Notes about Installation and Configuration of a LFC server (draft)
- These notes are provided by site admins on a best effort base as a contribution to the IGI communities and MUST not be considered as a subsitute of the Official IGI documentation.
- This document is addressed to site administrators responsible for middleware installation and configuration.
- The goal of this page is to provide some hints and examples on how to install and configure an IGI LFC server based on EMI/UMD middleware.
NB: LFC service is a
CORE service, it should not be installed at Resource Center level. If you want to provide an official instances which will be added to the IGI endpoint, please contact
igi-noc@lists.italiangrid.it
References
- EMI 1 Kebnekaise Products - LFC v. 1.8.2
- YAIM configuration variables
- About IGI - Italian Grid infrastructure
- About IGI Release
- IGI Official Installation and Configuration guide
- Troubleshooting Guide for Operational Errors on EGI Sites
- Grid Administration FAQs page
Recommendations and Sceanrios
- A full virtualized machine based on KVM has been used in the following notes. There are three installation scenarios that can be follow.
Scenario 1 (all in one)
LFC frontend and backend are installed on the same server. The service needs at least two cores, 4 GB RAM, 10 GB disk space (disk space highly depends on the number of VOs that will be use the instance).
Scenario 2 ( n frontends and one backend)
In this scenario the frontend and the backend are installed on separate servers. The number of frontends could be higher than one for load balancing and high availability purpose.
Scenario 3 ( n forntends and high availability backend)
In this scenario the frontends and backends are installaed on separate server and the backend, based on mysql, is configured in high availability mode (master-master replica).
Service Installation
O.S. and Repos
- Starts from a fresh installation of Scientific Linux 5.x (x86_64).
# cat /etc/redhat-release
Scientific Linux SL release 5.7 (Boron)
- Install the additional repositories: EPEL, Certification Authority, EMI
# cd /etc/yum.repos.d/
# rpm -ivh http://mirror.switch.ch/ftp/mirror/epel//5/x86_64/epel-release-5-4.noarch.rpm
# wget http://repo-pd.italiangrid.it/mrepo/repos/egi-trustanchors.repo
# rpm -ivh http://repo-pd.italiangrid.it/mrepo/EMI/1/sl5/x86_64/updates/emi-release-1.0.1-1.sl5.noarch.rpm
# yum install yum-priorities yum-protectbase
- Be sure that SELINUX is disabled (or permissive). Details on how to disable SELINUX are here:
# getenforce
Disabled
- Check the repos list (sl-*.repo are the repos of the O.S. and they should be present by default).
# ls /etc/yum.repos.d/
emi1-base.repo emi1-updates.repo epel-testing.repo emi1-third-party.repo
sl-contrib.repo sl-fastbugs.repo sl-security.repo sl-testing.repo sl-debuginfo.repo sl.repo sl-srpms.repo
egi-trustanchors.repo
epel.repo
Update host and perform the installation of middleware package(s)
# yum clean all
Loaded plugins: downloadonly, kernel-module, priorities, protect-packages, protectbase, security, verify, versionlock
Cleaning up Everything
# yum install -y ca-policy-egi-core emi-lfc_mysql
Loaded plugins: downloadonly, kernel-module, priorities, protect-packages, protectbase, security, verify, versionlock
263 packages excluded due to repository priority protections
0 packages excluded due to repository protections
Reading version lock configuration
Setting up Install Process
Package ca-policy-egi-core-1.46-1.noarch already installed and latest version
Resolving Dependencies
--> Running transaction check
---> Package emi-lfc_mysql.x86_64 0:1.8.2-3sec.sl5 set to be updated
--> Processing Dependency: lfc-devel for package: emi-lfc_mysql
--> Processing Dependency: emi-version for package: emi-lfc_mysql
--> Processing Dependency: voms for package: emi-lfc_mysql
--> Processing Dependency: glite-yaim-bdii for package: emi-lfc_mysql
--> Processing Dependency: python-lfc for package: emi-lfc_mysql
--> Processing Dependency: edg-mkgridmap for package: emi-lfc_mysql
--> Processing Dependency: fetch-crl for package: emi-lfc_mysql
--> Processing Dependency: bdii for package: emi-lfc_mysql
