1. www.eu-eela.eu E-science grid facility for Europe and Latin America Riccardo Bruno INFN-Catania (Italy) EELA-2 Tutorial Cuanca (Ecuador), 02-05.02.2010 gLite UI Installation and config (EELA-2)

2. www.eu-eela.eu Cuenca (Ecuador), EELA-2 User and Sys Admin Tutorial, 02-05.02.2010 2 The instructions provided in this presentation assume that you are going to use a machine with Scientific Linux 4.6 installed. –Virtual Machine image (GILDA VM Base_SLC4.6_i386) available at: https://gilda.ct.infn.it/VirtualServices.html https://gilda.ct.infn.it/VirtualServices.html or –SL 4.6 distribution available at: https://www.scientificlinux.org/downloadhttps://www.scientificlinux.org/download Preliminaries

3. www.eu-eela.eu Cuenca (Ecuador), EELA-2 User and Sys Admin Tutorial, 02-05.02.2010 3 Repository settings Specify the mrepo host: Configure the repository as follows: Get repositories with: To get a full mirror of GILDA repository: wget -mp -nH -np http://grid018.ct.infn.it/mrepo/http://grid018.ct.infn.it/mrepo/ Then replace baseurl filed in any.repo file inside repos/ directorty REPOS="ca ig jpackage glite-ui dag gilda" for name in $REPOS; do wget $MREPO/repos/$name.repo -O /etc/yum.repos.d/$name.repo; done for name in $REPOS; do wget $MREPO/repos/$name.repo -O /etc/yum.repos.d/$name.repo; done export MREPO=http://www.cedia.org.ec/mrepo/ (Tutorial) export MREPO=http://grid018.ct.infn.it/mrepo (GILDA) export MREPO=http://www.cedia.org.ec/mrepo/ (Tutorial) export MREPO=http://grid018.ct.infn.it/mrepo (GILDA)

4. www.eu-eela.eu Cuenca (Ecuador), EELA-2 User and Sys Admin Tutorial, 02-05.02.2010 4 System requirements Please check: –If you have a valid hostname –To verify, type: hostname -f –To edit the hostname:  vim /etc/hosts  vim /etc/hostname  vim /etc/sysconfig/network  hostname  vim /etc/hosts  vim /etc/hostname  vim /etc/sysconfig/network  hostname

5. www.eu-eela.eu Cuenca (Ecuador), EELA-2 User and Sys Admin Tutorial, 02-05.02.2010 With YUM it is possible to exploit its package caching mechanism to speed up the installation process –Download cached files:  wget http://www.cedia.org.ec/generic/UI_yum_cache.tar.gz –Install cached packages:  tar xvfz UI_yum_cache.tar.gz –C /var/cache/yum The installed packages will avoid YUM to download files from the network before to install them 5 YUM cache

6. www.eu-eela.eu Cuenca (Ecuador), EELA-2 User and Sys Admin Tutorial, 02-05.02.2010 6 g++ Compiler required GILDA VM Base does not provide dev tools: yum install -y gcc-c++ ( gcc-c++ includes the mandatory package libstdc++-devel ) yum install -y gcc-c++ ( gcc-c++ includes the mandatory package libstdc++-devel )

7. www.eu-eela.eu Cuenca (Ecuador), EELA-2 User and Sys Admin Tutorial, 02-05.02.2010 7 INFN Grid UI metapackage yum install -y ig_UI_noafs http://igrelease.forge.cnaf.infn.it/doku.php?id=doc:guides:install-3_1

8. www.eu-eela.eu Cuenca (Ecuador), EELA-2 User and Sys Admin Tutorial, 02-05.02.2010 8 System requirements Missing dependency xerces 2.7 (2.8 requilred by RGMA) Download the 2.7 from the web: wget ftp://mirror.switch.ch/pool/1/mirror/epel/4/x86_64/xerces- c-2.7.0-8.el4.i386.rpm ftp://mirror.switch.ch/pool/1/mirror/epel/4/x86_64/xerces- c-2.7.0-8.el4.i386.rpm wget http://temuco02.dis.ufro.cl/varios/xerces-c- 2.7.0-8.el4.i386.rpm http://temuco02.dis.ufro.cl/varios/xerces-c- 2.7.0-8.el4.i386.rpm In case the xercers 2.8 exsists; remove it: rpm -e --nodeps xerces-c-2.8.0-1.slc4 Install the 2.7: rpm -ivh xerces-c-2.7.0-8.el4.i386.rpm Download the 2.7 from the web: wget ftp://mirror.switch.ch/pool/1/mirror/epel/4/x86_64/xerces- c-2.7.0-8.el4.i386.rpm ftp://mirror.switch.ch/pool/1/mirror/epel/4/x86_64/xerces- c-2.7.0-8.el4.i386.rpm wget http://temuco02.dis.ufro.cl/varios/xerces-c- 2.7.0-8.el4.i386.rpm http://temuco02.dis.ufro.cl/varios/xerces-c- 2.7.0-8.el4.i386.rpm In case the xercers 2.8 exsists; remove it: rpm -e --nodeps xerces-c-2.8.0-1.slc4 Install the 2.7: rpm -ivh xerces-c-2.7.0-8.el4.i386.rpm Processing Dependency: libxerces-c.so.27 is needed by package glite-rgma-api-cpp

