Notes about Installation and Configuration of myproxy (DRAFT)
- These notes are provided by site admins on a best effort base as a contribution to the IGI communities and MUST not be considered as a subsitute of the Official IGI documentation.
- This document is addressed to site administrators responsible for middleware installation and configuration.
- The goal of this page is to provide some hints and examples on how to install and configure an IGI myproxy service based on UMD middleware.
NB: The myproxy service is a
CORE service, it should not be installed at Resource Center level. The official endpoint provided by IGI is
myproxy.cnaf.infn.it
and
MUST be used by all Resource Centers and Services part of the IGI infrastructure.
References
- About IGI - Italian Grid infrastructure
- About IGI Release
- IGI Official Installation and Configuration guide
- Troubleshooting Guide for Operational Errors on EGI Sites
- Grid Administration FAQs page
Reccommendations
- The service needs at least:
- 3 cores
- 3 GB RAM
- 10 GB disk space.
A full virtualized machine based on KVM has been used in the following notes.
O.S. and Repos
- Starts from a fresh installation of Scientific Linux 5.x (x86_64).
# cat /etc/redhat-release
Scientific Linux SL release 5.7 (Boron)
* Install the additional repositories: EPEL, Certification Authority, UMD
# cd /etc/yum.repos.d/
# rpm -ivh http://mirror.switch.ch/ftp/mirror/epel//5/x86_64/epel-release-5-4.noarch.rpm
# wget http://repo-pd.italiangrid.it/mrepo/repos/egi-trustanchors.repo
# rpm -ivh http://repo-pd.italiangrid.it/mrepo/EMI/1/sl5/x86_64/updates/emi-release-1.0.1-1.sl5.noarch.rpm
# yum install yum-priorities yum-protectbase
- Be sure that SELINUX is disabled (or permissive). Details on how to disable SELINUX are here:
# getenforce
Disabled
- Check the repos list (sl-*.repo are the repos of the O.S. and they should be present by default).
# ls /etc/yum.repos.d/
egi-trustanchors.repo
emi1-third-party.repo emi1-base.repo emi1-updates.repo
epel.repo epel-testing.repo
sl-contrib.repo sl-fastbugs.repo sl-security.repo sl-testing.repo sl-debuginfo.repo sl.repo sl-srpms.repo
Update host and perform the installation of package(s) (DRAFT)
# yum clean all
Loaded plugins: downloadonly, kernel-module, priorities, protect-packages, protectbase, security, verify, versionlock
Cleaning up Everything
# yum install ca-policy-egi-core emi-px
Loaded plugins: downloadonly, kernel-module, priorities, protectbase
sl-security | 1.9 kB 00:00
sl-security/primary_db | 299 kB 00:01
242 packages excluded due to repository priority protections
0 packages excluded due to repository protections
Setting up Install Process
Package ca-policy-egi-core-1.43-1.noarch already installed and latest version
Resolving Dependencies
--> Running transaction check
---> Package emi-px.x86_64 0:1.0.0-1.sl5 set to be updated
--> Processing Dependency: glite-px-myproxy-yaim for package: emi-px
--> Processing Dependency: emi-version for package: emi-px
--> Processing Dependency: myproxy-admin for package: emi-px
--> Processing Dependency: fetch-crl for package: emi-px
--> Processing Dependency: bdii for package: emi-px
--> Processing Dependency: myproxy-server for package: emi-px
--> Processing Dependency: glue-schema for package: emi-px
--> Processing Dependency: glite-info-provider-service for package: emi-px
--> Running transaction check
---> Package bdii.noarch 0:5.2.5-2.el5 set to be updated
--> Processing Dependency: openldap-servers for package: bdii
--> Processing Dependency: expect for package: bdii
--> Processing Dependency: openldap-clients for package: bdii
---> Package emi-version.x86_64 0:1.7.0-1.sl5 set to be updated
---> Package fetch-crl.noarch 0:2.8.4-2.el5 set to be updated
---> Package glite-info-provider-service.noarch 0:1.7.0-1.el5 set to be updated
---> Package glite-px-myproxy-yaim.x86_64 0:4.1.4-2.sl5 set to be updated
--> Processing Dependency: glite-yaim-core for package: glite-px-myproxy-yaim
--> Processing Dependency: glite-yaim-bdii for package: glite-px-myproxy-yaim
---> Package glue-schema.noarch 0:2.0.8-1.el5 set to be updated