--> Processing Dependency: perl-lfc for package: emi-lfc_mysql
--> Processing Dependency: lcgdm-libs for package: emi-lfc_mysql
--> Processing Dependency: lfc for package: emi-lfc_mysql
--> Processing Dependency: lcgdm-devel for package: emi-lfc_mysql
--> Processing Dependency: LFC-server-mysql for package: emi-lfc_mysql
--> Processing Dependency: glue-schema for package: emi-lfc_mysql
--> Processing Dependency: lfc-yaim for package: emi-lfc_mysql
--> Processing Dependency: voms-devel for package: emi-lfc_mysql
--> Processing Dependency: lfc-libs for package: emi-lfc_mysql
--> Processing Dependency: glite-yaim-core for package: emi-lfc_mysql
--> Running transaction check
---> Package LFC-server-mysql.x86_64 0:1.8.2-3sec.sl5 set to be updated
--> Processing Dependency: libargus-pep.so.2()(64bit) for package: LFC-server-mysql
--> Processing Dependency: libgsoap.so.0()(64bit) for package: LFC-server-mysql
--> Processing Dependency: libglobus_gssapi_gsi.so.4()(64bit) for package: LFC-server-mysql
--> Processing Dependency: libglobus_gss_assist.so.3()(64bit) for package: LFC-server-mysql
---> Package bdii.noarch 0:5.2.10-1.el5 set to be updated
--> Processing Dependency: openldap-servers for package: bdii
--> Processing Dependency: expect for package: bdii
--> Processing Dependency: openldap-clients for package: bdii
---> Package edg-mkgridmap.noarch 0:4.0.0-1 set to be updated
--> Processing Dependency: perl(IO::Socket::SSL) >= 0.90 for package: edg-mkgridmap
--> Processing Dependency: perl(Net::SSLeay) >= 1.16 for package: edg-mkgridmap
--> Processing Dependency: perl(Net::LDAPS) for package: edg-mkgridmap
--> Processing Dependency: perl(URI::http) for package: edg-mkgridmap
--> Processing Dependency: perl(XML::Parser) for package: edg-mkgridmap
--> Processing Dependency: perl(URI) for package: edg-mkgridmap
--> Processing Dependency: perl(URI::ldap) for package: edg-mkgridmap
--> Processing Dependency: perl(Crypt::SSLeay) for package: edg-mkgridmap
--> Processing Dependency: perl(LWP) for package: edg-mkgridmap
--> Processing Dependency: perl(XML::DOM) for package: edg-mkgridmap
--> Processing Dependency: perl(Net::LDAP::Util) for package: edg-mkgridmap
--> Processing Dependency: perl(Net::LDAP) for package: edg-mkgridmap
--> Processing Dependency: perl(Date::Manip) for package: edg-mkgridmap
--> Processing Dependency: perl(Term::ReadKey) for package: edg-mkgridmap
--> Processing Dependency: perl(LWP::UserAgent) for package: edg-mkgridmap
---> Package emi-version.x86_64 0:1.10.0-1.sl5 set to be updated
---> Package fetch-crl.noarch 0:2.8.5-1.el5 set to be updated
---> Package glite-yaim-bdii.noarch 0:4.3.9-1.el5 set to be updated
---> Package glite-yaim-core.noarch 0:5.0.2-1.sl5 set to be updated
---> Package glue-schema.noarch 0:2.0.8-1.el5 set to be updated
---> Package lcgdm-devel.x86_64 0:1.8.2-3sec.sl5 set to be updated
---> Package lcgdm-libs.x86_64 0:1.8.2-3sec.sl5 set to be updated
---> Package lfc.x86_64 0:1.8.2-3sec.sl5 set to be updated
---> Package lfc-devel.x86_64 0:1.8.2-3sec.sl5 set to be updated
---> Package lfc-libs.x86_64 0:1.8.2-3sec.sl5 set to be updated
---> Package lfc-yaim.noarch 0:4.2.1-0.sl5 set to be updated
---> Package perl-lfc.x86_64 0:1.8.2-3sec.sl5 set to be updated
---> Package python-lfc.x86_64 0:1.8.2-3sec.sl5 set to be updated
---> Package voms.x86_64 0:2.0.7-1.el5 set to be updated
---> Package voms-devel.x86_64 0:2.0.7-1.el5 set to be updated
--> Processing Dependency: automake for package: voms-devel
--> Processing Dependency: openssl-devel for package: voms-devel
--> Running transaction check
---> Package argus-pep-api-c.x86_64 0:2.0.2-1.sl5 set to be updated
---> Package automake.noarch 0:1.9.6-2.3.el5 set to be updated
--> Processing Dependency: autoconf >= 2.58 for package: automake
---> Package expect.x86_64 0:5.43.0-5.1 set to be updated
---> Package globus-gss-assist.x86_64 0:8.1-2.el5 set to be updated
--> Processing Dependency: globus-gsi-sysconfig >= 5 for package: globus-gss-assist
--> Processing Dependency: globus-gsi-cert-utils >= 8 for package: globus-gss-assist
--> Processing Dependency: globus-common >= 14 for package: globus-gss-assist
--> Processing Dependency: globus-callout >= 2 for package: globus-gss-assist
