Notes about Installation and Configuration of a LFC server

  • These notes are provided by site admins on a best effort base as a contribution to the IGI communities and MUST not be considered as a subsitute of the Official IGI documentation.
  • This document is addressed to site administrators responsible for middleware installation and configuration.
  • The goal of this page is to provide some hints and examples on how to install and configure an IGI LFC server based on EMI/UMD middleware.

NB: LFC service is a CORE service, it should not be installed at Resource Center level. If you want to provide an official instances which will be added to the IGI endpoint, please contact igi-noc@lists.italiangrid.it

References

  1. EMI 1 Kebnekaise Products - LFC v. 1.8.2
  2. YAIM configuration variables
  3. About IGI - Italian Grid infrastructure
  4. About IGI Release
  5. IGI Official Installation and Configuration guide
  6. Troubleshooting Guide for Operational Errors on EGI Sites
  7. Grid Administration FAQs page

Recommendations and Sceanrios

  • A full virtualized machine based on KVM has been used in the following notes. There are three installation scenarios that can be follow.

Scenario 1 (all in one)

LFC frontend and backend are installed on the same server. The service needs at least two cores, 4 GB RAM, 10 GB disk space (disk space highly depends on the number of VOs that will be use the instance).

Scenario 2 ( n frontends and one backend)

In this scenario the frontend and the backend are installed on separate servers. The number of frontends could be higher than one for load balancing and high availability purpose.

Scenario 3 ( n forntends and high availability backend)

In this scenario the frontends and backends are installaed on separate server and the backend, based on mysql, is configured in high availability mode (master-master replica).

Service Installation

O.S. and Repos

  • Starts from a fresh installation of Scientific Linux 5.x (x86_64).
# cat /etc/redhat-release 
Scientific Linux SL release 5.7 (Boron)

  • Install the additional repositories: EPEL, Certification Authority, EMI
# cd /etc/yum.repos.d/
# rpm -ivh http://mirror.switch.ch/ftp/mirror/epel//5/x86_64/epel-release-5-4.noarch.rpm
# wget http://repo-pd.italiangrid.it/mrepo/repos/egi-trustanchors.repo
# rpm -ivh http://repo-pd.italiangrid.it/mrepo/EMI/1/sl5/x86_64/updates/emi-release-1.0.1-1.sl5.noarch.rpm
# yum install yum-priorities yum-protectbase

  • Be sure that SELINUX is disabled (or permissive). Details on how to disable SELINUX are here:
# getenforce 
Disabled

  • Check the repos list (sl-*.repo are the repos of the O.S. and they should be present by default).
# ls /etc/yum.repos.d/
emi1-base.repo emi1-updates.repo epel-testing.repo emi1-third-party.repo
sl-contrib.repo sl-fastbugs.repo sl-security.repo sl-testing.repo sl-debuginfo.repo  sl.repo  sl-srpms.repo
egi-trustanchors.repo    
epel.repo                    

Update host and perform the installation of middleware package(s)

# yum clean all
Loaded plugins: downloadonly, kernel-module, priorities, protect-packages, protectbase, security, verify, versionlock
Cleaning up Everything

