WMS enabled with SBGrid VO for WeNMR testing job submission to OSG

prod-wms-01.pd.infn.it is an EGI production EMI-WMS that can be used by WeNMR for job submission to OSG sites through the VO SBGrid (with /SBGrid/WeNMR VOMS proxies) or through VO enmr.eu.

How to configure this WMS in order to enable the SBGrid VO

• add in yaim variable VOS the VO "sbgrid" (small letters) in gw-master:/opt/nfs_install/3_1/nodes/prod-wms-01.pd.infn.it and reconfigure
• copy from the following directory with small letters:

   cp -r /etc/grid-security/vomsdir/sbgrid /etc/grid-security/vomsdir/SBGrid 

• add the following lines in files grid-mapfile e voms-grid-mapfile in /etc/grid-security/ (already there as sbgrid in small letters)

        "/SBGrid/*/Role=NULL/Capability=NULL" .sbgrid
        "/SBGrid/*" .sbgrid
        "/SBGrid/Role=NULL/Capability=NULL" .sbgrid
        "/SBGrid" .sbgrid 

• add the following lines in file /etc/grid-security/groupmapfile (already there as sbgrid in small letters)

        "/SBGrid/*/Role=NULL/Capability=NULL" sbgrid
        "/SBGrid/*" sbgrid
        "/SBGrid/Role=NULL/Capability=NULL" sbgrid
        "/SBGrid" sbgrid 

• add in file /etc/glite-wms/glite_wms_wmproxy.gacl

        <entry>
        <voms>
        <fqan>SBGrid/*</fqan>
        </voms>
        <allow>
        <exec/>
        </allow>
        </entry>
        <entry>
        <voms>
        <fqan>SBGrid</fqan>
        </voms>
        <allow>
        <exec/>
        </allow>
        </entry> 

• add the file /etc/grid-security/vomsdir/hpc.sbgrid.org.pem (obtained through the command openssl s_client -ssl3 -connect hpc.sbgrid.org:15002 | openssl x509)

-- MarcoVerlato - 2012-07-18