1. FP6−2004−Infrastructures−6-SSA-026634 http://www.euchinagrid.org User Interface Installation Valeria Ardizzone INFN – Catania Grid tutorial for users and system administrators Beijing, 03-07 April 2006

2. Valeria Ardizzone, INFN Catania  Grid tutorial for users and system administrators  Beijing, 03-07.04.2006  What is a User Interface (UI) ?  How to install a User Interface.  How to configure a User Interface. Outline

3. Valeria Ardizzone, INFN Catania  Grid tutorial for users and system administrators  Beijing, 03-07.04.2006 What is a User Interface?  The UI is a suite of clients and API that users and applications can use to access the gLite services.  The gLite UI includes the following components: – VOMS command-line tools – Workload Management System clients and APIs – Logging and Bookkeeping clients and APIs – Data Transfer command-line clients and APIs – Data Catalog command-line clients and APIs – gLite I/O client and APIs – R-GMA client and APIs

4. Valeria Ardizzone, INFN Catania  Grid tutorial for users and system administrators  Beijing, 03-07.04.2006 Installing User Interface (UI)

5. Valeria Ardizzone, INFN Catania  Grid tutorial for users and system administrators  Beijing, 03-07.04.2006 Node Syncronization with NTP  Syncronization among all nodes is mandatory. It can be achieved by the NTP protocol with a time server  Install ntp if not already available for your system : >apt-get install ntp  Add your time server in /etc/ntp.conf restrict mask 255.255.255.255 nomodify notrap noquery server (you can use ntp-1.infn.it – IP 193.206.144.10)  Edit /etc/ntp/step-tickers adding your(s) time server(s) hostname  If you are running a firewall, you will have to allow inbound comminication on the NTP port: -A INPUT -s -p udp --dport 123 -j ACCEPT  Activate the ntpd service with the following commands: >ntpdate >service ntpd start >chkconfig ntpd on >ntpq –p = ntp-1.infn.it

6. Valeria Ardizzone, INFN Catania  Grid tutorial for users and system administrators  Beijing, 03-07.04.2006 Installation Pre-requisites  Start from a fresh install of SLC 3.0.x and verify that apt is installed and properly configured: >rpm -qa | grep apt Install apt if necessary: >rpm -ivh http://linuxsoft.cern.ch/cern/slc30X/i386/SL/RPMS/apt-0.5.15cnc6- 8.SL.cern.i386.rpmhttp://linuxsoft.cern.ch/cern/slc30X/i386/SL/RPMS/apt-0.5.15cnc6- 8.SL.cern.i386.rpm  Java SDK is required to install almost any LCG/gLite grid service. Due to license issues, it is not found in the LCG repositories. So please download and install a release of Sun Java SDK >= 1.4.2_08 from http://java.sun.com/j2se/1.4.2/download.htmlhttp://java.sun.com/j2se/1.4.2/download.html >chmod +x j2sdk-1_4_2_11-linux-i586-rpm.bin >./j2sdk-1_4_2_11-linux-i586-rpm.bin > rpm -ivh j2sdk-1_4_2_11-linux-i586.rpm Preparing... ########################################### [100%] 1:j2sdk ########################################### [100%]

7. Valeria Ardizzone, INFN Catania  Grid tutorial for users and system administrators  Beijing, 03-07.04.2006 Security pre-requisites  If you plan to use certificates released by unsupported EGEE CA’s, be sure that their public key, signing policy and CRLs (usually distributed with an rpm) are installed in /etc/grid-security/certificates. For the VO GILDA, the RPM is available from https://gilda.ct.infn.it/RPMS/ca_GILDA-0.28.1.i386.rpm Install it with the command: >rpm –ivh ca_GILDA-1.0-1.i386.rpm

8. Valeria Ardizzone, INFN Catania  Grid tutorial for users and system administrators  Beijing, 03-07.04.2006 Installing User Interface via apt 1. Create the file glite.list in the /etc/apt/sources.list.d directory and put this row on it: rpm http://211.71.7.254 glite_1.4-i386 1_4 externals updateshttp://211.71.7.254 glite_1.4-i386 1_4 2. Digit the following commands: >apt-get update >apt-get dist-upgrade 3. Install User Interface: >apt-get install glite-ui-config See http://glite.web.cern.ch/glite/packages/APT.asp