# yum install -y ca-policy-egi-core emi-lfc_mysql
Loaded plugins: downloadonly, kernel-module, priorities, protect-packages, protectbase, security, verify, versionlock
263 packages excluded due to repository priority protections
0 packages excluded due to repository protections
Reading version lock configuration
Setting up Install Process
Package ca-policy-egi-core-1.46-1.noarch already installed and latest version
Resolving Dependencies
--> Running transaction check
---> Package emi-lfc_mysql.x86_64 0:1.8.2-3sec.sl5 set to be updated
--> Processing Dependency: lfc-devel for package: emi-lfc_mysql
--> Processing Dependency: emi-version for package: emi-lfc_mysql
--> Processing Dependency: voms for package: emi-lfc_mysql
--> Processing Dependency: glite-yaim-bdii for package: emi-lfc_mysql
--> Processing Dependency: python-lfc for package: emi-lfc_mysql
--> Processing Dependency: edg-mkgridmap for package: emi-lfc_mysql
--> Processing Dependency: fetch-crl for package: emi-lfc_mysql
--> Processing Dependency: bdii for package: emi-lfc_mysql
--> Processing Dependency: perl-lfc for package: emi-lfc_mysql
--> Processing Dependency: lcgdm-libs for package: emi-lfc_mysql
--> Processing Dependency: lfc for package: emi-lfc_mysql
--> Processing Dependency: lcgdm-devel for package: emi-lfc_mysql
--> Processing Dependency: LFC-server-mysql for package: emi-lfc_mysql
--> Processing Dependency: glue-schema for package: emi-lfc_mysql
--> Processing Dependency: lfc-yaim for package: emi-lfc_mysql
--> Processing Dependency: voms-devel for package: emi-lfc_mysql
--> Processing Dependency: lfc-libs for package: emi-lfc_mysql
--> Processing Dependency: glite-yaim-core for package: emi-lfc_mysql
--> Running transaction check
---> Package LFC-server-mysql.x86_64 0:1.8.2-3sec.sl5 set to be updated
--> Processing Dependency: libargus-pep.so.2()(64bit) for package: LFC-server-mysql
--> Processing Dependency: libgsoap.so.0()(64bit) for package: LFC-server-mysql
--> Processing Dependency: libglobus_gssapi_gsi.so.4()(64bit) for package: LFC-server-mysql
--> Processing Dependency: libglobus_gss_assist.so.3()(64bit) for package: LFC-server-mysql
---> Package bdii.noarch 0:5.2.10-1.el5 set to be updated
--> Processing Dependency: openldap-servers for package: bdii
--> Processing Dependency: expect for package: bdii
--> Processing Dependency: openldap-clients for package: bdii
---> Package edg-mkgridmap.noarch 0:4.0.0-1 set to be updated
--> Processing Dependency: perl(IO::Socket::SSL) >= 0.90 for package: edg-mkgridmap
--> Processing Dependency: perl(Net::SSLeay) >= 1.16 for package: edg-mkgridmap
--> Processing Dependency: perl(Net::LDAPS) for package: edg-mkgridmap
--> Processing Dependency: perl(URI::http) for package: edg-mkgridmap
--> Processing Dependency: perl(XML::Parser) for package: edg-mkgridmap
--> Processing Dependency: perl(URI) for package: edg-mkgridmap
--> Processing Dependency: perl(URI::ldap) for package: edg-mkgridmap
--> Processing Dependency: perl(Crypt::SSLeay) for package: edg-mkgridmap
--> Processing Dependency: perl(LWP) for package: edg-mkgridmap
--> Processing Dependency: perl(XML::DOM) for package: edg-mkgridmap
--> Processing Dependency: perl(Net::LDAP::Util) for package: edg-mkgridmap
--> Processing Dependency: perl(Net::LDAP) for package: edg-mkgridmap
--> Processing Dependency: perl(Date::Manip) for package: edg-mkgridmap
--> Processing Dependency: perl(Term::ReadKey) for package: edg-mkgridmap
--> Processing Dependency: perl(LWP::UserAgent) for package: edg-mkgridmap
---> Package emi-version.x86_64 0:1.10.0-1.sl5 set to be updated
---> Package fetch-crl.noarch 0:2.8.5-1.el5 set to be updated
---> Package glite-yaim-bdii.noarch 0:4.3.9-1.el5 set to be updated
---> Package glite-yaim-core.noarch 0:5.0.2-1.sl5 set to be updated
---> Package glue-schema.noarch 0:2.0.8-1.el5 set to be updated
---> Package lcgdm-devel.x86_64 0:1.8.2-3sec.sl5 set to be updated
---> Package lcgdm-libs.x86_64 0:1.8.2-3sec.sl5 set to be updated
---> Package lfc.x86_64 0:1.8.2-3sec.sl5 set to be updated
---> Package lfc-devel.x86_64 0:1.8.2-3sec.sl5 set to be updated
---> Package lfc-libs.x86_64 0:1.8.2-3sec.sl5 set to be updated
---> Package lfc-yaim.noarch 0:4.2.1-0.sl5 set to be updated
---> Package perl-lfc.x86_64 0:1.8.2-3sec.sl5 set to be updated
---> Package python-lfc.x86_64 0:1.8.2-3sec.sl5 set to be updated
---> Package voms.x86_64 0:2.0.7-1.el5 set to be updated
---> Package voms-devel.x86_64 0:2.0.7-1.el5 set to be updated
--> Processing Dependency: automake for package: voms-devel
--> Processing Dependency: openssl-devel for package: voms-devel
--> Running transaction check
---> Package argus-pep-api-c.x86_64 0:2.0.2-1.sl5 set to be updated
---> Package automake.noarch 0:1.9.6-2.3.el5 set to be updated
--> Processing Dependency: autoconf >= 2.58 for package: automake
---> Package expect.x86_64 0:5.43.0-5.1 set to be updated
---> Package globus-gss-assist.x86_64 0:8.1-2.el5 set to be updated
--> Processing Dependency: globus-gsi-sysconfig >= 5 for package: globus-gss-assist
--> Processing Dependency: globus-gsi-cert-utils >= 8 for package: globus-gss-assist
--> Processing Dependency: globus-common >= 14 for package: globus-gss-assist
--> Processing Dependency: globus-callout >= 2 for package: globus-gss-assist
--> Processing Dependency: libglobus_common.so.0(GLOBUS_COMMON_14)(64bit) for package: globus-gss-assist
--> Processing Dependency: libglobus_gsi_sysconfig.so.1()(64bit) for package: globus-gss-assist
--> Processing Dependency: libglobus_gsi_cert_utils.so.0()(64bit) for package: globus-gss-assist
--> Processing Dependency: libglobus_common.so.0()(64bit) for package: globus-gss-assist
--> Processing Dependency: libglobus_callout.so.0()(64bit) for package: globus-gss-assist
---> Package globus-gssapi-gsi.x86_64 0:10.2-2.el5 set to be updated
--> Processing Dependency: globus-openssl-module >= 3 for package: globus-gssapi-gsi
--> Processing Dependency: globus-gsi-proxy-core >= 6 for package: globus-gssapi-gsi
--> Processing Dependency: globus-gsi-openssl-error >= 2 for package: globus-gssapi-gsi
--> Processing Dependency: globus-gsi-credential >= 5 for package: globus-gssapi-gsi
--> Processing Dependency: globus-gsi-callback >= 4 for package: globus-gssapi-gsi
--> Processing Dependency: libglobus_openssl_error.so.0()(64bit) for package: globus-gssapi-gsi
--> Processing Dependency: libglobus_openssl.so.0()(64bit) for package: globus-gssapi-gsi
--> Processing Dependency: libglobus_gsi_proxy_core.so.0()(64bit) for package: globus-gssapi-gsi
--> Processing Dependency: libglobus_gsi_credential.so.1()(64bit) for package: globus-gssapi-gsi
--> Processing Dependency: libglobus_gsi_callback.so.0()(64bit) for package: globus-gssapi-gsi
---> Package gsoap.x86_64 0:2.7.13-4.el5 set to be updated
---> Package openldap-clients.x86_64 0:2.3.43-12.el5_6.7 set to be updated
---> Package openldap-servers.x86_64 0:2.3.43-12.el5_6.7 set to be updated
--> Processing Dependency: libltdl.so.3()(64bit) for package: openldap-servers
---> Package openssl-devel.x86_64 0:0.9.8e-22.el5_8.1 set to be updated
--> Processing Dependency: zlib-devel for package: openssl-devel
--> Processing Dependency: krb5-devel for package: openssl-devel
---> Package perl-Crypt-SSLeay.x86_64 0:0.51-11.el5 set to be updated
---> Package perl-DateManip.noarch 0:5.44-1.2.1 set to be updated
---> Package perl-IO-Socket-SSL.noarch 0:1.01-1.fc6 set to be updated
---> Package perl-LDAP.noarch 1:0.33-3.fc6 set to be updated
--> Processing Dependency: perl(Convert::ASN1) for package: perl-LDAP
--> Processing Dependency: perl(XML::SAX::Base) for package: perl-LDAP
---> Package perl-Net-SSLeay.x86_64 0:1.30-4.fc6 set to be updated
---> Package perl-TermReadKey.x86_64 0:2.30-5.el5 set to be updated
---> Package perl-URI.noarch 0:1.35-3 set to be updated
---> Package perl-XML-DOM.noarch 0:1.44-2.el5 set to be updated
--> Processing Dependency: perl(XML::RegExp) for package: perl-XML-DOM
---> Package perl-XML-Parser.x86_64 0:2.34-6.1.2.2.1 set to be updated
---> Package perl-libwww-perl.noarch 0:5.805-1.1.1 set to be updated
--> Processing Dependency: perl-HTML-Parser >= 3.33 for package: perl-libwww-perl
--> Processing Dependency: perl(HTML::Entities) for package: perl-libwww-perl
--> Processing Dependency: perl(Compress::Zlib) for package: perl-libwww-perl
--> Running transaction check
---> Package autoconf.noarch 0:2.59-12 set to be updated
--> Processing Dependency: imake for package: autoconf
---> Package globus-callout.x86_64 0:2.1-2.el5 set to be updated
---> Package globus-common.x86_64 0:14.5-4.el5 set to be updated
---> Package globus-gsi-callback.x86_64 0:4.1-2.el5 set to be updated
--> Processing Dependency: globus-gsi-proxy-ssl >= 4 for package: globus-gsi-callback
--> Processing Dependency: libglobus_proxy_ssl.so.1()(64bit) for package: globus-gsi-callback
---> Package globus-gsi-cert-utils.x86_64 0:8.1-2.el5 set to be updated
---> Package globus-gsi-credential.x86_64 0:5.1-2.el5 set to be updated
---> Package globus-gsi-openssl-error.x86_64 0:2.1-2.el5 set to be updated
---> Package globus-gsi-proxy-core.x86_64 0:6.1-2.el5 set to be updated
---> Package globus-gsi-sysconfig.x86_64 0:5.1-2.el5 set to be updated
---> Package globus-openssl-module.x86_64 0:3.1-2.el5 set to be updated
---> Package krb5-devel.x86_64 0:1.6.1-70.el5 set to be updated
--> Processing Dependency: libselinux-devel for package: krb5-devel
--> Processing Dependency: e2fsprogs-devel for package: krb5-devel
--> Processing Dependency: keyutils-libs-devel for package: krb5-devel
---> Package libtool-ltdl.x86_64 0:1.5.22-7.el5_4 set to be updated
---> Package perl-Compress-Zlib.x86_64 0:1.42-1.fc6 set to be updated
---> Package perl-Convert-ASN1.noarch 0:0.20-1.1 set to be updated
---> Package perl-HTML-Parser.x86_64 0:3.55-1.fc6 set to be updated
--> Processing Dependency: perl-HTML-Tagset >= 3.03 for package: perl-HTML-Parser
--> Processing Dependency: perl(HTML::Tagset) for package: perl-HTML-Parser
---> Package perl-XML-RegExp.noarch 0:0.03-2.el5 set to be updated
---> Package perl-XML-SAX.noarch 0:0.14-8 set to be updated
--> Processing Dependency: perl(XML::NamespaceSupport) for package: perl-XML-SAX
---> Package zlib-devel.x86_64 0:1.2.3-4.el5 set to be updated
--> Running transaction check
---> Package e2fsprogs-devel.x86_64 0:1.39-33.el5 set to be updated
---> Package globus-gsi-proxy-ssl.x86_64 0:4.1-2.el5 set to be updated
---> Package imake.x86_64 0:1.0.2-3 set to be updated
---> Package keyutils-libs-devel.x86_64 0:1.2-1.el5 set to be updated
---> Package libselinux-devel.x86_64 0:1.33.4-5.7.el5 set to be updated
--> Processing Dependency: libsepol-devel >= 1.15.2-1 for package: libselinux-devel
---> Package perl-HTML-Tagset.noarch 0:3.10-2.1.1 set to be updated
---> Package perl-XML-NamespaceSupport.noarch 0:1.09-1.2.1 set to be updated
--> Running transaction check
---> Package libsepol-devel.x86_64 0:1.15.2-3.el5 set to be updated
--> Finished Dependency Resolution
Beginning Kernel Module Plugin
Finished Kernel Module Plugin

