1. www.egi.eu EGI-InSPIRE RI-261323 EGI Training for AEGIS Site Administrators EGI-InSPIRE N G I A E G I S EGI Training for AEGIS Site Administrators Institute of Physics Belgrade EGI-InSPIRE RI-261323 EGI Training for AEGIS Site Administrators www.egi.eu User Interface (UI) Nikola Grkic Institute of Physics Belgrade Serbia ngrkic@ipb.ac.rs 07/03/2011 Strahinja Kustudic Faculty of Electric Engineering, Belgrade Serbia kustodian@etf.rs

2. www.egi.eu EGI-InSPIRE RI-261323 EGI Training for AEGIS Site Administrators gLite UI List all the resources suitable to execute a given job Submit jobs for execution Cancel jobs Retrieve the output of finished jobs Show the status of submitted jobs Retrieve the logging and bookkeeping information of jobs Copy, replicate and delete files from the Grid Retrieve the status of different resources from the Information System

3. www.egi.eu EGI-InSPIRE RI-261323 EGI Training for AEGIS Site Administrators Configure ntp First thing we should do is setup ntp: # Example of configuration file /etc/ntp.conf can be found on # http://glite.ipb.ac.rs/GLITE-3/ntp.confhttp://glite.ipb.ac.rs/GLITE-3/ntp.conf vim /etc/ntp.conf # Create /etc/ntp.drift and /etc/ntp.drift.TEMP files that # should be owned by ntp.ntp: touch /etc/ntp.drift /etc/ntp.drift.TEMP chown ntp.ntp /etc/ntp.drift /etc/ntp.drift.TEMP # Set ntp daemon to launch on system startup chkconfig ntpd on # Start ntp service (if it’s not started) service ntpd restart # Example of configuration file /etc/ntp.conf can be found on # http://glite.ipb.ac.rs/GLITE-3/ntp.confhttp://glite.ipb.ac.rs/GLITE-3/ntp.conf vim /etc/ntp.conf # Create /etc/ntp.drift and /etc/ntp.drift.TEMP files that # should be owned by ntp.ntp: touch /etc/ntp.drift /etc/ntp.drift.TEMP chown ntp.ntp /etc/ntp.drift /etc/ntp.drift.TEMP # Set ntp daemon to launch on system startup chkconfig ntpd on # Start ntp service (if it’s not started) service ntpd restart

4. www.egi.eu EGI-InSPIRE RI-261323 EGI Training for AEGIS Site Administrators Repository Configuration Add scl-glite-UI.repo and egi-trustanchors.repo repositories to /etc/yum.repos.d/ # cd to /etc/yum.repos.d/ cd /etc/yum.repos.d/ # Download the latest version of the scl-glite-UI.repo wget http://rpm.scl.rs/yum.conf/gLite/R3.2/scl-glite-UI.repo # Download the latest version of the egi-trustanchors.repo wget http://rpm.scl.rs/yum.conf/gLite/R3.2/egi-trustanchors.repo # cd to /etc/yum.repos.d/ cd /etc/yum.repos.d/ # Download the latest version of the scl-glite-UI.repo wget http://rpm.scl.rs/yum.conf/gLite/R3.2/scl-glite-UI.repo # Download the latest version of the egi-trustanchors.repo wget http://rpm.scl.rs/yum.conf/gLite/R3.2/egi-trustanchors.repo

5. www.egi.eu EGI-InSPIRE RI-261323 EGI Training for AEGIS Site Administrators Installing glite-UI Now we need to install lcg-CA and java compatibility packages: After this we can install glite-UI group: yum install lcg-CA yum install java-1.6.0-sun-compat.x86_64 yum install lcg-CA yum install java-1.6.0-sun-compat.x86_64 # First we need to enable the DAG repo by setting enabled to 1 vim /etc/yum.repos.d/dag.repo # (set enabled=1) # Install glite-UI yum groupinstall glite-UI # Disable the DAG repo, since it’s not needed anymore vim /etc/yum.repos.d/dag.repo # (set enabled=0) # First we need to enable the DAG repo by setting enabled to 1 vim /etc/yum.repos.d/dag.repo # (set enabled=1) # Install glite-UI yum groupinstall glite-UI # Disable the DAG repo, since it’s not needed anymore vim /etc/yum.repos.d/dag.repo # (set enabled=0)