9. Valeria Ardizzone, INFN Catania  Grid tutorial for users and system administrators  Beijing, 03-07.04.2006 Installing User Interface via apt  If the installation is performed successfully, the following components are installed: – gLite in /opt/glite – Globus in /opt/globus – GPT in /opt/gpt

10. Valeria Ardizzone, INFN Catania  Grid tutorial for users and system administrators  Beijing, 03-07.04.2006 Installation of VOMS Certificate  Install the GILDA's VOMS server host certificates gilda-voms.ct.infn.it.pem, e voms.ct.infn.it.pem, in the directory /etc/grid- security/vomsdir  Edit the /opt/glite/etc/vomses file as follow: "gilda" "voms.ct.infn.it" "15001" "/C=IT/O=GILDA/OU=Host/L=INFN Catania/CN=voms.ct.infn.it/Email=emidio.giorgio@ct.infn.it" "gilda“  Or install the following rpm file: >rpm –ivh glite-voms-vo-gilda-1.0-0.noarch.rpm (download from http://grid018.ct.infn.it/apt/gilda_app-i386/RPMS/glite-voms-vo-gilda-1.0- 0.noarch.rpm)

11. Valeria Ardizzone, INFN Catania  Grid tutorial for users and system administrators  Beijing, 03-07.04.2006 User Interface Configuration  Configuration comes through the execution of pyhton scripts, which takes as input XML files.  So services have to be configured by editing these XML files.  Attributes in XML file are well commented and selfexplaining.  XML files are provided as templates, under /opt/glite/etc/config/templates  Copy templates file to /opt/glite/etc/config  Edit each of them separately.  Then we could launch the configurator scripts for the User Interface.

12. Valeria Ardizzone, INFN Catania  Grid tutorial for users and system administrators  Beijing, 03-07.04.2006 User Interface Configuration (cont.) List of XML files to configure:  Glite-global.cfg.xml  Glite-security-utils.cfg.xml  Glite-rgma-common.cfg.xml  Glite-rgma-client.cfg.xml  Glite-io-client.cfg.xml  Glite-file transfer-service-client-cfg.xml  Glite-services-discovery.cfg.xml  Glite-ui-cfg.xml  Glite-service-discovery.file-based-example-cfg.xml

13. Valeria Ardizzone, INFN Catania  Grid tutorial for users and system administrators  Beijing, 03-07.04.2006 glite-global.cfg.xml <JAVA_HOME description="Environment variable pointing to the SUN Java JRE or J2SE package for example '/usr/java/j2re1.4.2_08/' or '$JAVA_HOME' (if it is defined as an environment variable)" value="/usr/java/j2sdk-1.4.2_11"/> Check your java package installed.

14. Valeria Ardizzone, INFN Catania  Grid tutorial for users and system administrators  Beijing, 03-07.04.2006 glite-security-utils.cfg.xml <cron.mailto description="E-mail address for sending cron job notifications“ value=“siteadmin@yourdomain"/>

15. Valeria Ardizzone, INFN Catania  Grid tutorial for users and system administrators  Beijing, 03-07.04.2006 glite-rgma-common.cfg.xml <rgma.server.hostname value="rgmasrv.ct.infn.it"/> <rgma.schema.hostname value="rgmasrv.ct.infn.it"/> <rgma.registry.hostname rgmasrv.ct.infn.it

16. Valeria Ardizzone, INFN Catania  Grid tutorial for users and system administrators  Beijing, 03-07.04.2006 glite-io-client.cfg.xml …. <service-discovery.file.service_name description="The globally unique name of the service. The convention is serviceHostName_voName_serviceType (for serviceType see parameter servicediscovery. file.service_type).“ value="IOServerGILDA"/> <service-discovery.file.url_endpoint description="URL endpoint of the service. The host name is the name of your io server, the port depends on your vo.“ value=“gliteio://egee015.cnaf.infn.it:9999"/>

17. Valeria Ardizzone, INFN Catania  Grid tutorial for users and system administrators  Beijing, 03-07.04.2006 glite-file-transfer-service-client.cfg.xml (1)

18. Valeria Ardizzone, INFN Catania  Grid tutorial for users and system administrators  Beijing, 03-07.04.2006 glite-file-transfer-serviceclient.cfg.xml (2) <service-discovery.file.service_version value="3.0.0"/>