Dependencies Resolved

===========================================================================================================================================================================================================================================
 Package                                                           Arch                                           Version                                                      Repository                                             Size
===========================================================================================================================================================================================================================================
Installing:
 emi-lfc_mysql                                                     x86_64                                         1.8.2-3sec.sl5                                               EMI-1-updates                                         3.8 k
Installing for dependencies:
 LFC-server-mysql                                                  x86_64                                         1.8.2-3sec.sl5                                               EMI-1-updates                                         694 k
 argus-pep-api-c                                                   x86_64                                         2.0.2-1.sl5                                                  EMI-1-base                                             53 k
 autoconf                                                          noarch                                         2.59-12                                                      sl-base                                               648 k
 automake                                                          noarch                                         1.9.6-2.3.el5                                                sl-base                                               476 k
 bdii                                                              noarch                                         5.2.10-1.el5                                                 EMI-1-updates                                          22 k
 e2fsprogs-devel                                                   x86_64                                         1.39-33.el5                                                  sl-base                                               637 k
 edg-mkgridmap                                                     noarch                                         4.0.0-1                                                      EMI-1-base                                             27 k
 emi-version                                                       x86_64                                         1.10.0-1.sl5                                                 EMI-1-updates                                         2.0 k
 expect                                                            x86_64                                         5.43.0-5.1                                                   sl-base                                               160 k
 fetch-crl                                                         noarch                                         2.8.5-1.el5                                                  epel                                                   24 k
 glite-yaim-bdii                                                   noarch                                         4.3.9-1.el5                                                  EMI-1-updates                                          10 k
 glite-yaim-core                                                   noarch                                         5.0.2-1.sl5                                                  EMI-1-updates                                         116 k
 globus-callout                                                    x86_64                                         2.1-2.el5                                                    epel                                                   17 k
 globus-common                                                     x86_64                                         14.5-4.el5                                                   epel                                                  131 k
 globus-gsi-callback                                               x86_64                                         4.1-2.el5                                                    epel                                                   42 k
 globus-gsi-cert-utils                                             x86_64                                         8.1-2.el5                                                    epel                                                   20 k
 globus-gsi-credential                                             x86_64                                         5.1-2.el5                                                    epel                                                   35 k
 globus-gsi-openssl-error                                          x86_64                                         2.1-2.el5                                                    epel                                                   16 k
 globus-gsi-proxy-core                                             x86_64                                         6.1-2.el5                                                    epel                                                   37 k
 globus-gsi-proxy-ssl                                              x86_64                                         4.1-2.el5                                                    epel                                                   18 k
 globus-gsi-sysconfig                                              x86_64                                         5.1-2.el5                                                    epel                                                   30 k
 globus-gss-assist                                                 x86_64                                         8.1-2.el5                                                    epel                                                   35 k
 globus-gssapi-gsi                                                 x86_64                                         10.2-2.el5                                                   epel                                                   57 k
 globus-openssl-module                                             x86_64                                         3.1-2.el5                                                    epel                                                   13 k
 glue-schema                                                       noarch                                         2.0.8-1.el5                                                  EMI-1-updates                                          33 k
 gsoap                                                             x86_64                                         2.7.13-4.el5                                                 epel                                                  444 k
 imake                                                             x86_64                                         1.0.2-3                                                      sl-base                                               318 k
 keyutils-libs-devel                                               x86_64                                         1.2-1.el5                                                    sl-base                                                27 k
 krb5-devel                                                        x86_64                                         1.6.1-70.el5                                                 sl-security                                           1.9 M
 lcgdm-devel                                                       x86_64                                         1.8.2-3sec.sl5                                               EMI-1-updates                                         199 k
 lcgdm-libs                                                        x86_64                                         1.8.2-3sec.sl5                                               EMI-1-updates                                         163 k
 lfc                                                               x86_64                                         1.8.2-3sec.sl5                                               EMI-1-updates                                         1.5 M
 lfc-devel                                                         x86_64                                         1.8.2-3sec.sl5                                               EMI-1-updates                                         321 k
 lfc-libs                                                          x86_64                                         1.8.2-3sec.sl5                                               EMI-1-updates                                         101 k
 lfc-yaim                                                          noarch                                         4.2.1-0.sl5                                                  EMI-1-updates                                          16 k
 libselinux-devel                                                  x86_64                                         1.33.4-5.7.el5                                               sl-base                                               149 k
 libsepol-devel                                                    x86_64                                         1.15.2-3.el5                                                 sl-base                                               192 k
 libtool-ltdl                                                      x86_64                                         1.5.22-7.el5_4                                               sl-base                                                38 k
 openldap-clients                                                  x86_64                                         2.3.43-12.el5_6.7                                            sl-base                                               223 k
 openldap-servers                                                  x86_64                                         2.3.43-12.el5_6.7                                            sl-base                                               2.2 M
 openssl-devel                                                     x86_64                                         0.9.8e-22.el5_8.1                                            sl-security                                           1.9 M
 perl-Compress-Zlib                                                x86_64                                         1.42-1.fc6                                                   sl-base                                                52 k
 perl-Convert-ASN1                                                 noarch                                         0.20-1.1                                                     sl-base                                                41 k
 perl-Crypt-SSLeay                                                 x86_64                                         0.51-11.el5                                                  sl-base                                                45 k
 perl-DateManip                                                    noarch                                         5.44-1.2.1                                                   sl-base                                               143 k
 perl-HTML-Parser                                                  x86_64                                         3.55-1.fc6                                                   sl-base                                                91 k
 perl-HTML-Tagset                                                  noarch                                         3.10-2.1.1                                                   sl-base                                                14 k
 perl-IO-Socket-SSL                                                noarch                                         1.01-1.fc6                                                   sl-base                                                49 k
 perl-LDAP                                                         noarch                                         1:0.33-3.fc6                                                 sl-base                                               316 k
 perl-Net-SSLeay                                                   x86_64                                         1.30-4.fc6                                                   sl-base                                               192 k
 perl-TermReadKey                                                  x86_64                                         2.30-5.el5                                                   sl-base                                                32 k
 perl-URI                                                          noarch                                         1.35-3                                                       sl-base                                               116 k
 perl-XML-DOM                                                      noarch                                         1.44-2.el5                                                   epel                                                  138 k
 perl-XML-NamespaceSupport                                         noarch                                         1.09-1.2.1                                                   sl-base                                                15 k
 perl-XML-Parser                                                   x86_64                                         2.34-6.1.2.2.1                                               sl-base                                               209 k
 perl-XML-RegExp                                                   noarch                                         0.03-2.el5                                                   epel                                                  8.2 k
 perl-XML-SAX                                                      noarch                                         0.14-8                                                       sl-base                                                77 k
 perl-lfc                                                          x86_64                                         1.8.2-3sec.sl5                                               EMI-1-updates                                         325 k
 perl-libwww-perl                                                  noarch                                         5.805-1.1.1                                                  sl-base                                               375 k
 python-lfc                                                        x86_64                                         1.8.2-3sec.sl5                                               EMI-1-updates                                         1.0 M
 voms                                                              x86_64                                         2.0.7-1.el5                                                  EMI-1-updates                                         163 k
 voms-devel                                                        x86_64                                         2.0.7-1.el5                                                  EMI-1-updates                                          27 k
 zlib-devel                                                        x86_64                                         1.2.3-4.el5                                                  sl-base                                               103 k

Transaction Summary
===========================================================================================================================================================================================================================================
Install      64 Package(s)
Upgrade       0 Package(s)