--> Processing Dependency: libglobus_common.so.0(GLOBUS_COMMON_14)(64bit) for package: globus-gss-assist
--> Processing Dependency: libglobus_gsi_sysconfig.so.1()(64bit) for package: globus-gss-assist
--> Processing Dependency: libglobus_gsi_cert_utils.so.0()(64bit) for package: globus-gss-assist
--> Processing Dependency: libglobus_common.so.0()(64bit) for package: globus-gss-assist
--> Processing Dependency: libglobus_callout.so.0()(64bit) for package: globus-gss-assist
---> Package globus-gssapi-gsi.x86_64 0:10.2-2.el5 set to be updated
--> Processing Dependency: globus-openssl-module >= 3 for package: globus-gssapi-gsi
--> Processing Dependency: globus-gsi-proxy-core >= 6 for package: globus-gssapi-gsi
--> Processing Dependency: globus-gsi-openssl-error >= 2 for package: globus-gssapi-gsi
--> Processing Dependency: globus-gsi-credential >= 5 for package: globus-gssapi-gsi
--> Processing Dependency: globus-gsi-callback >= 4 for package: globus-gssapi-gsi
--> Processing Dependency: libglobus_openssl_error.so.0()(64bit) for package: globus-gssapi-gsi
--> Processing Dependency: libglobus_openssl.so.0()(64bit) for package: globus-gssapi-gsi
--> Processing Dependency: libglobus_gsi_proxy_core.so.0()(64bit) for package: globus-gssapi-gsi
--> Processing Dependency: libglobus_gsi_credential.so.1()(64bit) for package: globus-gssapi-gsi
--> Processing Dependency: libglobus_gsi_callback.so.0()(64bit) for package: globus-gssapi-gsi
---> Package gsoap.x86_64 0:2.7.13-4.el5 set to be updated
---> Package openldap-clients.x86_64 0:2.3.43-12.el5_6.7 set to be updated
---> Package openldap-servers.x86_64 0:2.3.43-12.el5_6.7 set to be updated
--> Processing Dependency: libltdl.so.3()(64bit) for package: openldap-servers
---> Package openssl-devel.x86_64 0:0.9.8e-22.el5_8.1 set to be updated
--> Processing Dependency: zlib-devel for package: openssl-devel
--> Processing Dependency: krb5-devel for package: openssl-devel
---> Package perl-Crypt-SSLeay.x86_64 0:0.51-11.el5 set to be updated
---> Package perl-DateManip.noarch 0:5.44-1.2.1 set to be updated
---> Package perl-IO-Socket-SSL.noarch 0:1.01-1.fc6 set to be updated
---> Package perl-LDAP.noarch 1:0.33-3.fc6 set to be updated
--> Processing Dependency: perl(Convert::ASN1) for package: perl-LDAP
--> Processing Dependency: perl(XML::SAX::Base) for package: perl-LDAP
---> Package perl-Net-SSLeay.x86_64 0:1.30-4.fc6 set to be updated
---> Package perl-TermReadKey.x86_64 0:2.30-5.el5 set to be updated
---> Package perl-URI.noarch 0:1.35-3 set to be updated
---> Package perl-XML-DOM.noarch 0:1.44-2.el5 set to be updated
--> Processing Dependency: perl(XML::RegExp) for package: perl-XML-DOM
---> Package perl-XML-Parser.x86_64 0:2.34-6.1.2.2.1 set to be updated
---> Package perl-libwww-perl.noarch 0:5.805-1.1.1 set to be updated
--> Processing Dependency: perl-HTML-Parser >= 3.33 for package: perl-libwww-perl
--> Processing Dependency: perl(HTML::Entities) for package: perl-libwww-perl
--> Processing Dependency: perl(Compress::Zlib) for package: perl-libwww-perl
--> Running transaction check
---> Package autoconf.noarch 0:2.59-12 set to be updated
--> Processing Dependency: imake for package: autoconf
---> Package globus-callout.x86_64 0:2.1-2.el5 set to be updated
---> Package globus-common.x86_64 0:14.5-4.el5 set to be updated
---> Package globus-gsi-callback.x86_64 0:4.1-2.el5 set to be updated
--> Processing Dependency: globus-gsi-proxy-ssl >= 4 for package: globus-gsi-callback
--> Processing Dependency: libglobus_proxy_ssl.so.1()(64bit) for package: globus-gsi-callback
---> Package globus-gsi-cert-utils.x86_64 0:8.1-2.el5 set to be updated
---> Package globus-gsi-credential.x86_64 0:5.1-2.el5 set to be updated
---> Package globus-gsi-openssl-error.x86_64 0:2.1-2.el5 set to be updated
---> Package globus-gsi-proxy-core.x86_64 0:6.1-2.el5 set to be updated
---> Package globus-gsi-sysconfig.x86_64 0:5.1-2.el5 set to be updated
---> Package globus-openssl-module.x86_64 0:3.1-2.el5 set to be updated
---> Package krb5-devel.x86_64 0:1.6.1-70.el5 set to be updated
--> Processing Dependency: libselinux-devel for package: krb5-devel
--> Processing Dependency: e2fsprogs-devel for package: krb5-devel