9. www.eu-eela.eu Cuenca (Ecuador), EELA-2 User and Sys Admin Tutorial, 02-05.02.2010 9 Got an error? Try again the yum command: rpm -e --nodeps jdk-1.5.0_14-fcs Processing Dependency: jdk = 2000:1.5.0_14-fcs for package: java-1.5.0-sun-compat yum install -y ig_UI_noafs

10. www.eu-eela.eu Cuenca (Ecuador), EELA-2 User and Sys Admin Tutorial, 02-05.02.2010 10 Recognition of Certification Authorities: Install GILDA’ voms server certificates (needed for proxy creation and validation) : You may skip following statements since they depend on: gilda_utils Install GILDA configurations: gilda_utils CAs & GILDA Utils yum install -y lcg-CA yum install -y gilda_utils wget http://grid018.ct.infn.it/mrepo/gilda_s l4-i386/RPMS.all/gilda-vomscert-1.0- 2.noarch.rpm http://grid018.ct.infn.it/mrepo/gilda_s l4-i386/RPMS.all/gilda-vomscert-1.0- 2.noarch.rpm rpm –ivh gilda-vomscert-1.0- 2.noarch.rpmgilda-vomscert-1.0- 2.noarch.rpm wget http://grid018.ct.infn.it/mrepo/gilda_s l4-i386/RPMS.all/gilda-vomscert-1.0- 2.noarch.rpm http://grid018.ct.infn.it/mrepo/gilda_s l4-i386/RPMS.all/gilda-vomscert-1.0- 2.noarch.rpm rpm –ivh gilda-vomscert-1.0- 2.noarch.rpmgilda-vomscert-1.0- 2.noarch.rpm

11. www.eu-eela.eu Cuenca (Ecuador), EELA-2 User and Sys Admin Tutorial, 02-05.02.2010 11 site-info.def Copy the ig-site-info.def script template Open your own site-info.def and customize it: cp /opt/glite/yaim/examples/siteinfo/ig-site- info.def $HOME/mysite-info.def vi $HOME/mysite-info.def

12. www.eu-eela.eu Cuenca (Ecuador), EELA-2 User and Sys Admin Tutorial, 02-05.02.2010 12 RB_HOST=glite-rb.ct.infn.it BDII_HOST=gilda-bdii.ct.infn.it WMS_HOST=gilda-wms-01.ct.infn.it LB_HOST="gilda-lb-01.ct.infn.it:9000" PX_HOST=myproxy.ct.infn.it LFC_HOST=lfc-gilda.ct.infn.it DPM_HOST=aliserv6.ct.infn.it JAVA_LOCATION=/usr/java/j2re-1.4.2_16 !(please verify if the JAVA_LOCATION is correct) Setup site-info.def

13. www.eu-eela.eu Cuenca (Ecuador), EELA-2 User and Sys Admin Tutorial, 02-05.02.2010 13 Add GILDA Settings VOS="… gilda"  Add gilda here [..] ######### # gilda # ######### VO_GILDA_VOMS_CA_DN="/C=IT/O=INFN/OU=Host/L=Catania/ CN=voms.ct.infn.it" VO_GILDA_SW_DIR=$VO_SW_DIR/gilda VO_GILDA_DEFAULT_SE=$DPM_HOST VO_GILDA_STORAGE_DIR=$CLASSIC_STORAGE_DIR/gilda VO_GILDA_VOMS_SERVERS="vomss://voms.ct.infn.it:8443/ voms/gilda?/gilda" VO_GILDA_VOMSES="gilda voms.ct.infn.it 15001 /C=IT/O=INFN/OU=Host/L=Catania/CN=voms.ct.infn.it gilda"

14. www.eu-eela.eu Cuenca (Ecuador), EELA-2 User and Sys Admin Tutorial, 02-05.02.2010 14 Configuring the UI for GILDA Configure the UI with YAIM /opt/glite/yaim/bin/yaim -c -s $HOME/mysite-info.def -n glite-UI If everithing is ok, the UI is now READY for testing NOTICE! YAIM does not configure the LFC_HOST variable; please add the following line into the file: /opt/glite/etc/profile.d/grid-env.sh gridenv_set "LFC_HOST" "lfc-gilda.ct.infn.it"