Total download size: 16 M
Downloading Packages:
(1/64): emi-version-1.10.0-1.sl5.x86_64.rpm                                                                                                                                                                         | 2.0 kB     00:00     
(2/64): emi-lfc_mysql-1.8.2-3sec.sl5.x86_64.rpm                                                                                                                                                                     | 3.8 kB     00:00     
(3/64): perl-XML-RegExp-0.03-2.el5.noarch.rpm                                                                                                                                                                       | 8.2 kB     00:00     
(4/64): glite-yaim-bdii-4.3.9-1.el5.noarch.rpm                                                                                                                                                                      |  10 kB     00:00     
(5/64): globus-openssl-module-3.1-2.el5.x86_64.rpm                                                                                                                                                                  |  13 kB     00:00     
(6/64): perl-HTML-Tagset-3.10-2.1.1.noarch.rpm                                                                                                                                                                      |  14 kB     00:00     
(7/64): perl-XML-NamespaceSupport-1.09-1.2.1.noarch.rpm                                                                                                                                                             |  15 kB     00:00     
(8/64): lfc-yaim-4.2.1-0.sl5.noarch.rpm                                                                                                                                                                             |  16 kB     00:00     
(9/64): globus-gsi-openssl-error-2.1-2.el5.x86_64.rpm                                                                                                                                                               |  16 kB     00:00     
(10/64): globus-callout-2.1-2.el5.x86_64.rpm                                                                                                                                                                        |  17 kB     00:00     
(11/64): globus-gsi-proxy-ssl-4.1-2.el5.x86_64.rpm                                                                                                                                                                  |  18 kB     00:00     
(12/64): globus-gsi-cert-utils-8.1-2.el5.x86_64.rpm                                                                                                                                                                 |  20 kB     00:00     
(13/64): bdii-5.2.10-1.el5.noarch.rpm                                                                                                                                                                               |  22 kB     00:00     
(14/64): fetch-crl-2.8.5-1.el5.noarch.rpm                                                                                                                                                                           |  24 kB     00:00     
(15/64): voms-devel-2.0.7-1.el5.x86_64.rpm                                                                                                                                                                          |  27 kB     00:00     
(16/64): edg-mkgridmap-4.0.0-1.noarch.rpm                                                                                                                                                                           |  27 kB     00:00     
(17/64): keyutils-libs-devel-1.2-1.el5.x86_64.rpm                                                                                                                                                                   |  27 kB     00:00     
(18/64): globus-gsi-sysconfig-5.1-2.el5.x86_64.rpm                                                                                                                                                                  |  30 kB     00:00     
(19/64): perl-TermReadKey-2.30-5.el5.x86_64.rpm                                                                                                                                                                     |  32 kB     00:00     
(20/64): glue-schema-2.0.8-1.el5.noarch.rpm                                                                                                                                                                         |  33 kB     00:00     
(21/64): globus-gss-assist-8.1-2.el5.x86_64.rpm                                                                                                                                                                     |  35 kB     00:00     
(22/64): globus-gsi-credential-5.1-2.el5.x86_64.rpm                                                                                                                                                                 |  35 kB     00:00     
(23/64): globus-gsi-proxy-core-6.1-2.el5.x86_64.rpm                                                                                                                                                                 |  37 kB     00:00     
(24/64): libtool-ltdl-1.5.22-7.el5_4.x86_64.rpm                                                                                                                                                                     |  38 kB     00:00     
(25/64): perl-Convert-ASN1-0.20-1.1.noarch.rpm                                                                                                                                                                      |  41 kB     00:00     
(26/64): globus-gsi-callback-4.1-2.el5.x86_64.rpm                                                                                                                                                                   |  42 kB     00:00     
(27/64): perl-Crypt-SSLeay-0.51-11.el5.x86_64.rpm                                                                                                                                                                   |  45 kB     00:00     
(28/64): perl-IO-Socket-SSL-1.01-1.fc6.noarch.rpm                                                                                                                                                                   |  49 kB     00:00     
(29/64): perl-Compress-Zlib-1.42-1.fc6.x86_64.rpm                                                                                                                                                                   |  52 kB     00:00     
(30/64): argus-pep-api-c-2.0.2-1.sl5.x86_64.rpm                                                                                                                                                                     |  53 kB     00:00     
(31/64): globus-gssapi-gsi-10.2-2.el5.x86_64.rpm                                                                                                                                                                    |  57 kB     00:00     
(32/64): perl-XML-SAX-0.14-8.noarch.rpm                                                                                                                                                                             |  77 kB     00:00     
(33/64): perl-HTML-Parser-3.55-1.fc6.x86_64.rpm                                                                                                                                                                     |  91 kB     00:00     
(34/64): lfc-libs-1.8.2-3sec.sl5.x86_64.rpm                                                                                                                                                                         | 101 kB     00:00     
(35/64): zlib-devel-1.2.3-4.el5.x86_64.rpm                                                                                                                                                                          | 103 kB     00:00     
(36/64): perl-URI-1.35-3.noarch.rpm                                                                                                                                                                                 | 116 kB     00:00     
(37/64): glite-yaim-core-5.0.2-1.sl5.noarch.rpm                                                                                                                                                                     | 116 kB     00:00     
(38/64): globus-common-14.5-4.el5.x86_64.rpm                                                                                                                                                                        | 131 kB     00:00     
(39/64): perl-XML-DOM-1.44-2.el5.noarch.rpm                                                                                                                                                                         | 138 kB     00:00     
(40/64): perl-DateManip-5.44-1.2.1.noarch.rpm                                                                                                                                                                       | 143 kB     00:00     
(41/64): libselinux-devel-1.33.4-5.7.el5.x86_64.rpm                                                                                                                                                                 | 149 kB     00:00     
(42/64): expect-5.43.0-5.1.x86_64.rpm                                                                                                                                                                               | 160 kB     00:00     
(43/64): lcgdm-libs-1.8.2-3sec.sl5.x86_64.rpm                                                                                                                                                                       | 163 kB     00:00     
(44/64): voms-2.0.7-1.el5.x86_64.rpm                                                                                                                                                                                | 163 kB     00:00     
(45/64): perl-Net-SSLeay-1.30-4.fc6.x86_64.rpm                                                                                                                                                                      | 192 kB     00:00     
(46/64): libsepol-devel-1.15.2-3.el5.x86_64.rpm                                                                                                                                                                     | 192 kB     00:00     
(47/64): lcgdm-devel-1.8.2-3sec.sl5.x86_64.rpm                                                                                                                                                                      | 199 kB     00:00     
(48/64): perl-XML-Parser-2.34-6.1.2.2.1.x86_64.rpm                                                                                                                                                                  | 209 kB     00:00     
(49/64): openldap-clients-2.3.43-12.el5_6.7.x86_64.rpm                                                                                                                                                              | 223 kB     00:00     
(50/64): perl-LDAP-0.33-3.fc6.noarch.rpm                                                                                                                                                                            | 316 kB     00:00     
(51/64): imake-1.0.2-3.x86_64.rpm                                                                                                                                                                                   | 318 kB     00:00     
(52/64): lfc-devel-1.8.2-3sec.sl5.x86_64.rpm                                                                                                                                                                        | 321 kB     00:00     
(53/64): perl-lfc-1.8.2-3sec.sl5.x86_64.rpm                                                                                                                                                                         | 325 kB     00:00     
(54/64): perl-libwww-perl-5.805-1.1.1.noarch.rpm                                                                                                                                                                    | 375 kB     00:00     
(55/64): gsoap-2.7.13-4.el5.x86_64.rpm                                                                                                                                                                              | 444 kB     00:00     
(56/64): automake-1.9.6-2.3.el5.noarch.rpm                                                                                                                                                                          | 476 kB     00:00     
(57/64): e2fsprogs-devel-1.39-33.el5.x86_64.rpm                                                                                                                                                                     | 637 kB     00:00     
(58/64): autoconf-2.59-12.noarch.rpm                                                                                                                                                                                | 648 kB     00:00     
(59/64): LFC-server-mysql-1.8.2-3sec.sl5.x86_64.rpm                                                                                                                                                                 | 694 kB     00:00     
(60/64): python-lfc-1.8.2-3sec.sl5.x86_64.rpm                                                                                                                                                                       | 1.0 MB     00:00     
(61/64): lfc-1.8.2-3sec.sl5.x86_64.rpm                                                                                                                                                                              | 1.5 MB     00:00     
(62/64): openssl-devel-0.9.8e-22.el5_8.1.x86_64.rpm                                                                                                                                                                 | 1.9 MB     00:01     
(63/64): krb5-devel-1.6.1-70.el5.x86_64.rpm                                                                                                                                                                         | 1.9 MB     00:00     
(64/64): openldap-servers-2.3.43-12.el5_6.7.x86_64.rpm                                                                                                                                                              | 2.2 MB     00:00     
-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
Total                                                                                                                                                                                                      731 kB/s |  16 MB     00:22     
warning: rpmts_HdrFromFdno: Header V3 DSA signature: NOKEY, key ID df9e12ef
EMI-1-updates/gpgkey                                                                                                                                                                                                | 1.7 kB     00:00     
Importing GPG key 0xDF9E12EF "Doina Cristina Aiftimiei (EMI Release Manager) <aiftim@pd.infn.it>" from /etc/pki/rpm-gpg/RPM-GPG-KEY-emi
Running rpm_check_debug
Running Transaction Test
Finished Transaction Test
Transaction Test Succeeded
Running Transaction
  Installing     : voms                                                                                                                                                                                                               1/64 
  Installing     : libtool-ltdl                                                                                                                                                                                                       2/64 
  Installing     : globus-common                                                                                                                                                                                                      3/64 
  Installing     : globus-gsi-openssl-error                                                                                                                                                                                           4/64 
  Installing     : globus-gsi-proxy-ssl                                                                                                                                                                                               5/64 
  Installing     : globus-gsi-sysconfig                                                                                                                                                                                               6/64 
  Installing     : globus-openssl-module                                                                                                                                                                                              7/64 
  Installing     : globus-gsi-cert-utils                                                                                                                                                                                              8/64 
  Installing     : perl-URI                                                                                                                                                                                                           9/64 
  Installing     : globus-gsi-callback                                                                                                                                                                                               10/64 
  Installing     : globus-gsi-credential                                                                                                                                                                                             11/64 
  Installing     : perl-Net-SSLeay                                                                                                                                                                                                   12/64 
  Installing     : perl-IO-Socket-SSL                                                                                                                                                                                                13/64 
  Installing     : glite-yaim-core                                                                                                                                                                                                   14/64 
  Installing     : glite-yaim-bdii                                                                                                                                                                                                   15/64 
  Installing     : glue-schema                                                                                                                                                                                                       16/64 
  Installing     : globus-gsi-proxy-core                                                                                                                                                                                             17/64 
  Installing     : globus-gssapi-gsi                                                                                                                                                                                                 18/64 
  Installing     : globus-callout                                                                                                                                                                                                    19/64 
  Installing     : globus-gss-assist                                                                                                                                                                                                 20/64 
  Installing     : lcgdm-libs                                                                                                                                                                                                        21/64 
  Installing     : lfc-libs                                                                                                                                                                                                          22/64 
  Installing     : perl-lfc                                                                                                                                                                                                          23/64 
  Installing     : python-lfc                                                                                                                                                                                                        24/64 
  Installing     : lfc                                                                                                                                                                                                               25/64 
  Installing     : openldap-servers                                                                                                                                                                                                  26/64 
  Installing     : expect                                                                                                                                                                                                            27/64 
  Installing     : openldap-clients                                                                                                                                                                                                  28/64 
  Installing     : imake                                                                                                                                                                                                             29/64 
  Installing     : argus-pep-api-c                                                                                                                                                                                                   30/64 
  Installing     : gsoap                                                                                                                                                                                                             31/64 
  Installing     : LFC-server-mysql                                                                                                                                                                                                  32/64 
  Installing     : perl-TermReadKey                                                                                                                                                                                                  33/64 
  Installing     : perl-Compress-Zlib                                                                                                                                                                                                34/64 
  Installing     : perl-Crypt-SSLeay                                                                                                                                                                                                 35/64 
  Installing     : lcgdm-devel                                                                                                                                                                                                       36/64 
  Installing     : lfc-devel                                                                                                                                                                                                         37/64 
  Installing     : autoconf                                                                                                                                                                                                          38/64 
  Installing     : automake                                                                                                                                                                                                          39/64 
  Installing     : bdii                                                                                                                                                                                                              40/64 
  Installing     : lfc-yaim                                                                                                                                                                                                          41/64 
  Installing     : emi-version                                                                                                                                                                                                       42/64 
  Installing     : perl-DateManip                                                                                                                                                                                                    43/64 
  Installing     : perl-XML-RegExp                                                                                                                                                                                                   44/64 
  Installing     : e2fsprogs-devel                                                                                                                                                                                                   45/64 
  Installing     : keyutils-libs-devel                                                                                                                                                                                               46/64 
  Installing     : perl-HTML-Tagset                                                                                                                                                                                                  47/64 
  Installing     : perl-HTML-Parser                                                                                                                                                                                                  48/64 
  Installing     : perl-libwww-perl                                                                                                                                                                                                  49/64 
  Installing     : perl-XML-Parser                                                                                                                                                                                                   50/64 
  Installing     : perl-XML-DOM                                                                                                                                                                                                      51/64 
  Installing     : fetch-crl                                                                                                                                                                                                         52/64 
  Installing     : zlib-devel                                                                                                                                                                                                        53/64 
  Installing     : perl-Convert-ASN1                                                                                                                                                                                                 54/64 
  Installing     : perl-XML-NamespaceSupport                                                                                                                                                                                         55/64 
  Installing     : perl-XML-SAX                                                                                                                                                                                                      56/64 
  Installing     : perl-LDAP                                                                                                                                                                                                         57/64 
  Installing     : edg-mkgridmap                                                                                                                                                                                                     58/64 
  Installing     : libsepol-devel                                                                                                                                                                                                    59/64 
  Installing     : libselinux-devel                                                                                                                                                                                                  60/64 
  Installing     : krb5-devel                                                                                                                                                                                                        61/64 
  Installing     : openssl-devel                                                                                                                                                                                                     62/64 
  Installing     : voms-devel                                                                                                                                                                                                        63/64 
  Installing     : emi-lfc_mysql                                                                                                                                                                                                     64/64 