--> Processing Dependency: keyutils-libs-devel for package: krb5-devel
---> Package libtool-ltdl.x86_64 0:1.5.22-7.el5_4 set to be updated
---> Package perl-Compress-Zlib.x86_64 0:1.42-1.fc6 set to be updated
---> Package perl-Convert-ASN1.noarch 0:0.20-1.1 set to be updated
---> Package perl-HTML-Parser.x86_64 0:3.55-1.fc6 set to be updated
--> Processing Dependency: perl-HTML-Tagset >= 3.03 for package: perl-HTML-Parser
--> Processing Dependency: perl(HTML::Tagset) for package: perl-HTML-Parser
---> Package perl-XML-RegExp.noarch 0:0.03-2.el5 set to be updated
---> Package perl-XML-SAX.noarch 0:0.14-8 set to be updated
--> Processing Dependency: perl(XML::NamespaceSupport) for package: perl-XML-SAX
---> Package zlib-devel.x86_64 0:1.2.3-4.el5 set to be updated
--> Running transaction check
---> Package e2fsprogs-devel.x86_64 0:1.39-33.el5 set to be updated
---> Package globus-gsi-proxy-ssl.x86_64 0:4.1-2.el5 set to be updated
---> Package imake.x86_64 0:1.0.2-3 set to be updated
---> Package keyutils-libs-devel.x86_64 0:1.2-1.el5 set to be updated
---> Package libselinux-devel.x86_64 0:1.33.4-5.7.el5 set to be updated
--> Processing Dependency: libsepol-devel >= 1.15.2-1 for package: libselinux-devel
---> Package perl-HTML-Tagset.noarch 0:3.10-2.1.1 set to be updated
---> Package perl-XML-NamespaceSupport.noarch 0:1.09-1.2.1 set to be updated
--> Running transaction check
---> Package libsepol-devel.x86_64 0:1.15.2-3.el5 set to be updated
--> Finished Dependency Resolution
Beginning Kernel Module Plugin
Finished Kernel Module Plugin
Dependencies Resolved
===========================================================================================================================================================================================================================================
Package Arch Version Repository Size
===========================================================================================================================================================================================================================================
Installing:
emi-lfc_mysql x86_64 1.8.2-3sec.sl5 EMI-1-updates 3.8 k
Installing for dependencies:
LFC-server-mysql x86_64 1.8.2-3sec.sl5 EMI-1-updates 694 k
argus-pep-api-c x86_64 2.0.2-1.sl5 EMI-1-base 53 k
autoconf noarch 2.59-12 sl-base 648 k
automake noarch 1.9.6-2.3.el5 sl-base 476 k
bdii noarch 5.2.10-1.el5 EMI-1-updates 22 k
e2fsprogs-devel x86_64 1.39-33.el5 sl-base 637 k
edg-mkgridmap noarch 4.0.0-1 EMI-1-base 27 k
emi-version x86_64 1.10.0-1.sl5 EMI-1-updates 2.0 k
expect x86_64 5.43.0-5.1 sl-base 160 k
fetch-crl noarch 2.8.5-1.el5 epel 24 k
glite-yaim-bdii noarch 4.3.9-1.el5 EMI-1-updates 10 k
glite-yaim-core noarch 5.0.2-1.sl5 EMI-1-updates 116 k
globus-callout x86_64 2.1-2.el5 epel 17 k
globus-common x86_64 14.5-4.el5 epel 131 k
globus-gsi-callback x86_64 4.1-2.el5 epel 42 k
globus-gsi-cert-utils x86_64 8.1-2.el5 epel 20 k
globus-gsi-credential x86_64 5.1-2.el5 epel 35 k
globus-gsi-openssl-error x86_64 2.1-2.el5 epel 16 k
globus-gsi-proxy-core x86_64 6.1-2.el5 epel 37 k
globus-gsi-proxy-ssl x86_64 4.1-2.el5 epel 18 k
globus-gsi-sysconfig x86_64 5.1-2.el5 epel 30 k
globus-gss-assist x86_64 8.1-2.el5 epel 35 k
globus-gssapi-gsi x86_64 10.2-2.el5 epel 57 k
globus-openssl-module x86_64 3.1-2.el5 epel 13 k
glue-schema noarch 2.0.8-1.el5 EMI-1-updates 33 k
gsoap x86_64 2.7.13-4.el5 epel 444 k
imake x86_64 1.0.2-3 sl-base 318 k
keyutils-libs-devel x86_64 1.2-1.el5 sl-base 27 k
krb5-devel x86_64 1.6.1-70.el5 sl-security 1.9 M
lcgdm-devel x86_64 1.8.2-3sec.sl5 EMI-1-updates 199 k
lcgdm-libs x86_64 1.8.2-3sec.sl5 EMI-1-updates 163 k
lfc x86_64 1.8.2-3sec.sl5 EMI-1-updates 1.5 M
lfc-devel x86_64 1.8.2-3sec.sl5 EMI-1-updates 321 k
lfc-libs x86_64 1.8.2-3sec.sl5 EMI-1-updates 101 k
lfc-yaim noarch 4.2.1-0.sl5 EMI-1-updates 16 k
libselinux-devel x86_64 1.33.4-5.7.el5 sl-base 149 k
libsepol-devel x86_64 1.15.2-3.el5 sl-base 192 k
libtool-ltdl x86_64 1.5.22-7.el5_4 sl-base 38 k
openldap-clients x86_64 2.3.43-12.el5_6.7 sl-base 223 k
openldap-servers x86_64 2.3.43-12.el5_6.7 sl-base 2.2 M
openssl-devel x86_64 0.9.8e-22.el5_8.1 sl-security 1.9 M