6. www.egi.eu EGI-InSPIRE RI-261323 EGI Training for AEGIS Site Administrators Configuring Yaim After you configured groups.conf, site- info.def, users.conf, wn-list.conf and vo.d # Append /opt/glite/yaim/bin to the PATH # variable in ~/.bash_profile, so it looks like this: # PATH=$PATH:$HOME/bin:/opt/glite/yaim/bin vim ~/.bash_profile # Append /opt/glite/yaim/bin to the PATH # variable in ~/.bash_profile, so it looks like this: # PATH=$PATH:$HOME/bin:/opt/glite/yaim/bin vim ~/.bash_profile # Now start yaim with the following arguments # so it configures glite-UI: yaim -c -s /site-info.def -n glite-UI # Now start yaim with the following arguments # so it configures glite-UI: yaim -c -s /site-info.def -n glite-UI

7. www.egi.eu EGI-InSPIRE RI-261323 EGI Training for AEGIS Site Administrators Check vomses If yaim finishes without any errors, you need to check if vomses are correct: # cd to /opt/glite/etc/vomses/ and check if all files have the # name of the institution written between a single pair of # quotes. If there are more quotes, delete them! cd /opt/glite/etc/vomses/ cat aegis-voms.ipb.ac.rs "aegis" "voms.ipb.ac.rs" "15001" "/C=RS/O=AEGIS/OU=Institute of Physics" "Belgrade/CN=host/voms.ipb.ac.rs" "aegis“ # Quotation marks colored in red need to be deleted. # cd to /opt/glite/etc/vomses/ and check if all files have the # name of the institution written between a single pair of # quotes. If there are more quotes, delete them! cd /opt/glite/etc/vomses/ cat aegis-voms.ipb.ac.rs "aegis" "voms.ipb.ac.rs" "15001" "/C=RS/O=AEGIS/OU=Institute of Physics" "Belgrade/CN=host/voms.ipb.ac.rs" "aegis“ # Quotation marks colored in red need to be deleted.

8. www.egi.eu EGI-InSPIRE RI-261323 EGI Training for AEGIS Site Administrators Public and Private Keys Create usercert.pem and userkey.pem from your signed certificate and copy to ~/.globus: # Go to your home folder and make a.globus directory: cd mkdir.globus # Generate your public key: openssl pkcs12 -clcerts -nokeys -in ~/YOUR_CERT.p12 -out usercert.pem # Generate your private key: openssl pkcs12 -nocerts -in ~/YOUR_CERT.p12 -out userkey.pem # Only you should be able to read your private key chmod 400 userkey.pem # Everyone should be able to read your public key chmod 644 usercert.pem # Go to your home folder and make a.globus directory: cd mkdir.globus # Generate your public key: openssl pkcs12 -clcerts -nokeys -in ~/YOUR_CERT.p12 -out usercert.pem # Generate your private key: openssl pkcs12 -nocerts -in ~/YOUR_CERT.p12 -out userkey.pem # Only you should be able to read your private key chmod 400 userkey.pem # Everyone should be able to read your public key chmod 644 usercert.pem

9. www.egi.eu EGI-InSPIRE RI-261323 EGI Training for AEGIS Site Administrators Does It Work? Now that we added our user keys, we can test if everything works correctly: # You need to import /opt/glite/etc/profile.d/grid-env.sh source /opt/glite/etc/profile.d/grid-env.sh # or you can append that to your ~/.bash_profile so it will # import every time you login echo "source /opt/glite/etc/profile.d/grid-env.sh" >> ~/.bash_profile # Try to do a voms-proxy-init for your VO: voms-proxy-init --voms aegis # Check if it has been created correctly: voms-proxy-info -all # You need to import /opt/glite/etc/profile.d/grid-env.sh source /opt/glite/etc/profile.d/grid-env.sh # or you can append that to your ~/.bash_profile so it will # import every time you login echo "source /opt/glite/etc/profile.d/grid-env.sh" >> ~/.bash_profile # Try to do a voms-proxy-init for your VO: voms-proxy-init --voms aegis # Check if it has been created correctly: voms-proxy-info -all

10. www.egi.eu EGI-InSPIRE RI-261323 EGI Training for AEGIS Site Administrators Links http://rpm.scl.rs/yum.conf/gLite/R3.2/