Installed:
  emi-lfc_mysql.x86_64 0:1.8.2-3sec.sl5                                                                                                                                                                                                    

Dependency Installed:
  LFC-server-mysql.x86_64 0:1.8.2-3sec.sl5    argus-pep-api-c.x86_64 0:2.0.2-1.sl5        autoconf.noarch 0:2.59-12                      automake.noarch 0:1.9.6-2.3.el5                  bdii.noarch 0:5.2.10-1.el5                    
  e2fsprogs-devel.x86_64 0:1.39-33.el5        edg-mkgridmap.noarch 0:4.0.0-1              emi-version.x86_64 0:1.10.0-1.sl5              expect.x86_64 0:5.43.0-5.1                       fetch-crl.noarch 0:2.8.5-1.el5                
  glite-yaim-bdii.noarch 0:4.3.9-1.el5        glite-yaim-core.noarch 0:5.0.2-1.sl5        globus-callout.x86_64 0:2.1-2.el5              globus-common.x86_64 0:14.5-4.el5                globus-gsi-callback.x86_64 0:4.1-2.el5        
  globus-gsi-cert-utils.x86_64 0:8.1-2.el5    globus-gsi-credential.x86_64 0:5.1-2.el5    globus-gsi-openssl-error.x86_64 0:2.1-2.el5    globus-gsi-proxy-core.x86_64 0:6.1-2.el5         globus-gsi-proxy-ssl.x86_64 0:4.1-2.el5       
  globus-gsi-sysconfig.x86_64 0:5.1-2.el5     globus-gss-assist.x86_64 0:8.1-2.el5        globus-gssapi-gsi.x86_64 0:10.2-2.el5          globus-openssl-module.x86_64 0:3.1-2.el5         glue-schema.noarch 0:2.0.8-1.el5              
  gsoap.x86_64 0:2.7.13-4.el5                 imake.x86_64 0:1.0.2-3                      keyutils-libs-devel.x86_64 0:1.2-1.el5         krb5-devel.x86_64 0:1.6.1-70.el5                 lcgdm-devel.x86_64 0:1.8.2-3sec.sl5           
  lcgdm-libs.x86_64 0:1.8.2-3sec.sl5          lfc.x86_64 0:1.8.2-3sec.sl5                 lfc-devel.x86_64 0:1.8.2-3sec.sl5              lfc-libs.x86_64 0:1.8.2-3sec.sl5                 lfc-yaim.noarch 0:4.2.1-0.sl5                 
  libselinux-devel.x86_64 0:1.33.4-5.7.el5    libsepol-devel.x86_64 0:1.15.2-3.el5        libtool-ltdl.x86_64 0:1.5.22-7.el5_4           openldap-clients.x86_64 0:2.3.43-12.el5_6.7      openldap-servers.x86_64 0:2.3.43-12.el5_6.7   
  openssl-devel.x86_64 0:0.9.8e-22.el5_8.1    perl-Compress-Zlib.x86_64 0:1.42-1.fc6      perl-Convert-ASN1.noarch 0:0.20-1.1            perl-Crypt-SSLeay.x86_64 0:0.51-11.el5           perl-DateManip.noarch 0:5.44-1.2.1            
  perl-HTML-Parser.x86_64 0:3.55-1.fc6        perl-HTML-Tagset.noarch 0:3.10-2.1.1        perl-IO-Socket-SSL.noarch 0:1.01-1.fc6         perl-LDAP.noarch 1:0.33-3.fc6                    perl-Net-SSLeay.x86_64 0:1.30-4.fc6           
  perl-TermReadKey.x86_64 0:2.30-5.el5        perl-URI.noarch 0:1.35-3                    perl-XML-DOM.noarch 0:1.44-2.el5               perl-XML-NamespaceSupport.noarch 0:1.09-1.2.1    perl-XML-Parser.x86_64 0:2.34-6.1.2.2.1       
  perl-XML-RegExp.noarch 0:0.03-2.el5         perl-XML-SAX.noarch 0:0.14-8                perl-lfc.x86_64 0:1.8.2-3sec.sl5               perl-libwww-perl.noarch 0:5.805-1.1.1            python-lfc.x86_64 0:1.8.2-3sec.sl5            
  voms.x86_64 0:2.0.7-1.el5                   voms-devel.x86_64 0:2.0.7-1.el5             zlib-devel.x86_64 0:1.2.3-4.el5               

Complete!

MySQL server installation and configuration

NB: If you want to install/run a MySQL server in the same host as the LFC, add mysql-server to the yum install command above.

# yum install -y mysql-server
Loaded plugins: downloadonly, kernel-module, priorities, protect-packages, protectbase, security, verify, versionlock
263 packages excluded due to repository priority protections
0 packages excluded due to repository protections
Reading version lock configuration
Setting up Install Process
Resolving Dependencies
--> Running transaction check
---> Package mysql-server.x86_64 0:5.0.95-1.el5_7.1 set to be updated
--> Processing Dependency: perl-DBD-MySQL for package: mysql-server
--> Running transaction check
---> Package perl-DBD-MySQL.x86_64 0:3.0007-2.el5 set to be updated
--> Finished Dependency Resolution
Beginning Kernel Module Plugin
Finished Kernel Module Plugin

Dependencies Resolved

===========================================================================================================================================================================================================================================
 Package                                                    Arch                                               Version                                                       Repository                                               Size
===========================================================================================================================================================================================================================================
Installing:
 mysql-server                                               x86_64                                             5.0.95-1.el5_7.1                                              sl-security                                             9.9 M
Installing for dependencies:
 perl-DBD-MySQL                                             x86_64                                             3.0007-2.el5                                                  sl-base                                                 147 k

Transaction Summary
===========================================================================================================================================================================================================================================
Install       2 Package(s)
Upgrade       0 Package(s)

Total download size: 10 M
Downloading Packages:
(1/2): perl-DBD-MySQL-3.0007-2.el5.x86_64.rpm                                                                                                                                                                       | 147 kB     00:00     
(2/2): mysql-server-5.0.95-1.el5_7.1.x86_64.rpm                                                                                                                                                                     | 9.9 MB     00:02     
-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
Total                                                                                                                                                                                                      1.8 MB/s |  10 MB     00:05     
Running rpm_check_debug
Running Transaction Test
Finished Transaction Test
Transaction Test Succeeded
Running Transaction
  Installing     : perl-DBD-MySQL                                                                                                                                                                                                      1/2 
  Installing     : mysql-server                                                                                                                                                                                                        2/2 

Installed:
  mysql-server.x86_64 0:5.0.95-1.el5_7.1                                                                                                                                                                                                   

Dependency Installed:
  perl-DBD-MySQL.x86_64 0:3.0007-2.el5                                                                                                                                                                                                     

Complete!