perl-Compress-Zlib x86_64 1.42-1.fc6 sl-base 52 k
perl-Convert-ASN1 noarch 0.20-1.1 sl-base 41 k
perl-Crypt-SSLeay x86_64 0.51-11.el5 sl-base 45 k
perl-DateManip noarch 5.44-1.2.1 sl-base 143 k
perl-HTML-Parser x86_64 3.55-1.fc6 sl-base 91 k
perl-HTML-Tagset noarch 3.10-2.1.1 sl-base 14 k
perl-IO-Socket-SSL noarch 1.01-1.fc6 sl-base 49 k
perl-LDAP noarch 1:0.33-3.fc6 sl-base 316 k
perl-Net-SSLeay x86_64 1.30-4.fc6 sl-base 192 k
perl-TermReadKey x86_64 2.30-5.el5 sl-base 32 k
perl-URI noarch 1.35-3 sl-base 116 k
perl-XML-DOM noarch 1.44-2.el5 epel 138 k
perl-XML-NamespaceSupport noarch 1.09-1.2.1 sl-base 15 k
perl-XML-Parser x86_64 2.34-6.1.2.2.1 sl-base 209 k
perl-XML-RegExp noarch 0.03-2.el5 epel 8.2 k
perl-XML-SAX noarch 0.14-8 sl-base 77 k
perl-lfc x86_64 1.8.2-3sec.sl5 EMI-1-updates 325 k
perl-libwww-perl noarch 5.805-1.1.1 sl-base 375 k
python-lfc x86_64 1.8.2-3sec.sl5 EMI-1-updates 1.0 M
voms x86_64 2.0.7-1.el5 EMI-1-updates 163 k
voms-devel x86_64 2.0.7-1.el5 EMI-1-updates 27 k
zlib-devel x86_64 1.2.3-4.el5 sl-base 103 k
Transaction Summary
===========================================================================================================================================================================================================================================
Install 64 Package(s)
Upgrade 0 Package(s)
Total download size: 16 M
Downloading Packages:
(1/64): emi-version-1.10.0-1.sl5.x86_64.rpm | 2.0 kB 00:00
(2/64): emi-lfc_mysql-1.8.2-3sec.sl5.x86_64.rpm | 3.8 kB 00:00
(3/64): perl-XML-RegExp-0.03-2.el5.noarch.rpm | 8.2 kB 00:00
(4/64): glite-yaim-bdii-4.3.9-1.el5.noarch.rpm | 10 kB 00:00
(5/64): globus-openssl-module-3.1-2.el5.x86_64.rpm | 13 kB 00:00
(6/64): perl-HTML-Tagset-3.10-2.1.1.noarch.rpm | 14 kB 00:00
(7/64): perl-XML-NamespaceSupport-1.09-1.2.1.noarch.rpm | 15 kB 00:00
(8/64): lfc-yaim-4.2.1-0.sl5.noarch.rpm | 16 kB 00:00
(9/64): globus-gsi-openssl-error-2.1-2.el5.x86_64.rpm | 16 kB 00:00
(10/64): globus-callout-2.1-2.el5.x86_64.rpm | 17 kB 00:00
(11/64): globus-gsi-proxy-ssl-4.1-2.el5.x86_64.rpm | 18 kB 00:00
(12/64): globus-gsi-cert-utils-8.1-2.el5.x86_64.rpm | 20 kB 00:00
(13/64): bdii-5.2.10-1.el5.noarch.rpm | 22 kB 00:00
(14/64): fetch-crl-2.8.5-1.el5.noarch.rpm | 24 kB 00:00
(15/64): voms-devel-2.0.7-1.el5.x86_64.rpm | 27 kB 00:00
(16/64): edg-mkgridmap-4.0.0-1.noarch.rpm | 27 kB 00:00
(17/64): keyutils-libs-devel-1.2-1.el5.x86_64.rpm | 27 kB 00:00
(18/64): globus-gsi-sysconfig-5.1-2.el5.x86_64.rpm | 30 kB 00:00
(19/64): perl-TermReadKey-2.30-5.el5.x86_64.rpm | 32 kB 00:00
(20/64): glue-schema-2.0.8-1.el5.noarch.rpm | 33 kB 00:00
(21/64): globus-gss-assist-8.1-2.el5.x86_64.rpm | 35 kB 00:00
(22/64): globus-gsi-credential-5.1-2.el5.x86_64.rpm | 35 kB 00:00
(23/64): globus-gsi-proxy-core-6.1-2.el5.x86_64.rpm | 37 kB 00:00
(24/64): libtool-ltdl-1.5.22-7.el5_4.x86_64.rpm | 38 kB 00:00
(25/64): perl-Convert-ASN1-0.20-1.1.noarch.rpm | 41 kB 00:00
(26/64): globus-gsi-callback-4.1-2.el5.x86_64.rpm | 42 kB 00:00
(27/64): perl-Crypt-SSLeay-0.51-11.el5.x86_64.rpm | 45 kB 00:00
(28/64): perl-IO-Socket-SSL-1.01-1.fc6.noarch.rpm | 49 kB 00:00
(29/64): perl-Compress-Zlib-1.42-1.fc6.x86_64.rpm | 52 kB 00:00
(30/64): argus-pep-api-c-2.0.2-1.sl5.x86_64.rpm | 53 kB 00:00
(31/64): globus-gssapi-gsi-10.2-2.el5.x86_64.rpm | 57 kB 00:00
(32/64): perl-XML-SAX-0.14-8.noarch.rpm | 77 kB 00:00
(33/64): perl-HTML-Parser-3.55-1.fc6.x86_64.rpm | 91 kB 00:00
(34/64): lfc-libs-1.8.2-3sec.sl5.x86_64.rpm | 101 kB 00:00
(35/64): zlib-devel-1.2.3-4.el5.x86_64.rpm | 103 kB 00:00
(36/64): perl-URI-1.35-3.noarch.rpm | 116 kB 00:00
(37/64): glite-yaim-core-5.0.2-1.sl5.noarch.rpm | 116 kB 00:00
(38/64): globus-common-14.5-4.el5.x86_64.rpm | 131 kB 00:00
(39/64): perl-XML-DOM-1.44-2.el5.noarch.rpm | 138 kB 00:00
(40/64): perl-DateManip-5.44-1.2.1.noarch.rpm | 143 kB 00:00
(41/64): libselinux-devel-1.33.4-5.7.el5.x86_64.rpm | 149 kB 00:00
(42/64): expect-5.43.0-5.1.x86_64.rpm | 160 kB 00:00
(43/64): lcgdm-libs-1.8.2-3sec.sl5.x86_64.rpm | 163 kB 00:00
(44/64): voms-2.0.7-1.el5.x86_64.rpm | 163 kB 00:00
(45/64): perl-Net-SSLeay-1.30-4.fc6.x86_64.rpm | 192 kB 00:00
(46/64): libsepol-devel-1.15.2-3.el5.x86_64.rpm | 192 kB 00:00