19. Valeria Ardizzone, INFN Catania  Grid tutorial for users and system administrators  Beijing, 03-07.04.2006 glite-service-discovery.cfg.xml (1)

20. Valeria Ardizzone, INFN Catania  Grid tutorial for users and system administrators  Beijing, 03-07.04.2006 glite-service-discovery.cfg.xml (2) <service-discovery.vo description="Default VO to be used to find a friendly VO. Leave the parameter empty if you don't want to specify a default VO. Example: EGEE [Type: 'string']" value="gilda"/> <service-discovery.bdii.provider description="Host and port of the BDII service for service discovery.Leave empty or remove parameter if you do not use BDII as information provider.Example: lxb1386.cern.ch:2170 [Type: 'string']“ value="grid004.ct.infn.it:2170"/>

21. Valeria Ardizzone, INFN Catania  Grid tutorial for users and system administrators  Beijing, 03-07.04.2006 glite-ui.cfg.xml (1) <set description="Unique name of the set. It might be set to the VO name. [Example: EGEE] [Type: 'string']“ name="gilda"> <ui.VirtualOrganisation description="Name of the VO corresponding to this set. [Example: EGEE] [Type: 'string']" name="gilda">

22. Valeria Ardizzone, INFN Catania  Grid tutorial for users and system administrators  Beijing, 03-07.04.2006 glite-ui.cfg.xml (2) <ui.NSAddresses description="List of NSserver:port pairs corresponding to the given VO"> <item description="Network Server address and port on which the network server is running separated by the ':' character. In case of multiple Network Servers this tag can be repeated. [Example: lxb1420.cern.ch:7772] [Type: 'string']" value="glite-rb.ct.infn.it:7772"> <ui.LBAddresses description="List of Logging and Bookkeeping server address:port pairs corresponding to the given Network Server. Example: lxb1419.cern.ch:9000] [Type: 'string]"> glite-rb.ct.infn.it:9000

23. Valeria Ardizzone, INFN Catania  Grid tutorial for users and system administrators  Beijing, 03-07.04.2006 glite-ui.cfg.xml (3)

24. Valeria Ardizzone, INFN Catania  Grid tutorial for users and system administrators  Beijing, 03-07.04.2006 glite-ui.cfg.xml (4) <py-ui.requirements value=‘other.GlueCEStateStatus == "Production"'/>

25. Valeria Ardizzone, INFN Catania  Grid tutorial for users and system administrators  Beijing, 03-07.04.2006 glite-ui.cfg.xml (5)

26. Valeria Ardizzone, INFN Catania  Grid tutorial for users and system administrators  Beijing, 03-07.04.2006 glite-ui.cfg.xml (6) <service-discovery.file.service_name value="SEIndexGILDA"/> <service-discovery.file.url_endpoint value="https://grid017.ct.infn.it:8443/gilda/glite-data- catalog-service-fr-mysql/services/SEIndex"/>

27. Valeria Ardizzone, INFN Catania  Grid tutorial for users and system administrators  Beijing, 03-07.04.2006  In order to obtain a correct files configuration, is important to delete from all.XML file the contained string “changeme” and replace it with empty string if necessary. Configuration Note:

28. Valeria Ardizzone, INFN Catania  Grid tutorial for users and system administrators  Beijing, 03-07.04.2006 Post configuration In order to commit configuration, execute the script in /opt/glite/etc/config/scripts./glite-uiconfig.py To assure the correct functionality of the gLite UI it is necessary to add, as root, the following rows in /etc/profile source /etc/glite/profile.d/glite_setenv.sh PATH=$PATH:/opt/glite/externals/myproxy- 1.14/bin:/opt/lcg/bin:/opt/lcg/sbin LD_LIBRARY_PATH=$LD_LIBRARY_PATH:/opt/glite/externals/myproxy- 1.14/lib:/opt/lcg/lib

29. Valeria Ardizzone, INFN Catania  Grid tutorial for users and system administrators  Beijing, 03-07.04.2006  Using one of the client just installed to required a grid services, but remember to create a user and to copy its certificate files (usercert.pem and userkey.pem) in the default dir ~/.globus. Functionality Test

30. Valeria Ardizzone, INFN Catania  Grid tutorial for users and system administrators  Beijing, 03-07.04.2006 Good Lucky for your Installation!