  • Configure MySQL to start at boot time
# chkconfig mysqld on

  • Start MySQL server
# /etc/init.d/mysqld start
Initializing MySQL database:  Installing MySQL system tables...
OK
Filling help tables...
OK

To start mysqld at boot time you have to copy
support-files/mysql.server to the right place for your system

PLEASE REMEMBER TO SET A PASSWORD FOR THE MySQL root USER !
To do so, start the server, then issue the following commands:
/usr/bin/mysqladmin -u root password 'new-password'
/usr/bin/mysqladmin -u root -h lfcserver04.cnaf.infn.it password 'new-password'

Alternatively you can run:
/usr/bin/mysql_secure_installation

which will also give you the option of removing the test
databases and anonymous user created by default.  This is
strongly recommended for production servers.

See the manual for more instructions.

You can start the MySQL daemon with:
cd /usr ; /usr/bin/mysqld_safe &

You can test the MySQL daemon with mysql-test-run.pl
cd mysql-test ; perl mysql-test-run.pl

Please report any problems with the /usr/bin/mysqlbug script!

The latest information about MySQL is available on the web at
http://www.mysql.com
Support MySQL by buying support/licenses at http://shop.mysql.com
                                                           [  OK  ]
Starting MySQL:                                            [  OK  ]

  • Configure MySQL service using /usr/bin/mysql_secure_installation
# /usr/bin/mysql_secure_installation

NOTE: RUNNING ALL PARTS OF THIS SCRIPT IS RECOMMENDED FOR ALL MySQL
      SERVERS IN PRODUCTION USE!  PLEASE READ EACH STEP CAREFULLY!

In order to log into MySQL to secure it, we'll need the current
password for the root user.  If you've just installed MySQL, and
you haven't set the root password yet, the password will be blank,
so you should just press enter here.

Enter current password for root (enter for none): 
OK, successfully used password, moving on...

Setting the root password ensures that nobody can log into the MySQL
root user without the proper authorisation.

Set root password? [Y/n] Y
New password: 
Re-enter new password: 
Password updated successfully!
Reloading privilege tables..
 ... Success!

By default, a MySQL installation has an anonymous user, allowing anyone
to log into MySQL without having to have a user account created for
them.  This is intended only for testing, and to make the installation
go a bit smoother.  You should remove them before moving into a
production environment.

Remove anonymous users? [Y/n] Y
 ... Success!

Normally, root should only be allowed to connect from 'localhost'.  This
ensures that someone cannot guess at the root password from the network.

Disallow root login remotely? [Y/n] Y
 ... Success!

By default, MySQL comes with a database named 'test' that anyone can
access.  This is also intended only for testing, and should be removed
before moving into a production environment.

Remove test database and access to it? [Y/n] Y
 - Dropping test database...
 ... Success!
 - Removing privileges on test database...
 ... Success!

Reloading the privilege tables will ensure that all changes made so far
will take effect immediately.

Reload privilege tables now? [Y/n] Y
 ... Success!

Cleaning up...

All done!  If you've completed all of the above steps, your MySQL
installation should now be secure.

Thanks for using MySQL!

MySQL master-master replica

To setup master-master replica between two (or more) MySQL server, please follow the guides available HERE and HERE

LFC Service configuration

LFC YAIM variables are reported here
  • Start from example:
# cp -vr /opt/glite/yaim/examples/siteinfo .
`/opt/glite/yaim/examples/siteinfo' -> `./siteinfo'
`/opt/glite/yaim/examples/siteinfo/services' -> `./siteinfo/services'
`/opt/glite/yaim/examples/siteinfo/services/lfc_oracle' -> `./siteinfo/services/lfc_oracle'
`/opt/glite/yaim/examples/siteinfo/services/glite-bdii_site' -> `./siteinfo/services/glite-bdii_site'
`/opt/glite/yaim/examples/siteinfo/services/lfc_mysql' -> `./siteinfo/services/lfc_mysql'
`/opt/glite/yaim/examples/siteinfo/site-info.def' -> `./siteinfo/site-info.def'

# rm /root/siteinfo/services/lfc_oracle /root/siteinfo/services/glite-bdii_site

site-info.def

The configuration file for this service is really basic:
# cat /root/siteinfo/site-info.def 
################################
# Site configuration variables #
################################
SITE_NAME=INFN-CNAF
SITE_EMAIL="grid-operations@lists.cnaf.infn.it"
SITE_LAT=44.4948
SITE_LONG=11.3417

MYSQL_PASSWORD=<KEEP IT SECRET>

VOS="gerda.mpg.de icarus-exp.org igi.italiangrid.it ops infngrid"

# Download the last files (groups.conf and users.conf) at https://wiki.italiangrid.it/twiki/bin/view/IGIRelease/IgiEmi#IGI_YAIM_configuration_files
GROUPS_CONF=/root/siteinfo/groups.conf
USERS_CONF=/root/siteinfo/users.conf

emi_lfc_mysql

The configuration file for this service is really basic:
# cat /root/siteinfo/services/emi_lfc_mysql

# LFC hostname
LFC_HOST=lfcserver04.cnaf.infn.it

LFC_HOST_ALIAS="lfc.italiangrid.it"

LFC_DB_HOST=lfcdb.italiangrid.it
LFC_DB=cns_db
LFC_DB_PASSWORD=<KEEP IT SECRET>

LFC_CENTRAL="gerda.mpg.de icarus-exp.org igi.italiangrid.it"
LFC_LOCAL="ops infngrid"

yaim check

#  chmod -R 600 /root/siteinfo

# /opt/glite/yaim/bin/yaim  -v -s siteinfo/site-info.def -n emi_lfc_mysql
   INFO: Using site configuration file: siteinfo/site-info.def
   INFO: Sourcing service specific configuration file: siteinfo/services/emi_lfc_mysql
   INFO: 
         ###################################################################
         
         .             /'.-. ')
         .     yA,-"-,( ,m,:/ )   .oo.     oo    o      ooo  o.     .oo
         .    /      .-Y a  a Y-.     8. .8'    8'8.     8    8b   d'8
         .   /           ~ ~ /         8'    .8oo88.     8    8  8'  8
         . (_/         '===='          8    .8'     8.   8    8  Y   8
         .   Y,-''-,Yy,-.,/           o8o  o8o    o88o  o8o  o8o    o8o
         .    I_))_) I_))_)
         
         
         current working directory: /root
         site-info.def date: Apr 17 13:51 siteinfo/site-info.def
         yaim command: -v -s siteinfo/site-info.def -n emi_lfc_mysql
         log file: /opt/glite/yaim/bin/../log/yaimlog
         Tue Apr 17 16:24:04 CEST 2012 : /opt/glite/yaim/bin/yaim
         
         Installed YAIM versions:
         glite-yaim-bdii 4.3.9-1
         glite-yaim-core 5.0.2-1
         glite-yaim-lfc 4.2.1-1
         
         ####################################################################
   INFO: The default location of the grid-env.(c)sh files will be: /usr/libexec
   INFO: Sourcing the utilities in /opt/glite/yaim/functions/utils
   INFO: Detecting environment
   INFO: Executing function: config_sysconfig_lcg_check 
   INFO: Executing function: config_host_certs_check 
   INFO: Executing function: config_vomsdir_check 
   INFO: Executing function: config_edgusers_check 
   INFO: Executing function: config_mkgridmap_check 
   INFO: Executing function: config_bdii_5.2_check 
   INFO: Executing function: config_gip2_lfc_check 
   INFO: Executing function: config_lfc_user_check 
   INFO: Executing function: config_lfc_mysql_upgrade_check 
   INFO: Executing function: config_lfc_mysql_check 
   INFO: Executing function: config_lfc_server_check 
   INFO: Executing function: config_lfc_dli_check 
   INFO: Executing function: config_lfc_semsg_check 
   INFO: Checking is done.
   INFO: All the necessary variables to configure emi_lfc_mysql are defined in your configuration files.
   INFO: Please, bear in mind that YAIM only guarantees the definition of variables
   INFO: controlled in the _check functions.
   INFO: YAIM terminated succesfully.

yaim config

Please use the debug flag ( "-d 6") to configure the services in order to have detailed information. For your convenience yo can save all the configuration information in a log file you can look at any time, separated from the yaimlog defulat one.