(47/64): lcgdm-devel-1.8.2-3sec.sl5.x86_64.rpm | 199 kB 00:00
(48/64): perl-XML-Parser-2.34-6.1.2.2.1.x86_64.rpm | 209 kB 00:00
(49/64): openldap-clients-2.3.43-12.el5_6.7.x86_64.rpm | 223 kB 00:00
(50/64): perl-LDAP-0.33-3.fc6.noarch.rpm | 316 kB 00:00
(51/64): imake-1.0.2-3.x86_64.rpm | 318 kB 00:00
(52/64): lfc-devel-1.8.2-3sec.sl5.x86_64.rpm | 321 kB 00:00
(53/64): perl-lfc-1.8.2-3sec.sl5.x86_64.rpm | 325 kB 00:00
(54/64): perl-libwww-perl-5.805-1.1.1.noarch.rpm | 375 kB 00:00
(55/64): gsoap-2.7.13-4.el5.x86_64.rpm | 444 kB 00:00
(56/64): automake-1.9.6-2.3.el5.noarch.rpm | 476 kB 00:00
(57/64): e2fsprogs-devel-1.39-33.el5.x86_64.rpm | 637 kB 00:00
(58/64): autoconf-2.59-12.noarch.rpm | 648 kB 00:00
(59/64): LFC-server-mysql-1.8.2-3sec.sl5.x86_64.rpm | 694 kB 00:00
(60/64): python-lfc-1.8.2-3sec.sl5.x86_64.rpm | 1.0 MB 00:00
(61/64): lfc-1.8.2-3sec.sl5.x86_64.rpm | 1.5 MB 00:00
(62/64): openssl-devel-0.9.8e-22.el5_8.1.x86_64.rpm | 1.9 MB 00:01
(63/64): krb5-devel-1.6.1-70.el5.x86_64.rpm | 1.9 MB 00:00
(64/64): openldap-servers-2.3.43-12.el5_6.7.x86_64.rpm | 2.2 MB 00:00
-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
Total 731 kB/s | 16 MB 00:22
warning: rpmts_HdrFromFdno: Header V3 DSA signature: NOKEY, key ID df9e12ef
EMI-1-updates/gpgkey | 1.7 kB 00:00
Importing GPG key 0xDF9E12EF "Doina Cristina Aiftimiei (EMI Release Manager) <aiftim@pd.infn.it>" from /etc/pki/rpm-gpg/RPM-GPG-KEY-emi
Running rpm_check_debug
Running Transaction Test
Finished Transaction Test
Transaction Test Succeeded
Running Transaction
Installing : voms 1/64
Installing : libtool-ltdl 2/64
Installing : globus-common 3/64
Installing : globus-gsi-openssl-error 4/64
Installing : globus-gsi-proxy-ssl 5/64
Installing : globus-gsi-sysconfig 6/64
Installing : globus-openssl-module 7/64
Installing : globus-gsi-cert-utils 8/64
Installing : perl-URI 9/64
Installing : globus-gsi-callback 10/64
Installing : globus-gsi-credential 11/64
Installing : perl-Net-SSLeay 12/64
Installing : perl-IO-Socket-SSL 13/64
Installing : glite-yaim-core 14/64
Installing : glite-yaim-bdii 15/64
Installing : glue-schema 16/64
Installing : globus-gsi-proxy-core 17/64
Installing : globus-gssapi-gsi 18/64
Installing : globus-callout 19/64
Installing : globus-gss-assist 20/64
Installing : lcgdm-libs 21/64
Installing : lfc-libs 22/64
Installing : perl-lfc 23/64
Installing : python-lfc 24/64
Installing : lfc 25/64
Installing : openldap-servers 26/64
Installing : expect 27/64
Installing : openldap-clients 28/64
Installing : imake 29/64
Installing : argus-pep-api-c 30/64
Installing : gsoap 31/64
Installing : LFC-server-mysql 32/64
Installing : perl-TermReadKey 33/64
Installing : perl-Compress-Zlib 34/64
Installing : perl-Crypt-SSLeay 35/64
Installing : lcgdm-devel 36/64
Installing : lfc-devel 37/64
Installing : autoconf 38/64
Installing : automake 39/64
Installing : bdii 40/64
Installing : lfc-yaim 41/64
Installing : emi-version 42/64
Installing : perl-DateManip 43/64
Installing : perl-XML-RegExp 44/64
Installing : e2fsprogs-devel 45/64
Installing : keyutils-libs-devel 46/64
Installing : perl-HTML-Tagset 47/64
Installing : perl-HTML-Parser 48/64
Installing : perl-libwww-perl 49/64
Installing : perl-XML-Parser 50/64
Installing : perl-XML-DOM 51/64
Installing : fetch-crl 52/64
Installing : zlib-devel 53/64
Installing : perl-Convert-ASN1 54/64
Installing : perl-XML-NamespaceSupport 55/64
Installing : perl-XML-SAX 56/64
Installing : perl-LDAP 57/64
Installing : edg-mkgridmap 58/64
Installing : libsepol-devel 59/64
Installing : libselinux-devel 60/64
Installing : krb5-devel 61/64
Installing : openssl-devel 62/64
Installing : voms-devel 63/64
Installing : emi-lfc_mysql 64/64
Installed:
emi-lfc_mysql.x86_64 0:1.8.2-3sec.sl5
Dependency Installed:
LFC-server-mysql.x86_64 0:1.8.2-3sec.sl5 argus-pep-api-c.x86_64 0:2.0.2-1.sl5 autoconf.noarch 0:2.59-12 automake.noarch 0:1.9.6-2.3.el5 bdii.noarch 0:5.2.10-1.el5
e2fsprogs-devel.x86_64 0:1.39-33.el5 edg-mkgridmap.noarch 0:4.0.0-1 emi-version.x86_64 0:1.10.0-1.sl5 expect.x86_64 0:5.43.0-5.1 fetch-crl.noarch 0:2.8.5-1.el5
glite-yaim-bdii.noarch 0:4.3.9-1.el5 glite-yaim-core.noarch 0:5.0.2-1.sl5 globus-callout.x86_64 0:2.1-2.el5 globus-common.x86_64 0:14.5-4.el5 globus-gsi-callback.x86_64 0:4.1-2.el5
