Difference: SystemAdministratorGuideForEMI2 (23 vs. 24)

Revision 242012-12-13 - LisaZangrando

Line: 1 to 1
 
META TOPICPARENT name="SystemAdministratorDocumentation"

System Administrator Guide for CREAM for EMI-2 release

Line: 540 to 540
 

0.0.1 Configuration of a CREAM CE node in no cluster mode

Changed:
<
<

0.0.0.1 Install host certificate

>
>

0.0.0.1 Install the host certificate

  The CREAM CE node requires the host certificate/key files to be installed. Contact your national Certification Authority (CA) to understand how to obtain a host certificate if you do not have one already.
Line: 558 to 558
 
Added:
>
>
0.0.0.0.1 What to do in case of host certificate update
There are two possible approaches: via YAIM or by manually.

via YAIM:

  • copy the new certificate (i.e. hostcert.pem, hostkey.pem) into the /etc/grid-security directory
  • set the proper mode and ownerships doing:
chown root.root /etc/grid-security/hostcert.pem
chown root.root /etc/grid-security/hostkey.pem
chmod 600 /etc/grid-security/hostcert.pem
chmod 400 /etc/grid-security/hostkey.pem
  • reconfigure CREAM via YAIM

by manually:

  • copy the new certificate (i.e. hostcert.pem, hostkey.pem) into the /etc/grid-security and /home/glite/.certs/ directories
  • make a copy of the new certificate as following:
cp /etc/grid-security/hostcert.pem /etc/grid-security/tomcat-cert.pem
cp /etc/grid-security/hostkey.pem /etc/grid-security/tomcat-key.pem
  • set the proper mode and ownerships doing:
chown root.root /etc/grid-security/hostcert.pem
chown root.root /etc/grid-security/hostkey.pem
chown root.root /etc/grid-security/tomcat-cert.pem
chown root.root /etc/grid-security/tomcat-key.pem
chown root.root /home/glite/.certs/hostcert.pem
chown root.root /home/glite/.certs/hostkey.pem
chmod 600 /etc/grid-security/hostcert.pem
chmod 400 /etc/grid-security/hostkey.pem
chmod 600 /etc/grid-security/tomcat-cert.pem
chmod 400 /etc/grid-security//tomcat-key.pem
chmod 600 /home/glite/.certs/hostcert.pem
chmod 400 /home/glite/.certs/hostkey.pem
  • restart the following services:
    • tomcat5 on SL5 (or tomcat6 on SL6)
    • globus-gridftp
    • LB
 

0.0.0.1 Configuration via yaim

 
This site is powered by the TWiki collaboration platformCopyright © 2008-2020 by the contributing authors. All material on this collaboration platform is the property of the contributing authors.
Ideas, requests, problems regarding TWiki? Send feedback