# /opt/glite/yaim/bin/yaim  -d 6 -c -s siteinfo/site-info.def -n emi_lfc_mysql
   DEBUG: Checking siteinfo dir is not world readable
   DEBUG: Checking site-info.def is syntactically correct
   DEBUG: Sourcing /opt/glite/yaim/bin/../defaults/site-info.pre
   DEBUG: Sourcing /opt/glite/yaim/bin/../defaults/emi_lfc_mysql.pre
   INFO: Using site configuration file: siteinfo/site-info.def
   DEBUG: Sourcing site-info.def file: siteinfo/site-info.def
   INFO: Sourcing service specific configuration file: siteinfo/services/emi_lfc_mysql
   DEBUG: Sourcing /opt/glite/yaim/bin/../defaults/site-info.post
   DEBUG: Sourcing /opt/glite/yaim/bin/../defaults/mapping
   INFO: 
         ###################################################################
         
         .             /'.-. ')
         .     yA,-"-,( ,m,:/ )   .oo.     oo    o      ooo  o.     .oo
         .    /      .-Y a  a Y-.     8. .8'    8'8.     8    8b   d'8
         .   /           ~ ~ /         8'    .8oo88.     8    8  8'  8
         . (_/         '===='          8    .8'     8.   8    8  Y   8
         .   Y,-''-,Yy,-.,/           o8o  o8o    o88o  o8o  o8o    o8o
         .    I_))_) I_))_)
         
         
         current working directory: /root
         site-info.def date: Apr 17 13:51 siteinfo/site-info.def
         yaim command: -d 6 -c -s siteinfo/site-info.def -n emi_lfc_mysql
         log file: /opt/glite/yaim/bin/../log/yaimlog
         Tue Apr 17 16:26:29 CEST 2012 : /opt/glite/yaim/bin/yaim
         
         Installed YAIM versions:
         glite-yaim-bdii 4.3.9-1
         glite-yaim-core 5.0.2-1
         glite-yaim-lfc 4.2.1-1
         
