Service Reference Card

Daemons running

The following processes should run on a CREAM CE:

• tomcat5
• blahpd. This is automatically started by starting tomcat
• Resource bdii
• Gridftp server: globus-gridftp
• glite-lb-locallogge: glite-lb-logd and glite-lb-interlogd
• mysqld (actually mysqld could be deployed and run in another machine different than the CREAM CE)
• New blparser daemons (bnotifier and bupdater) if the new BLAH blparser is used
• Old blparser daemon (xxx) if the old BLAH blparser is used. xxx runs where the batch system log files are available (which can be the CREAM CE node or a different node)

* BLAH blparser

This can be started via the /opt/glite/etc/init.d/glite-ce-blparser init script

The BLAH blparser runs where the batch system log files are available (which can be the CREAM CE node or a different node)

Init scripts and options (start|stop|restart|...)

• Init script for tomcat: /etc/init.d/tomcat5 {start|stop|restart|condrestart|try-restart|reload|force-reload|status|version}

• Init script for resource bdii: /etc/init.d/bdii {start|stop|restart|condrestart|status}

• Init script for gridftp server: /etc/init.d/globus-gridftp {start|stop|restart|status}

• Init script for LB locallogger: /opt/glite/etc/init.d/glite-lb-locallogger {start,stop,restart,status}

• Init script for mysql: /etc/init.d/mysqld {start|stop|status|condrestart|restart}

• Init script for old blparser: /opt/glite/etc/init.d/glite-ce-blparser {start|stop|restart|status}

• Init script for new blparser: xxx. Actually the new blparser is automatically started by blahpd, which is started by tomcat

Configuration files location with example or template

Logfile locations (and management) and other useful audit information

Open ports

Possible unit test of the service

Where is service state held (and can it be rebuilt)

Cron jobs

Security information

Access control Mechanism description (authentication & authorization)

How to block/ban a user

Network Usage

Firewall configuration

Security recommendations

Security incompatibilities

List of externals (packages are NOT maintained by Red Hat)

Other security relevant comments

Utility scripts

-- MassimoSgaravatto - 2011-04-07