globus-gsi-cert-utils.x86_64 0:8.1-2.el5 globus-gsi-credential.x86_64 0:5.1-2.el5 globus-gsi-openssl-error.x86_64 0:2.1-2.el5 globus-gsi-proxy-core.x86_64 0:6.1-2.el5 globus-gsi-proxy-ssl.x86_64 0:4.1-2.el5
globus-gsi-sysconfig.x86_64 0:5.1-2.el5 globus-gss-assist.x86_64 0:8.1-2.el5 globus-gssapi-gsi.x86_64 0:10.2-2.el5 globus-openssl-module.x86_64 0:3.1-2.el5 glue-schema.noarch 0:2.0.8-1.el5
gsoap.x86_64 0:2.7.13-4.el5 imake.x86_64 0:1.0.2-3 keyutils-libs-devel.x86_64 0:1.2-1.el5 krb5-devel.x86_64 0:1.6.1-70.el5 lcgdm-devel.x86_64 0:1.8.2-3sec.sl5
lcgdm-libs.x86_64 0:1.8.2-3sec.sl5 lfc.x86_64 0:1.8.2-3sec.sl5 lfc-devel.x86_64 0:1.8.2-3sec.sl5 lfc-libs.x86_64 0:1.8.2-3sec.sl5 lfc-yaim.noarch 0:4.2.1-0.sl5
libselinux-devel.x86_64 0:1.33.4-5.7.el5 libsepol-devel.x86_64 0:1.15.2-3.el5 libtool-ltdl.x86_64 0:1.5.22-7.el5_4 openldap-clients.x86_64 0:2.3.43-12.el5_6.7 openldap-servers.x86_64 0:2.3.43-12.el5_6.7
openssl-devel.x86_64 0:0.9.8e-22.el5_8.1 perl-Compress-Zlib.x86_64 0:1.42-1.fc6 perl-Convert-ASN1.noarch 0:0.20-1.1 perl-Crypt-SSLeay.x86_64 0:0.51-11.el5 perl-DateManip.noarch 0:5.44-1.2.1
perl-HTML-Parser.x86_64 0:3.55-1.fc6 perl-HTML-Tagset.noarch 0:3.10-2.1.1 perl-IO-Socket-SSL.noarch 0:1.01-1.fc6 perl-LDAP.noarch 1:0.33-3.fc6 perl-Net-SSLeay.x86_64 0:1.30-4.fc6
perl-TermReadKey.x86_64 0:2.30-5.el5 perl-URI.noarch 0:1.35-3 perl-XML-DOM.noarch 0:1.44-2.el5 perl-XML-NamespaceSupport.noarch 0:1.09-1.2.1 perl-XML-Parser.x86_64 0:2.34-6.1.2.2.1
perl-XML-RegExp.noarch 0:0.03-2.el5 perl-XML-SAX.noarch 0:0.14-8 perl-lfc.x86_64 0:1.8.2-3sec.sl5 perl-libwww-perl.noarch 0:5.805-1.1.1 python-lfc.x86_64 0:1.8.2-3sec.sl5
voms.x86_64 0:2.0.7-1.el5 voms-devel.x86_64 0:2.0.7-1.el5 zlib-devel.x86_64 0:1.2.3-4.el5
Complete!
MySQL server installation and configuration
NB: If you want to install/run a
MySQL server in the same host as the LFC, add
mysql-server
to the yum install command above.
# yum install -y mysql-server
Loaded plugins: downloadonly, kernel-module, priorities, protect-packages, protectbase, security, verify, versionlock
263 packages excluded due to repository priority protections
0 packages excluded due to repository protections
Reading version lock configuration
Setting up Install Process
Resolving Dependencies
--> Running transaction check
---> Package mysql-server.x86_64 0:5.0.95-1.el5_7.1 set to be updated
--> Processing Dependency: perl-DBD-MySQL for package: mysql-server
--> Running transaction check
---> Package perl-DBD-MySQL.x86_64 0:3.0007-2.el5 set to be updated
--> Finished Dependency Resolution
Beginning Kernel Module Plugin
Finished Kernel Module Plugin
Dependencies Resolved
===========================================================================================================================================================================================================================================
Package Arch Version Repository Size
===========================================================================================================================================================================================================================================
Installing:
mysql-server x86_64 5.0.95-1.el5_7.1 sl-security 9.9 M
Installing for dependencies:
perl-DBD-MySQL x86_64 3.0007-2.el5 sl-base 147 k
Transaction Summary
===========================================================================================================================================================================================================================================
Install 2 Package(s)
Upgrade 0 Package(s)
Total download size: 10 M
Downloading Packages:
(1/2): perl-DBD-MySQL-3.0007-2.el5.x86_64.rpm | 147 kB 00:00
(2/2): mysql-server-5.0.95-1.el5_7.1.x86_64.rpm | 9.9 MB 00:02
-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
Total 1.8 MB/s | 10 MB 00:05
Running rpm_check_debug
Running Transaction Test
Finished Transaction Test
Transaction Test Succeeded
Running Transaction
Installing : perl-DBD-MySQL 1/2
Installing : mysql-server 2/2
Installed:
mysql-server.x86_64 0:5.0.95-1.el5_7.1
Dependency Installed:
perl-DBD-MySQL.x86_64 0:3.0007-2.el5
Complete!