15. www.eu-eela.eu Cuenca (Ecuador), EELA-2 User and Sys Admin Tutorial, 02-05.02.2010 Testing the UI Add new user and copy user’ PEM certificates: Test: Create a proxy (voms-proxy-init) Use Information system commands (lcg-infosites) Use LFC/LCG commands Use Job submission/controll/output retrieval commands 15 adduser gildauser passwd gildauser su – gildauser scp –rp cuencaXX@glite-tutor.ct.infn.it:.globus.XX@glite-tutor.ct.infn.it:.globus adduser gildauser passwd gildauser su – gildauser scp –rp cuencaXX@glite-tutor.ct.infn.it:.globus.XX@glite-tutor.ct.infn.it:.globus

16. www.eu-eela.eu Cuenca (Ecuador), EELA-2 User and Sys Admin Tutorial, 02-05.02.2010 16 From GILDA to EELA The installation steps above may be changed in order to install UI able to operate with other VOs (EELA-2) Steps required: Install VOMS certificates Customize site-info.def values with new services Renew the CRLs in case you added a CA Reconfigure the UI with YAIM

17. www.eu-eela.eu Cuenca (Ecuador), EELA-2 User and Sys Admin Tutorial, 02-05.02.2010 17 Configuring the UI for EELA-2 Using the Latin American services: BDII_HOST=bdii.eela.ufrj.br WMS_HOST=wms.eela.ufrj.br LB_HOST="lb2.eela.ufrj.br:9000" PX_HOST=px.eela.ufrj.br LFC_HOST=lfc.eela.ufrj.br DPM_HOST= (*) JAVA_LOCATION=/usr/java/j2re-1.4.2_16 # please verify (*) lcg-infosites --vo prod.vo.eu-eela.eu se The site-info.def for LA Users can be downloaded from: http://eoc.eu-eela.eu/files/EELA-2VOs.tgz http://eoc.eu-eela.eu/files/EELA-2VOs.tgz The site-info.def for LA Users can be downloaded from: http://eoc.eu-eela.eu/files/EELA-2VOs.tgz http://eoc.eu-eela.eu/files/EELA-2VOs.tgz

18. www.eu-eela.eu Cuenca (Ecuador), EELA-2 User and Sys Admin Tutorial, 02-05.02.2010 18 Configuring the UI to access EELA-2 Using the European services: BDII_HOST=bdii-eela.ceta-ciemat.es WMS_HOST=wms-eela.ceta-ciemat.es LB_HOST="lb-eela.ceta-ciemat.es:9000" PX_HOST=px-eela.ceta-ciemat.es LFC_HOST=lfc-eela.ceta-ciemat.es DPM_HOST= JAVA_LOCATION=/usr/java/jdk1.6.0_13 # please verify NOTICE! The list of available EELA-2 services is published by the address: http://eoc.eu-eela.eu/doku.php?id=central_services

19. www.eu-eela.eu Cuenca (Ecuador), EELA-2 User and Sys Admin Tutorial, 02-05.02.2010 19 Adding EELA-2 VO settings VOS=”gilda alice atlas... " [...] ############################ # Specific Settings (PROD) # ############################ SW_DIR=$VO_SW_DIR/prod DEFAULT_SE=$DPM_HOST STORAGE_DIR=$CLASSIC_STORAGE_DIR/prod QUEUES="prod" VOMS_SERVERS="vomss://voms.eela.ufrj.br:8443/voms/prod.vo.eu- eela.eu?/prod.vo.eu-eela.eu" VO_PROD_VO_EU_EELA_EU_VOMSES="'prod.vo.eu-eela.eu voms.eela.ufrj.br 15003 /C=BR/O=ICPEDU/O=UFF BrGrid CA/O=UFRJ/OU=IF/CN=host/voms.eela.ufrj.br prod.vo.eu-eela.eu' 'prod.vo.eu-eela.eu voms-eela.ceta-ciemat.es 15003 /DC=es/DC=irisgrid/O=ceta-ciemat/CN=host/voms-eela.ceta-ciemat.es prod.vo.eu-eela.eu'" VOMS_CA_DN="'/C=BR/O=ICPEDU/O=UFF BrGrid CA/CN=UFF Brazilian Grid Certification Authority' '/DC=es/DC=irisgrid/CN=IRISGridCA'" VO_PROD_VO_EU_EELA_EU_VOMS_CA_DN="subject= /C=BR/O=ICPEDU/O=UFF BrGrid CA/O=UFRJ/OU=IF/CN=host/voms.eela.ufrj.br" Add prod.vo.eu-eela.eu oper.vo.eu-eela.eu Add prod.vo.eu-eela.eu oper.vo.eu-eela.eu

