1. Fourth EELA Tutorial for Managers and Users www.eu-eela.org E-infrastructure shared between Europe and Latin America User Interface installation and configuration Yubiryn Ramírez ULA – Mérida - Venezuela Fourth EELA Tutorial for Managers and Users Mexico City, 28 August – 01 September 2006

2. E-infrastructure shared between Europe and Latin America Fourth EELA Tutorial, México City, 28 August - 01 September 2006 2 Outline What is a UI? Installing User Interface –Installation pre-requisites –Security pre-requisites –site-info.def –UI Installation and Configuration –Default VO Testing User Interface

3. E-infrastructure shared between Europe and Latin America Fourth EELA Tutorial, México City, 28 August - 01 September 2006 3 What is a UI? The UI is a suite of clients and API that users and applications can use to access the gLite services. The gLite UI includes the following components: –VOMS command-line tools –Workload Management System clients and APIs –Logging and Bookkeeping clients and APIs –Data Transfer command-line clients and APIs –Data Catalog command-line clients and APIs –gLite I/O client and APIs –R-GMA client and APIs

4. E-infrastructure shared between Europe and Latin America Fourth EELA Tutorial, México City, 28 August - 01 September 2006 4 Installing User Interface

5. E-infrastructure shared between Europe and Latin America Fourth EELA Tutorial, México City, 28 August - 01 September 2006 5 Pre-requisites (1) Start from a fresh install of SLC 3.0.x Verify that apt is installed and properly configured –Install apt if necessary: rpm -ivh http://linuxsoft.cern.ch/cern/slc30X/i386/SL/RPMS/ apt-0.5.15cnc6-8.SL.cern.i386.rpm http://linuxsoft.cern.ch/cern/slc30X/i386/SL/RPMS/ apt-0.5.15cnc6-8.SL.cern.i386.rpm Extra packages needed (non freely distributable) : –Sun Java SDK >= 1.4.2_08 from : http://java.sun.com/j2se/1.4.2/download.html http://java.sun.com/j2se/1.4.2/download.html

6. E-infrastructure shared between Europe and Latin America Fourth EELA Tutorial, México City, 28 August - 01 September 2006 6 Pre-requisites (2) Install ntp if not already available for your system: apt-get install ntp Add your time server in /etc/ntp.conf restrict 193.206.144.10 mask 255.255.255.255 nomodify notrap noquery server ntp-1.infn.it Edit /etc/ntp/step-tickers adding your(s) time server(s) hostname If you are running a firewall, you will have to allow inbound comminication on the NTP port: -A INPUT -s -p udp --dport 123 -j ACCEPT Activate the ntpd service with the following commands: ntpdate cronos.cenam.mx service ntpd start chkconfig ntpd on You can check ntpd’s status with : ntpq -p

7. E-infrastructure shared between Europe and Latin America Fourth EELA Tutorial, México City, 28 August - 01 September 2006 7 Pre-requisites (3) Add gLite apt repository –Create the file glite.list in the /etc/apt/sources.list.d directory and put this row on it: rpm http://glitesoft.cern.ch/EGEE/gLite/APT/R1.4/ rhel30 externals Release1.4 updateshttp://glitesoft.cern.ch/EGEE/gLite/APT/R1.4/ Update apt repository apt-get update apt-get upgrade Install glite-yaim-3.0.0 rpm http://glitesoft.cern.ch/EGEE/gLite/APT/R3.0/rhel30/RPMS.Relea se3.0/glite-yaim-3.0.0 http://glitesoft.cern.ch/EGEE/gLite/APT/R3.0/rhel30/RPMS.Relea se3.0/glite-yaim-3.0.0 Install gilda_ig-yaim-3.0.0 rpm http://grid018.ct.infn.it/apt/gilda_app- i386/utils/gilda_ig-yaim-3.0.0http://grid018.ct.infn.it/apt/gilda_app- i386/utils/gilda_ig-yaim-3.0.0

8. E-infrastructure shared between Europe and Latin America Fourth EELA Tutorial, México City, 28 August - 01 September 2006 8 Security pre-requisites Request a X509 host certificate for the User Interface you are going to install from a Certification Autority (CA). For example, to get host certificates from the GILDA CA, go to: https://gilda.ct.infn.it/CA/mgt/restricted/srvreq.php https://gilda.ct.infn.it/CA/mgt/restricted/srvreq.php Install host certificates (hostcert.pem and hostkey.pem) in /etc/grid-security chmod 644 hostcert.pem chmod 400 hostkey.pem If you plan to use certificates released by unsupported EGEE CA’s, be sure that their public key, signing policy and CRLs (usually distributed with an rpm) are installed in /etc/grid-security/certificates –For the VO GILDA, the RPM is available from https://gilda.ct.infn.it/RPMS/ca_GILDA-1.0-2.i386.rpm