- Configure MySQL to start at boot time
# chkconfig mysqld on
# /etc/init.d/mysqld start
Initializing MySQL database: Installing MySQL system tables...
OK
Filling help tables...
OK
To start mysqld at boot time you have to copy
support-files/mysql.server to the right place for your system
PLEASE REMEMBER TO SET A PASSWORD FOR THE MySQL root USER !
To do so, start the server, then issue the following commands:
/usr/bin/mysqladmin -u root password 'new-password'
/usr/bin/mysqladmin -u root -h lfcserver04.cnaf.infn.it password 'new-password'
Alternatively you can run:
/usr/bin/mysql_secure_installation
which will also give you the option of removing the test
databases and anonymous user created by default. This is
strongly recommended for production servers.
See the manual for more instructions.
You can start the MySQL daemon with:
cd /usr ; /usr/bin/mysqld_safe &
You can test the MySQL daemon with mysql-test-run.pl
cd mysql-test ; perl mysql-test-run.pl
Please report any problems with the /usr/bin/mysqlbug script!
The latest information about MySQL is available on the web at
http://www.mysql.com
Support MySQL by buying support/licenses at http://shop.mysql.com
[ OK ]
Starting MySQL: [ OK ]
- Configure MySQL service using
/usr/bin/mysql_secure_installation
# /usr/bin/mysql_secure_installation
NOTE: RUNNING ALL PARTS OF THIS SCRIPT IS RECOMMENDED FOR ALL MySQL
SERVERS IN PRODUCTION USE! PLEASE READ EACH STEP CAREFULLY!
In order to log into MySQL to secure it, we'll need the current
password for the root user. If you've just installed MySQL, and
you haven't set the root password yet, the password will be blank,
so you should just press enter here.
Enter current password for root (enter for none):
OK, successfully used password, moving on...
Setting the root password ensures that nobody can log into the MySQL
root user without the proper authorisation.
Set root password? [Y/n] Y
New password:
Re-enter new password:
Password updated successfully!
Reloading privilege tables..
... Success!
By default, a MySQL installation has an anonymous user, allowing anyone
to log into MySQL without having to have a user account created for
them. This is intended only for testing, and to make the installation
go a bit smoother. You should remove them before moving into a
production environment.
Remove anonymous users? [Y/n] Y
... Success!
Normally, root should only be allowed to connect from 'localhost'. This
ensures that someone cannot guess at the root password from the network.
Disallow root login remotely? [Y/n] Y
... Success!
By default, MySQL comes with a database named 'test' that anyone can
access. This is also intended only for testing, and should be removed
before moving into a production environment.
Remove test database and access to it? [Y/n] Y
- Dropping test database...
... Success!
- Removing privileges on test database...
... Success!
Reloading the privilege tables will ensure that all changes made so far
will take effect immediately.
Reload privilege tables now? [Y/n] Y
... Success!
Cleaning up...
All done! If you've completed all of the above steps, your MySQL
installation should now be secure.
Thanks for using MySQL!
MySQL master-master replica
To setup master-master replica between two (or more) MySQL server, please follow the guides available
HERE and
HERE
LFC Service configuration
LFC YAIM variables are reported
here
# cp -vr /opt/glite/yaim/examples/siteinfo .
`/opt/glite/yaim/examples/siteinfo' -> `./siteinfo'
`/opt/glite/yaim/examples/siteinfo/services' -> `./siteinfo/services'
`/opt/glite/yaim/examples/siteinfo/services/lfc_oracle' -> `./siteinfo/services/lfc_oracle'
`/opt/glite/yaim/examples/siteinfo/services/glite-bdii_site' -> `./siteinfo/services/glite-bdii_site'
`/opt/glite/yaim/examples/siteinfo/services/lfc_mysql' -> `./siteinfo/services/lfc_mysql'
`/opt/glite/yaim/examples/siteinfo/site-info.def' -> `./siteinfo/site-info.def'
# rm /root/siteinfo/services/lfc_oracle /root/siteinfo/services/glite-bdii_site
site-info.def (draft)
The configuration file for this service is really basic:
# cat /root/siteinfo/site-info.def
################################
# Site configuration variables #
################################
SITE_NAME=INFN-CNAF
SITE_EMAIL="grid-operations@lists.cnaf.infn.it"
SITE_LAT=44.4948
SITE_LONG=11.3417
MYSQL_PASSWORD=<KEEP IT SECRET>
VOS="gerda.mpg.de icarus-exp.org igi.italiangrid.it ops infngrid"
# Download the last files (groups.conf and users.conf) at https://wiki.italiangrid.it/twiki/bin/view/IGIRelease/IgiEmi#IGI_YAIM_configuration_files
GROUPS_CONF=/root/siteinfo/groups.conf
USERS_CONF=/root/siteinfo/users.conf
lfc_mysql (draft)
The configuration file for this service is really basic:
# cat /root/siteinfo/services/lfc_mysql
# LFC hostname
LFC_HOST=lfcserver04.cnaf.infn.it
LFC_HOST_ALIAS="lfcserver.italiangrid.it"
LFC_DB_HOST=lfcdb.italiangrid.it
LFC_DB=cns_db
LFC_DB_PASSWORD=<KEEP IT SECRET>
LFC_CENTRAL="gerda.mpg.de icarus-exp.org igi.italiangrid.it"
LFC_LOCAL="ops infngrid"
--
PaoloVeronesi - 2012-04-17