20. www.eu-eela.eu Cuenca (Ecuador), EELA-2 User and Sys Admin Tutorial, 02-05.02.2010 20 Adding EELA-2 settings ############################ # Specific Settings (OPER) # ############################ SW_DIR=$VO_SW_DIR/oper DEFAULT_SE=$DPM_HOST STORAGE_DIR=$CLASSIC_STORAGE_DIR/oper QUEUES="oper" VOMS_SERVERS="vomss://voms.eela.ufrj.br:8443/voms/oper.vo.eu- eela.eu?/oper.vo.eu-eela.eu“ VO_OPER_VO_EU_EELA_EU_VOMSES="'oper.vo.eu-eela.eu voms.eela.ufrj.br 15004 /C=BR/O=ICPEDU/O=UFF BrGrid CA/O=UFRJ/OU=IF/CN=host/voms.eela.ufrj.br oper.vo.eu-eela.eu' 'oper.vo.eu-eela.eu voms-eela.ceta-ciemat.es 15004 /DC=es/DC=irisgrid/O=ceta-ciemat/CN=host/voms-eela.ceta-ciemat.es oper.vo.eu-eela.eu'" VOMS_CA_DN="'/C=BR/O=ICPEDU/O=UFF BrGrid CA/CN=UFF Brazilian Grid Certification Authority' '/DC=es/DC=irisgrid/CN=IRISGridCA'" VO_PROD_VO_EU_EELA_EU_VOMS_CA_DN=” "

21. www.eu-eela.eu Cuenca (Ecuador), EELA-2 User and Sys Admin Tutorial, 02-05.02.2010 21 Recognition of Certification Authorities: Install EELA-2's voms server certificates (needed for proxy creation and validation) : – wget http://gaia.eela.if.ufrj.br/mrepo/eela4x- i386/RPMS.generic/eela-vomscerts-5.0.1-1.noarch.rpm wget http://gaia.eela.if.ufrj.br/mrepo/eela4x- i386/RPMS.generic/eela-vomscerts-5.0.1-1.noarch.rpm – rpm –ivh eela-vomscerts-5.0.1-1.noarch.rpmeela-vomscerts-5.0.1-1.noarch.rpm Get new CRLs (in case you added a CA) – cd /etc/grid-security/certificates – fetch-crl Reconfigure UI – /opt/glite/yaim/bin/yaim -c –s $HOME/mysite- info.def -n glite-UI GILDA to EELA-2 yum install -y lcg-CA

22. www.eu-eela.eu Cuenca (Ecuador), EELA-2 User and Sys Admin Tutorial, 02-05.02.2010 22 LFC_HOST is not configured by yaim –Open the file: /opt/glite/etc/profile.d/grid-env.sh –Insert the following entry inside the bash if block gridenv_set "LFC_HOST" " " Configuring the LFC host EELA-2 (LA)EELA-2 (Europe) lfc.eela.ufrj.brlfc-eela.ceta-ciemat.es

23. www.eu-eela.eu Cuenca (Ecuador), EELA-2 User and Sys Admin Tutorial, 02-05.02.2010 23 References  INFNGrid installation http://igrelease.forge.cnaf.infn.it/doku.php?id=doc:guides:install-3_1 http://igrelease.forge.cnaf.infn.it/doku.php?id=doc:guides:install-3_1  EELA-2 Operations Centre http://eoc.eu-eela.eu http://eoc.eu-eela.eu  How to deploy your own User Interface http://eoc.eu-eela.eu/doku.php?id=deploy_your_own_eela-2_uihttp://eoc.eu-eela.eu/doku.php?id=deploy_your_own_eela-2_ui  GILDA Site installation https://grid.ct.infn.it/twiki/bin/view/GILDA/GILDASiteInstallhttps://grid.ct.infn.it/twiki/bin/view/GILDA/GILDASiteInstall  middleware-ports.txt http://glite.cvs.cern.ch/cgi-bin/glite.cgi/org.glite.site-info.ports/doc/middleware- ports.txt?revision=1.15&view=markup http://glite.cvs.cern.ch/cgi-bin/glite.cgi/org.glite.site-info.ports/doc/middleware- ports.txt?revision=1.15&view=markup

24. www.eu-eela.eu Cuenca (Ecuador), EELA-2 User and Sys Admin Tutorial, 02-05.02.2010 24 www.eu-eela.eu Questions?