9. E-infrastructure shared between Europe and Latin America Fourth EELA Tutorial, México City, 28 August - 01 September 2006 9 site-info.def (1) Copy the yaim configuration template file: cp /opt/glite/yaim/examples/gilda_ig-site-info.def /root/my-site-info.def Open /root/my-site-info.def file using a text editor and set the following values according to your grid environment: MY_DOMAIN=super.unam.mx CE_HOST=gilda-ce.eela.ifufrj.br RB_HOST=glite-rb.ct.infn.it WMS_HOST=eela-138.$MY_DOMAIN PX_HOST=grid001.ct.infn.it BDII_HOST=eela-136.$MY_DOMAIN MON_HOST=rgmasrv.ct.infn.it FTS_HOST=fts.$MY_DOMAIN REG_HOST=rgmasrv.ct.infn.it

10. E-infrastructure shared between Europe and Latin America Fourth EELA Tutorial, México City, 28 August - 01 September 2006 10 site-info.def (2) Set the repositories: OS_REPOSITORY="rpm http://eela-136.super.unam.mx/rep slc306-i386 os updates extras"http://eela-136.super.unam.mx/rep LCG_REPOSITORY="rpm http://eela-136.super.unam.mx/rep glite_sl3- i386 3_0 3_0_externals 3_0_updates"http://eela-136.super.unam.mx/rep IG_REPOSITORY="rpm http://eela-136.super.unam.mx/rep ig_sl3-i386 3_0_0 utils"http://eela-136.super.unam.mx/rep GILDA_REPOSITORY="rpm http://eela-136.super.unam.mx/rep gilda_app-i386 app 3_0_0"http://eela-136.super.unam.mx/rep CA_REPOSITORY="rpm http://eela-136.super.unam.mx/rep glite_sl3-i386 security"http://eela-136.super.unam.mx/rep

11. E-infrastructure shared between Europe and Latin America Fourth EELA Tutorial, México City, 28 August - 01 September 2006 11 site-info.def (3) Add LFC settings: LFC_HOST=eela-131.$MY_DOMAIN Check/Modify VO and VOMS specific configurations: VOS=“gilda alice eumed eela euchina … ALL_VOS=“gilda alice eumed eela euchina … ALL_VOMS=“gilda alice eumed eela euchina … #Specific VO settings VO_ _ =…

12. E-infrastructure shared between Europe and Latin America Fourth EELA Tutorial, México City, 28 August - 01 September 2006 12 UI Installation and Configuration Install the UI: /opt/glite/bin/gilda_ig_install_node /root/my-site- info.def GILDA_ig_UI This command will download and install all the needed packages Configure the UI: /opt/glite/bin/gilda_ig_configure_node /root/my- site-info.def GILDA_ig_UI

13. E-infrastructure shared between Europe and Latin America Fourth EELA Tutorial, México City, 28 August - 01 September 2006 13 !WARNING! Due to a bug on VOMS RPM Please verify the content of file: /opt/glite/etc/vomses/gilda-voms.ct.infn.it It must be: "gilda" "voms.ct.infn.it" "15001" "/C=IT/O=GILDA/OU=Host/L=INFN Catania/CN=voms.ct.infn.it/Email=emidio.giorgio@ct.infn.it" "gilda“

14. E-infrastructure shared between Europe and Latin America Fourth EELA Tutorial, México City, 28 August - 01 September 2006 14 Default VO You can set the default Virtual Organization for user accessing your UI editing the file /opt/glite/etc/glite_wmsui_cmd_var.conf [ ErrorStorage = "/tmp/glite/glite-ui" ; DefaultLogInfoLevel = 1 ; LoggingTimeout = 10 ; rank = - other.GlueCEStateEstimatedResponseTime ; NSLoggerLevel = 1 ; LoggingSyncTimeout = 10 ; DefaultVo = "gilda" ;  Set your default VO here OutputStorage = "/tmp/glite/glite-ui" ; ListenerStorage = "/tmp/glite/glite-ui" ; RetryCount = 3 ; DefaultStatusLevel = 1 ; requirements = other.GlueCEStateStatus == "Production" ; ]

15. E-infrastructure shared between Europe and Latin America Fourth EELA Tutorial, México City, 28 August - 01 September 2006 15 Testing User Interface

16. E-infrastructure shared between Europe and Latin America Fourth EELA Tutorial, México City, 28 August - 01 September 2006 16 Create user account # adduser # passwd Log on with user account # su – gildauser Create.globus directory # mkdir.globus Copy your own certificates to the UI in directory.globus Verify permissions of the certificates # chmod 400 userkey.pem # chmod 644 usercert.pem

17. E-infrastructure shared between Europe and Latin America Fourth EELA Tutorial, México City, 28 August - 01 September 2006 17 References gLite v3.0 Advanced Installation and Configuration Guide –http://glite.web.cern.ch/glite/packages/R3.0/R20060502/doc/inst allation_guide_3.0-2.htmlhttp://glite.web.cern.ch/glite/packages/R3.0/R20060502/doc/inst allation_guide_3.0-2.html Gilda site install instructions –https://gilda.ct.infn.it/docs/GILDAsiteinstall-3_0_0.htmlhttps://gilda.ct.infn.it/docs/GILDAsiteinstall-3_0_0.html

18. E-infrastructure shared between Europe and Latin America Fourth EELA Tutorial, México City, 28 August - 01 September 2006 18 Questions …