Difference: NotesAboutInstallationAndConfigurationOfMyproxy (4 vs. 5)

Revision 52012-01-03 - PaoloVeronesi

Line: 1 to 1
 
META TOPICPARENT name="WebHome"

Notes about Installation and Configuration of myproxy

  • These notes are provided by site admins on a best effort base as a contribution to the IGI communities and MUST not be considered as a subsitute of the Official IGI documentation.
Line: 8 to 8
 NB: The myproxy service is a CORE service, it should not be installed at Resource Center level. The official endpoint provided by IGI is myproxy.cnaf.infn.it and MUST be used by all Resource Centers and Services part of the IGI infrastructure.
Added:
>
>
<--/twistyPlugin twikiMakeVisibleInline-->
 

References

  1. About IGI - Italian Grid infrastructure
  2. About IGI Release
  3. IGI Official Installation and Configuration guide
  4. Troubleshooting Guide for Operational Errors on EGI Sites
  5. Grid Administration FAQs page
Added:
>
>
<--/twistyPlugin-->

<--/twistyPlugin twikiMakeVisibleInline-->
 

Reccommendations

  • The service needs at least:
Line: 21 to 39
 
    • 3 GB RAM
    • 10 GB disk space.
A full virtualized machine based on KVM has been used in the following notes.
Added:
>
>
<--/twistyPlugin-->

<--/twistyPlugin twikiMakeVisibleInline-->
 

O.S. and Repos

  • Starts from a fresh installation of Scientific Linux 5.x (x86_64).
Line: 55 to 83
 epel.repo epel-testing.repo sl-contrib.repo sl-fastbugs.repo sl-security.repo sl-testing.repo sl-debuginfo.repo sl.repo sl-srpms.repo
Added:
>
>
<--/twistyPlugin-->
 
Added:
>
>
<--/twistyPlugin twikiMakeVisibleInline-->
 

Update host and perform the installation of package(s)

# yum clean all
Line: 358 to 395
 Complete!

Added:
>
>
<--/twistyPlugin-->
 
Added:
>
>
<--/twistyPlugin twikiMakeVisibleInline-->
 

Service configuration

The configuration file for this service is really basic. For autorization:
Line: 519 to 565
 '/C=IT/O=INFN/OU=Host/L=CNAF/CN=sb-serv01.cr.cnaf.infn.it' "
Added:
>
>
<--/twistyPlugin-->
 
Added:
>
>
<--/twistyPlugin twikiMakeVisibleInline-->
 

host certificate required

# ll /etc/grid-security/host*
-rw-r--r-- 1 root root 1440 Dec 29 09:30 /etc/grid-security/hostcert.pem
-r-------- 1 root root  887 Dec 29 09:30 /etc/grid-security/hostkey.pem
Added:
>
>
<--/twistyPlugin-->
 
Added:
>
>
<--/twistyPlugin twikiMakeVisibleInline-->
 

YAIM check

#  chmod -R 600 /root/siteinfo
Line: 572 to 636
 
INFO
controlled in the _check functions.
INFO
YAIM terminated succesfully.
Added:
>
>
<--/twistyPlugin-->
 
Added:
>
>
<--/twistyPlugin twikiMakeVisibleInline-->
 

YAIM config

Please use the debug flag ( "-d 6") to configure the services in order to have detailed information. For your convenience yo can save all the configuration information in a log file you can look at any time, separated from the yaimlog defulat one.
Line: 704 to 777
 
# chkconfig myproxy-server on
Added:
>
>
<--/twistyPlugin-->
 

Service checks

Added:
>
>
<--/twistyPlugin twikiMakeVisibleInline-->
 
myproxy-init
On a user interface:
Line: 738 to 821
 -rw------- 1 myproxy myproxy 132 Dec 29 10:03 veronesi-veronesi-test.data -rw------- 1 myproxy myproxy 5912 Dec 29 10:03 veronesi-veronesi-test.creds
Added:
>
>
<--/twistyPlugin-->
 
Added:
>
>
<--/twistyPlugin twikiMakeVisibleInline-->
 
myproxy-info
On a user interface:
Line: 758 to 850
 Dec 29 10:42:08 myproxy myproxy-server[9209]: Received INFO request for username veronesi Dec 29 10:42:08 myproxy myproxy-server[9209]: Client /C=IT/O=INFN/OU=Personal Certificate/L=CNAF/CN=Paolo Veronesi disconnected
Added:
>
>
<--/twistyPlugin-->
 
Added:
>
>
<--/twistyPlugin twikiMakeVisibleInline-->
 
myproxy-get-delegation
On a user interface:
Line: 778 to 879
 Dec 29 11:01:08 myproxy myproxy-server[31270]: Client /C=IT/O=INFN/OU=Personal Certificate/L=CNAF/CN=Paolo Veronesi disconnected
Added:
>
>
<--/twistyPlugin-->
 
Added:
>
>
<--/twistyPlugin twikiMakeVisibleInline-->
 

Additional notes

In order to make the WMS renewal function it is necessary:
  1. To include the DN of the WMS that process the jobs among the authorized renewers on the MyProxy server, i.e. to add authorized_renewers DN to the configuration and restart the server;
  2. Upload the proxy of the job submitter in the MyProxy server using myproxy-init -s myproxy_server -d -n
  3. Submit the job with the MyProxy server hostname being given in the JDL
Changed:
<
<
>
>
<--/twistyPlugin-->
 

Revision

 
This site is powered by the TWiki collaboration platformCopyright © 2008-2021 by the contributing authors. All material on this collaboration platform is the property of the contributing authors.
Ideas, requests, problems regarding TWiki? Send feedback