         ####################################################################
   INFO: The default location of the grid-env.(c)sh files will be: /usr/libexec
   INFO: Sourcing the utilities in /opt/glite/yaim/functions/utils
   INFO: Detecting environment
   DEBUG: Detect platform: OS flavour detected is: emi
   DEBUG: Detected architecture is 64BIT
   DEBUG: Detect platform: OS type detected: sl5
   DEBUG: GROUPS_CONF is defined. Adding global groups to the groups.conf temp file
   DEBUG: GROUPS_CONF points now to the groups.conf temp file
   DEBUG: GROUPS_CONF=/tmp/yaim.JA4261
   DEBUG: Resulted NODE_TYPE_LIST is : emi_lfc_mysql
   DEBUG: Setting environment variable GRID_ENV_LOCATION, to value "/usr/libexec".
   DEBUG: Unset environment variable GRID_ENV_LOCATION.
   DEBUG: Setting environment variable LCG_LOCATION, to value "/usr".
   DEBUG: Unset environment variable LCG_LOCATION.
   DEBUG: Setting environment variable GLITE_LOCATION, to value "/usr".
   DEBUG: Unset environment variable GLITE_LOCATION.
   DEBUG: Setting environment variable GLITE_LOCATION_VAR, to value "/var".
   DEBUG: Unset environment variable GLITE_LOCATION_VAR.
   DEBUG: Appending value "/bin" to environment variable PATH.
   DEBUG: Deleting value "/bin" from environment variable PATH.
   DEBUG: Appending value "/opt/glite/share/man" to environment variable MANPATH.
   DEBUG: Deleting value "/opt/glite/share/man" from environment variable MANPATH.
   DEBUG: Sourcing node definition file: /opt/glite/yaim/bin/../node-info.d/emi_lfc_mysql
   DEBUG: Skipping function: config_root_email_check because it is not defined
   DEBUG: Skipping function: config_sysconfig_edg_check because it is not defined
   DEBUG: Skipping function: config_sysconfig_globus_check because it is not defined
   INFO: Executing function: config_sysconfig_lcg_check 
   DEBUG: Skipping function: config_crl_check because it is not defined
   INFO: Executing function: config_host_certs_check 
   INFO: Executing function: config_vomsdir_check 
   INFO: Executing function: config_edgusers_check 
   INFO: Executing function: config_mkgridmap_check 
   INFO: Executing function: config_bdii_5.2_check 
   INFO: Executing function: config_gip2_lfc_check 
   INFO: Executing function: config_lfc_user_check 
   INFO: Executing function: config_lfc_mysql_upgrade_check 
   INFO: Executing function: config_lfc_mysql_check 
   INFO: Executing function: config_lfc_server_check 
   INFO: Executing function: config_lfc_dli_check 
   INFO: Executing function: config_lfc_semsg_check 
   DEBUG: Skipping function: config_root_email_setenv because it is not defined
   INFO: Executing function: config_root_email 
   DEBUG: Skipping function: config_sysconfig_edg_setenv because it is not defined
   INFO: Executing function: config_sysconfig_edg 
   DEBUG: Skipping function: config_sysconfig_globus_setenv because it is not defined
   INFO: Executing function: config_sysconfig_globus 
   DEBUG: Skipping function: config_sysconfig_lcg_setenv because it is not defined
   INFO: Executing function: config_sysconfig_lcg 
   DEBUG: Skipping function: config_crl_setenv because it is not defined
   INFO: Executing function: config_crl 
   INFO: Now updating the CRLs - this may take a few minutes...
Enabling periodic fetch-crl:                               [  OK  ]
   DEBUG: fetch-crl cron enabled
   DEBUG: Skipping function: config_host_certs_setenv because it is not defined
   INFO: Executing function: config_host_certs 
   INFO: Executing function: config_vomsdir_setenv 
   DEBUG: This function currently doesn't set any environment variables.
   INFO: Executing function: config_vomsdir 
   DEBUG: .lsc file configuration for VO gerda.mpg.de...
   DEBUG: Create the /etc/grid-security/vomsdir/gerda.mpg.de/vomsmania.cnaf.infn.it.lsc
   DEBUG: Copying /C=IT/O=INFN/OU=Host/L=CNAF/CN=vomsmania.cnaf.infn.it in /etc/grid-security/vomsdir/gerda.mpg.de/vomsmania.cnaf.infn.it.lsc
   DEBUG: Copying the vomsmania.cnaf.infn.it CA DN  /C=IT/O=INFN/CN=INFN CA in /etc/grid-security/vomsdir/gerda.mpg.de/vomsmania.cnaf.infn.it.lsc
   DEBUG: .lsc file configuration for VO icarus-exp.org...
   DEBUG: Create the /etc/grid-security/vomsdir/icarus-exp.org/vomsmania.cnaf.infn.it.lsc
   DEBUG: Copying /C=IT/O=INFN/OU=Host/L=CNAF/CN=vomsmania.cnaf.infn.it in /etc/grid-security/vomsdir/icarus-exp.org/vomsmania.cnaf.infn.it.lsc
   DEBUG: Copying the vomsmania.cnaf.infn.it CA DN  /C=IT/O=INFN/CN=INFN CA in /etc/grid-security/vomsdir/icarus-exp.org/vomsmania.cnaf.infn.it.lsc
   DEBUG: .lsc file configuration for VO ops...
   DEBUG: Create the /etc/grid-security/vomsdir/ops/lcg-voms.cern.ch.lsc
   DEBUG: Copying /DC=ch/DC=cern/OU=computers/CN=lcg-voms.cern.ch in /etc/grid-security/vomsdir/ops/lcg-voms.cern.ch.lsc
   DEBUG: Create the /etc/grid-security/vomsdir/ops/voms.cern.ch.lsc
   DEBUG: Copying /DC=ch/DC=cern/OU=computers/CN=voms.cern.ch in /etc/grid-security/vomsdir/ops/voms.cern.ch.lsc
   DEBUG: Copying the lcg-voms.cern.ch CA DN  /DC=ch/DC=cern/CN=CERN Trusted Certification Authority in /etc/grid-security/vomsdir/ops/lcg-voms.cern.ch.lsc
   DEBUG: Copying the voms.cern.ch CA DN  /DC=ch/DC=cern/CN=CERN Trusted Certification Authority in /etc/grid-security/vomsdir/ops/voms.cern.ch.lsc
   DEBUG: .lsc file configuration for VO infngrid...
   DEBUG: Create the /etc/grid-security/vomsdir/infngrid/voms.cnaf.infn.it.lsc
   DEBUG: Copying /C=IT/O=INFN/OU=Host/L=CNAF/CN=voms.cnaf.infn.it in /etc/grid-security/vomsdir/infngrid/voms.cnaf.infn.it.lsc
   DEBUG: Create the /etc/grid-security/vomsdir/infngrid/voms-01.pd.infn.it.lsc
   DEBUG: Copying /C=IT/O=INFN/OU=Host/L=Padova/CN=voms-01.pd.infn.it in /etc/grid-security/vomsdir/infngrid/voms-01.pd.infn.it.lsc
   DEBUG: Copying the voms.cnaf.infn.it CA DN  /C=IT/O=INFN/CN=INFN CA in /etc/grid-security/vomsdir/infngrid/voms.cnaf.infn.it.lsc
   DEBUG: Copying the voms-01.pd.infn.it CA DN  /C=IT/O=INFN/CN=INFN CA in /etc/grid-security/vomsdir/infngrid/voms-01.pd.infn.it.lsc
   DEBUG: Skipping function: config_edgusers_setenv because it is not defined
   INFO: Executing function: config_edgusers 
   DEBUG: Creating user edguser...
   DEBUG: Skipping user edguser since it already exists...
   DEBUG: Creating user edginfo...
   DEBUG: Skipping user edginfo since it already exists...
   DEBUG: Creating user glite...
   DEBUG: Skipping user glite since it already exists...
   DEBUG: Creating user edguser...
   DEBUG: Skipping user edguser since it already exists...
   INFO: Executing function: config_mkgridmap_setenv 
   DEBUG: This function currently doesn't set any environment variables.
   INFO: Executing function: config_mkgridmap 
   DEBUG: Defining the grid-map file configuration file location and the gridmapdir
   DEBUG: Configuration file in /etc/edg-mkgridmap.conf
   DEBUG: gridmapdir in /etc/grid-security/gridmapdir
   DEBUG: Configuration file in /etc/lcgdm-mkgridmap.conf
   DEBUG: **** VO GERDA.MPG.DE ****
   DEBUG: The voms servers are 'vomss://vomsmania.cnaf.infn.it:8443/voms/gerda.mpg.de?/gerda.mpg.de'
   DEBUG: VO_lower is gerda.mpg.de
   DEBUG: VO group is gerda
   DEBUG: The user prefix is gerda
   DEBUG: create gridmapdir files
   DEBUG: The pool account prefix is .gerda
   INFO: The grid-map file will also contain special users for VO GERDA.MPG.DE since UNPRIVILEGED_MKGRIDMAP=no for the VO.
   DEBUG: VO tags are sgm
dmg
   DEBUG: special match is ^"/gerda.mpg.de\(/[^"]*\).*:sgm:
   DEBUG: special match is ^"/gerda.mpg.de\(/[^"]*\).*:dmg:
   INFO: Adding ordinary users in the gridmap file since the VO is defined in groups.conf
   DEBUG: **** VO ICARUS-EXP.ORG ****
   DEBUG: The voms servers are 'vomss://vomsmania.cnaf.infn.it:8443/voms/icarus-exp.org?/icarus-exp.org'
   DEBUG: VO_lower is icarus-exp.org
   DEBUG: VO group is icarus
   DEBUG: The user prefix is icarus
   DEBUG: create gridmapdir files
   DEBUG: The pool account prefix is .icarus
   INFO: The grid-map file will also contain special users for VO ICARUS-EXP.ORG since UNPRIVILEGED_MKGRIDMAP=no for the VO.
   DEBUG: VO tags are sgm
   DEBUG: special match is ^"/icarus-exp.org\(/[^"]*\).*:sgm:
   INFO: Adding ordinary users in the gridmap file since the VO is defined in groups.conf
   DEBUG: **** VO OPS ****
   DEBUG: The voms servers are vomss://voms.cern.ch:8443/voms/ops?/ops/
   DEBUG: VO_lower is ops
   DEBUG: VO group is ops
   DEBUG: The user prefix is ops
   DEBUG: create gridmapdir files
   DEBUG: The pool account prefix is .ops
   INFO: The grid-map file will also contain special users for VO OPS since UNPRIVILEGED_MKGRIDMAP=no for the VO.
   DEBUG: VO tags are sgm
pilot
   DEBUG: special match is ^"/ops\(/[^"]*\).*:sgm:
   DEBUG: special match is ^"/ops\(/[^"]*\).*:pilot:
   INFO: Adding ordinary users in the gridmap file since the VO is defined in groups.conf
   DEBUG: **** VO INFNGRID ****
   DEBUG: The voms servers are 'vomss://voms.cnaf.infn.it:8443/voms/infngrid?/infngrid' 'vomss://voms-01.pd.infn.it:8443/voms/infngrid?/infngrid'
   DEBUG: VO_lower is infngrid
   DEBUG: VO group is infngrid
   DEBUG: The user prefix is infngrid
   DEBUG: create gridmapdir files
   DEBUG: The pool account prefix is .infngrid
   INFO: The grid-map file will also contain special users for VO INFNGRID since UNPRIVILEGED_MKGRIDMAP=no for the VO.
   DEBUG: VO tags are sgm
pilot
   DEBUG: special match is ^"/infngrid\(/[^"]*\).*:sgm:
   DEBUG: special match is ^"/infngrid\(/[^"]*\).*:pilot:
   INFO: Adding ordinary users in the gridmap file since the VO is defined in groups.conf
   INFO: Now creating the grid-mapfile - this may take a few minutes...
   INFO: Now creating the lcgdm-mapfile - this may take a few minutes...
   DEBUG: Skipping function: config_bdii_5.2_setenv because it is not defined
   INFO: Executing function: config_bdii_5.2 
Stopping BDII update process:                              [  OK  ]
Stopping BDII slapd:                                       [  OK  ]
Starting BDII slapd:                                       [  OK  ]
Starting BDII update process:                              [  OK  ]
   DEBUG: Skipping function: config_gip2_lfc_setenv because it is not defined
   INFO: Executing function: config_gip2_lfc 
   DEBUG: Skipping function: config_lfc_user_setenv because it is not defined
   INFO: Executing function: config_lfc_user 
   DEBUG: Skipping function: config_lfc_mysql_upgrade_setenv because it is not defined
   INFO: Executing function: config_lfc_mysql_upgrade 
   INFO: mysql database machine not local, not checking or setting the mysql root password
   INFO: Checking for database schema version... 
   INFO: Database version used: 3.1.0
   DEBUG: Skipping function: config_lfc_mysql_setenv because it is not defined
   INFO: Executing function: config_lfc_mysql 

   INFO: mysql database machine not local, not checking or setting the mysql root password
   DEBUG: Skipping function: config_lfc_server_setenv because it is not defined
   INFO: Executing function: config_lfc_server 
Stopping lfcdaemon:                                        [  OK  ]
   INFO: Waiting for complete wake-up of the name server...
Starting lfcdaemon:                                        [  OK  ]
nsentergrpmap -1: Group exists already
nsentergrpmap -1: Group exists already
   DEBUG: Creating default paths for the VOs
nsentergrpmap -1: Group exists already
nsentergrpmap -1: Group exists already
   DEBUG: Skipping function: config_lfc_dli_setenv because it is not defined
   INFO: Executing function: config_lfc_dli 
Stopping lfc-dli:                                          [  OK  ]
Starting lfc-dli:                                          [  OK  ]
   DEBUG: Skipping function: config_lfc_semsg_setenv because it is not defined
   INFO: Executing function: config_lfc_semsg 
   WARNING: LFC_SEMSG set to no. SEMsg will not be configured.
   INFO: Configuration Complete.                                               [  OK  ]
   INFO: YAIM terminated succesfully.

Service checks

From a User Interfaces, try the following commands (replace lfc.grid.cnaf.infn.it with your LFC hostname):
  • Create a valid proxy for a VO supported by the LFC server, e.g. voms-proxy-init --voms infngrid
  • Export the following variables:
export LCG_CATALOG_TYPE=lfc
export LFC_HOST=lfc.grid.cnaf.infn.it
  • Ping the service (take a look at /var/log/lfc/log on the LFC server)
$ lfc-ping -h lfc.grid.cnaf.infn.it
1.8.2-3

Revisions

Date Comment
2012-04-17 installation notes completed - EMI 1 Kebnekaise Products - LFC v. 1.8.2

-- PaoloVeronesi - 2012-04-17

Edit | Attach | PDF | History: r3 < r2 < r1 | Backlinks | Raw View | More topic actions
Topic revision: r3 - 2012-04-17 - PaoloVeronesi
 
This site is powered by the TWiki collaboration platformCopyright © 2008-2019 by the contributing authors. All material on this collaboration platform is the property of the contributing authors.
Ideas, requests, problems regarding TWiki? Send feedback