -h localhost -p 2170 -b mds-vo- name=local,o=grid

17. In order to customize the Site BDII list (http://grid018.ct.infn.it/fileadmin/bdii/glite-bdii- update.conf) install the htppd service yum install -y httpd (if necessary) Publish your customized glite-bdii-update.conf file (i.e. /var/www/html/bdii) Set the BDII_UPDATE_URL accordingly in the file opt/bdii/etc/bdii.conf file Restart the BDII service /etc/init.d/bdii restart 17 Customize your BDII

18. 18 WMS-LB Configuration (1/2) WMS Configuration (vi /opt/glite/yaim/examples/siteinfo/mysite-info.def) INSTALL_ROOT=/opt MYSQL_PASSWORD=secret PX_HOST=myproxy.ct.infn.it WMS_HOST=grid-test-59.trigrid.it SITE_EMAIL=grid-test-site@ct.infn.it VOS="gilda"  Add gilda here ######### # gilda # ######### VO_GILDA_VOMS_CA_DN="/C=IT/O=INFN/OU=Host/L=Catania/CN=voms.ct.infn.it" VO_GILDA_SW_DIR=$VO_SW_DIR/gilda VO_GILDA_DEFAULT_SE=$DPM_HOST VO_GILDA_STORAGE_DIR=$CLASSIC_STORAGE_DIR/gilda VO_GILDA_VOMS_SERVERS="voms://voms.ct.infn.it:8443/voms/gilda? /gilda" VO_GILDA_VOMSES="gilda voms.ct.infn.it 15001 /C=IT/O=INFN/OU=Host/L=Catania/CN=voms.ct.infn.it gilda"

19. WMS-LB Configuration (2/2) Location, Meeting title, dd.mm.yyyy 19 vi /opt/glite/yaim/examples/siteinfo/services/glite-wms LB_HOST="grid-test-59.trigrid.it:9000" GLITE_WMS_LCGMON_FILE="/var/log/wms_lcgmon.log" Copy the gilda profiles inside ig ones cat /opt/glite/yaim/etc/gilda/gilda_ig-groups.conf >> /opt/glite/yaim/examples/ig-groups.conf cat /opt/glite/yaim/etc/gilda/gilda_ig-users.conf >> /opt/glite/yaim/examples/ig-users.conf CONFIGURE /opt/glite/yaim/bin/ig_yaim -c -s /opt/glite/yaim/examples/siteinfo/mysite-info.def -n ig_WMS -n ig_LB

20. 20 /opt/glite/etc/init.d/glite-wms-wmproxy: line 37: 6431 Segmentation fault $httpdpath -k $@ -f $config ABORT: Service glite-wms-wmproxy failed to start! ERROR: Error during the execution of function: config_glite_wms ERROR: Error during the configuration.Exiting. [FAILED] /opt/glite/etc/init.d/glite-wms-wmproxy: line 37: 6431 Segmentation fault $httpdpath -k $@ -f $config ABORT: Service glite-wms-wmproxy failed to start! ERROR: Error during the execution of function: config_glite_wms ERROR: Error during the configuration.Exiting. [FAILED] - [root@grid-test-60 yum.repos.d]# rpm -qa |grep gridsite gridsite-apache-1.1.18.1-1 gridsite-shared-1.1.18.1-1 rpm -e --nodeps gridsite-apache-1.1.18.1-1 gridsite-shared-1.1.18.1-1 wget http://etics- repository.cern.ch/repository/download/registered/org.glite/org.gridsite.core/1.1.20/slc4_ia32_gcc346/gridsite-apache-1.1.20-2.i386.rpm wget http://etics- repository.cern.ch/repository/download/registered/org.glite/org.gridsite.core/1.1.20/slc4_ia32_gcc346/gridsite-shared-1.1.20-2.i386.rpm rpm -ivh gridsite-shared-1.1.20-2.i386.rpm rpm -ivh gridsite-apache-1.1.20-2.i386.rpm CONFIGURE AGAIN /opt/glite/yaim/bin/ig_yaim -c -s /opt/glite/yaim/examples/siteinfo/mysite-info.def -n ig_WMS - n ig_LB Configuration Error

21. 21 Testing WMS-LB From a UI enter: [elingra@glite-tutor ~]$ export GLITE_WMS_WMPROXY_ENDPOINT=https://ceristXX.grid.arn.dz:7443/glite_wms_wmproxy_server [elingra@glite-tutor ~]$ glite-wms-job-list-match -a hostname.jdl Connecting to the service https://grid-test-60.trigrid.it:7443/glite_wms_wmproxy_server ========================================================================== COMPUTING ELEMENT IDs LIST The following CE(s) matching your job requirements have been found: *CEId* - grisuce.scope.unina.it:2119/jobmanager-lcgpbs-grisu_long - grisuce.scope.unina.it:2119/jobmanager-lcgpbs-grisu_short - ce.scope.unina.it:2119/jobmanager-lcgpbs-egee_long - ce1-egee.srce.hr:2119/jobmanager-sge-prod - gilda-01.pd.infn.it:2119/jobmanager-lcgpbs-gilda - ce-edu.grid.acad.bg:2119/jobmanager-pbs-gilda - vega-ce.ct.infn.it:2119/jobmanager-lcgsge-gilda - dgt01.ui.savba.sk:2119/jobmanager-lcgpbs-gilda - ce.hpc.iit.bme.hu:2119/jobmanager-lcgpbs-gilda - ce.scope.unina.it:2119/jobmanager-lcgpbs-egee_short - sirius-ce.ct.infn.it:2119/jobmanager-lcgpbs-gilda - grid010.ct.infn.it:2119/jobmanager-lcgpbs-gilda - iceage-ce-01.ct.infn.it:2119/jobmanager-lcgpbs-gilda ==========================================================================

22. 22 References  INFNGrid installation http://igrelease.forge.cnaf.infn.it/doku.php?id=doc:guides:install-3_1