Line: 1 to 1 | ||||||||
---|---|---|---|---|---|---|---|---|
| ||||||||
Changed: | ||||||||
< < | System Administrator Guide for CEMon | |||||||
> > | System Administrator Guide for CEMon for EMI-1 | |||||||
Line: 1 to 1 | ||||||||
---|---|---|---|---|---|---|---|---|
System Administrator Guide for CEMon | ||||||||
Changed: | ||||||||
< < | 1 Operations/Installation and Configuration | |||||||
> > | 1 Installation and Configuration | |||||||
0.1 Prerequisites | ||||||||
Line: 93 to 93 | ||||||||
Running the script available at http://forge.cnaf.infn.it/frs/download.php/101/disable_yum.sh![]() | ||||||||
Changed: | ||||||||
< < | 0.0.1 Operations/Installation of CEMon | |||||||
> > | 0.0.1 Installation of CEMon | |||||||
In EMI, CEMon is installed as part of the CREAM-CE. So the following instructions refer to the installation of the CREAM CE. | ||||||||
Line: 127 to 127 | ||||||||
Changed: | ||||||||
< < | 0.0.1 Operations/Installation of the CEMon CLI | |||||||
> > | 0.0.1 Installation of the CEMon CLI | |||||||
The CEMon CLI is part of the EMI-UI. To install it please refer to the Generic Installation & Configuration Guide![]() |
Line: 1 to 1 | ||||||||
---|---|---|---|---|---|---|---|---|
System Administrator Guide for CEMon | ||||||||
Changed: | ||||||||
< < | 1 Installation and Configuration | |||||||
> > | 1 Operations/Installation and Configuration | |||||||
0.1 Prerequisites | ||||||||
Line: 93 to 93 | ||||||||
Running the script available at http://forge.cnaf.infn.it/frs/download.php/101/disable_yum.sh![]() | ||||||||
Changed: | ||||||||
< < | 0.0.1 Installation of CEMon | |||||||
> > | 0.0.1 Operations/Installation of CEMon | |||||||
In EMI, CEMon is installed as part of the CREAM-CE. So the following instructions refer to the installation of the CREAM CE. | ||||||||
Line: 127 to 127 | ||||||||
Changed: | ||||||||
< < | 0.0.1 Installation of the CEMon CLI | |||||||
> > | 0.0.1 Operations/Installation of the CEMon CLI | |||||||
The CEMon CLI is part of the EMI-UI. To install it please refer to the Generic Installation & Configuration Guide![]() |
Line: 1 to 1 | ||||||||
---|---|---|---|---|---|---|---|---|
System Administrator Guide for CEMon | ||||||||
Line: 129 to 129 | ||||||||
0.0.1 Installation of the CEMon CLI | ||||||||
Changed: | ||||||||
< < | The CEMon CLI is part of the EMI-UI. To install it please refer to xxx. | |||||||
> > | The CEMon CLI is part of the EMI-UI. To install it please refer to the Generic Installation & Configuration Guide![]() | |||||||
0.1 Configuration |
Line: 1 to 1 | ||||||||
---|---|---|---|---|---|---|---|---|
System Administrator Guide for CEMon | ||||||||
Line: 236 to 236 | ||||||||
By default only the CREAM job sensor is enabled. | ||||||||
Changed: | ||||||||
< < | To enable/disable a specific sensor, it is just necessary to uncomment/comment the sensor definition in the CEMon configuration file. Then it is necessary to restart tomcat | |||||||
> > | To enable/disable a specific sensor, it is just necessary to uncomment/comment the sensor definition in the CEMon configuration file. Please note that then it is NOT necessary to restart tomcat | |||||||
Added: | ||||||||
> > | 0.1 How to add a static subscription | |||||||
Added: | ||||||||
> > | There are two types of subscriptions:
/etc/glite-ce-monitor/cemonitor-config.xml .
An example of static subscription settings is this one:
<subscription id="subscription-1" subscriberId="_C_IT_O_INFN_OU_Personal_Certificate_L_Padova_CN_Massimo_Sgaravatto_dteam_Role_NULL_Capability_NULL" subscriberGroup="dteam" monitorConsumerURL="https://cream-47.pd.infn.it:8788" sslprotocol="SSLv3" retryCount="-1"> <topic name="CREAM_JOBS"> <dialect name="CLASSAD" /> </topic> <policy rate="60" /> </subscription>After having added/removed a static subscription, it is NOT necessary to restart tomcat. | |||||||
-- MassimoSgaravatto - 2011-04-20 |
Line: 1 to 1 | ||||||||
---|---|---|---|---|---|---|---|---|
Added: | ||||||||
> > |
System Administrator Guide for CEMon1 Installation and Configuration1.1 Prerequisites1.1.1 Operating systemA standard 64 bit SL(C)5 distribution is supposed to be properly installed.1.1.2 Node synchronizationA general requirement for the Grid nodes is that they are synchronized. This requirement may be fulfilled in several ways. One of the most common one is using theNTP protocol with a time server.
1.2 Plan how to deploy CEMon1.2.1 Choose the authorization modelCEMon can be configured to use as authorization system:
USE_ARGUS must be set in the following way:
USE_ARGUS=yesIn this case it is also necessary to set the following yaim variables:
USE_ARGUS must be set in the following way:
USE_ARGUS=no 1.2.2 RepositoriesFor a successful installation, you will need to configure your package manager to reference a number of repositories (in addition to your OS);
1.2.2.1 The EPEL repositoryYou can install the EPEL repository, issuing:rpm -Uvh http://download.fedora.redhat.com/pub/epel/5/i386/epel-release-5-4.noarch.rpm 1.2.2.2 The EMI middleware repositoryThe EMI-1 RC4 repository can be found under:http://emisoft.web.cern.ch/emisoft/dist/EMI/1/RC4/sl5/x86_64To use yum, the yum repo to be installed in /etc/yum.repos.d can be found at https://twiki.cern.ch/twiki/pub/EMI/EMI-1/rc4.repo![]() 1.2.2.3 The Certification Authority repositoryThe most up-to-date version of the list of trusted Certification Authorities (CA) is needed on your node. The relevant yum repo can be installed issuing:wget http://repository.egi.eu/sw/production/cas/1/current/repo-files/egi-trustanchors.repo -O /etc/yum.repos.d/egi-trustanchors.repo 1.2.2.4 Important note on automatic updatesAn update of an RPM not followed by configuration can cause problems. Therefore WE STRONGLY RECOMMEND NOT TO USE AUTOMATIC UPDATE PROCEDURE OF ANY KIND. Running the script available at http://forge.cnaf.infn.it/frs/download.php/101/disable_yum.sh![]() 1.2.3 Installation of CEMonIn EMI, CEMon is installed as part of the CREAM-CE. So the following instructions refer to the installation of the CREAM CE. First of all, install theyum-protectbase rpm:
yum install yum-protectbase.noarchThen proceed with the installation of the CA certificates: yum install ca-policy-egi-coreTo proceed the installation, install fSun JDK ( jdk ) or openjdk ( java-1.6.0-openjdk )
Then install xml-commons-apis :
yum install xml-commons-apisThis is due to a dependency problem within the Tomcat distribution Then install the CREAM-CE metapackage: yum install emi-cream-ce 1.2.4 Installation of the CEMon CLIThe CEMon CLI is part of the EMI-UI. To install it please refer to xxx.1.3 Configuration1.3.1 Using the YAIM configuration toolFor a detailed description on how to configure the middleware with YAIM, please check the YAIM guide![]() 1.3.2 Configuration of CEMon using yaimIn EMI, CEMon is installed and configured as part of the CREAM-CE1.3.2.1 Install host certificateThe CREAM CE node requires the host certificate/key files to be installed. Contact your national Certification Authority (CA) to understand how to obtain a host certificate if you do not have one already. Once you have obtained a valid certificate:
/etc/grid-security directory. Then set the proper mode and ownerships doing:
chown root.root /etc/grid-security/hostcert.pem chown root.root /etc/grid-security/hostkey.pem chmod 600 /etc/grid-security/hostcert.pem chmod 400 /etc/grid-security/hostkey.pem 1.3.2.2 Configure the siteinfo.def fileSet yoursiteinfo.def file, which is the input file used by yaim. Documentation about yaim variables relevant for CREAM CE is available at https://twiki.cern.ch/twiki/bin/view/LCG/Site-info_configuration_variables#cream_CE![]() USE_CEMON is set to true .
1.3.2.3 Run yaimAfter having filled thesiteinfo.def file, run yaim:
/opt/glite/yaim/bin/yaim -c -s <site-info.def> -n creamCE 1.3.3 Configuration of the CEMon CLIThe CEMon CLI is part of the EMI-UI. To configure it please refer to xxx.2 Operating the system2.1 How to start the CEMon serviceA site admin can start the CEMon service just starting the tomcat container:/etc/init.d/tomcat5 startTo stop the CEMon service, it is just necessary to stop the CEMon container: /etc/init.d/tomcat5 stop 2.2 Configuration filesInformation about configuration files in the CEMonis available at http://wiki.italiangrid.org/twiki/bin/view/CEMon/ServiceReferenceCard#Configuration_files_location_wit![]() 2.3 Log filesInformation about log files in the CREAM CE is available at http://wiki.italiangrid.org/twiki/bin/view/CEMon/ServiceReferenceCard#Logfile_locations_and_management![]() 2.4 Network portsInformation about ports used in the CREAM CE is available at http://wiki.italiangrid.org/twiki/bin/view/CEMon/ServiceReferenceCard#Open_ports![]() 2.5 Security related operations2.5.1 Security recommendationsSecurity recommendations relevant for CEMon is available at http://wiki.italiangrid.org/twiki/bin/view/CEMon/ServiceReferenceCard#Security_recommendations![]() 2.5.2 How to block/ban a userInformation about how to ban users is available at http://wiki.italiangrid.org/twiki/bin/view/CEMon/ServiceReferenceCard#How_to_block_ban_a_user![]() 2.5.3 How to block/ban a VOTo ban a VO, it is suggested to reconfigure the service via yaim without that VO in thesiteinfo.def
2.6 How to add/remove sensorsCEMon sensors that must be plugged in CEMon are defined in the CEMon configuration file (/etc/glite-ce-monitor/cemonitor-config.xml ).
Each active sensor is identified by a section that has the following format:
<sensor id=xxx ... ... /sensor>By default only the CREAM job sensor is enabled.
To enable/disable a specific sensor, it is just necessary to uncomment/comment the sensor definition in the CEMon configuration file. Then it is necessary to restart tomcat
-- MassimoSgaravatto - 2011-04-20 |