---> Package myproxy-admin.x86_64 0:5.5-1.el5 set to be updated
--> Processing Dependency: myproxy-libs = 5.5-1.el5 for package: myproxy-admin
--> Processing Dependency: myproxy = 5.5-1.el5 for package: myproxy-admin
--> Processing Dependency: globus-gsi-cert-utils-progs for package: myproxy-admin
--> Processing Dependency: libglobus_gsi_credential.so.1()(64bit) for package: myproxy-admin
--> Processing Dependency: libglobus_gsi_cert_utils.so.0()(64bit) for package: myproxy-admin
--> Processing Dependency: libglobus_gsi_sysconfig.so.1()(64bit) for package: myproxy-admin
--> Processing Dependency: libltdl.so.3()(64bit) for package: myproxy-admin
--> Processing Dependency: libglobus_openssl.so.0()(64bit) for package: myproxy-admin
--> Processing Dependency: libglobus_proxy_ssl.so.1()(64bit) for package: myproxy-admin
--> Processing Dependency: libglobus_gsi_callback.so.0()(64bit) for package: myproxy-admin
--> Processing Dependency: libglobus_gsi_proxy_core.so.0()(64bit) for package: myproxy-admin
--> Processing Dependency: libglobus_xio.so.0()(64bit) for package: myproxy-admin
--> Processing Dependency: libmyproxy.so.5()(64bit) for package: myproxy-admin
--> Processing Dependency: libglobus_openssl_error.so.0()(64bit) for package: myproxy-admin
--> Processing Dependency: libglobus_oldgaa.so.0()(64bit) for package: myproxy-admin
--> Processing Dependency: libvomsapi.so.1()(64bit) for package: myproxy-admin
--> Processing Dependency: libglobus_gssapi_gsi.so.4()(64bit) for package: myproxy-admin
--> Processing Dependency: libglobus_common.so.0()(64bit) for package: myproxy-admin
--> Processing Dependency: libglobus_gss_assist.so.3()(64bit) for package: myproxy-admin
--> Processing Dependency: libglobus_callout.so.0()(64bit) for package: myproxy-admin
--> Processing Dependency: libglobus_usage.so.0()(64bit) for package: myproxy-admin
---> Package myproxy-server.x86_64 0:5.5-1.el5 set to be updated
--> Running transaction check
---> Package expect.x86_64 0:5.43.0-5.1 set to be updated
---> Package glite-yaim-bdii.noarch 0:4.3.4-1.el5 set to be updated
---> Package glite-yaim-core.noarch 0:5.0.2-1.sl5 set to be updated
---> Package globus-callout.x86_64 0:0.7-8.el5 set to be updated
--> Processing Dependency: globus-libtool >= 1 for package: globus-callout
---> Package globus-common.x86_64 0:11.6-5.el5 set to be updated
---> Package globus-gsi-callback.x86_64 0:2.8-2.el5 set to be updated
--> Processing Dependency: globus-openssl >= 1 for package: globus-gsi-callback
---> Package globus-gsi-cert-utils.x86_64 0:6.7-2.el5 set to be updated
---> Package globus-gsi-cert-utils-progs.x86_64 0:6.7-2.el5 set to be updated
--> Processing Dependency: globus-common-setup >= 2 for package: globus-gsi-cert-utils-progs
--> Processing Dependency: globus-openssl-progs >= 1 for package: globus-gsi-cert-utils-progs
---> Package globus-gsi-credential.x86_64 0:3.5-3.el5 set to be updated
---> Package globus-gsi-openssl-error.x86_64 0:0.14-8.el5 set to be updated
---> Package globus-gsi-proxy-core.x86_64 0:4.7-2.el5 set to be updated
---> Package globus-gsi-proxy-ssl.x86_64 0:2.3-3.el5 set to be updated
---> Package globus-gsi-sysconfig.x86_64 0:3.2-1.el5 set to be updated
---> Package globus-gss-assist.x86_64 0:5.10-1.el5 set to be updated
---> Package globus-gssapi-gsi.x86_64 0:7.8-1.el5 set to be updated
---> Package globus-openssl-module.x86_64 0:1.3-3.el5 set to be updated
---> Package globus-usage.x86_64 0:1.4-2.el5 set to be updated
---> Package globus-xio.x86_64 0:2.8-4.el5 set to be updated
---> Package libtool-ltdl.x86_64 0:1.5.22-7.el5_4 set to be updated
---> Package myproxy.x86_64 0:5.5-1.el5 set to be updated
--> Processing Dependency: globus-proxy-utils for package: myproxy
--> Processing Dependency: voms-clients for package: myproxy
---> Package myproxy-libs.x86_64 0:5.5-1.el5 set to be updated
---> Package openldap-clients.x86_64 0:2.3.43-12.el5_6.7 set to be updated
---> Package openldap-servers.x86_64 0:2.3.43-12.el5_6.7 set to be updated
EGI-trustanchors/filelists | 14 kB 00:00
EMI-1-base/filelists_db | 181 kB 00:00
EMI-1-third-party/filelists_db | 57 kB 00:00
EMI-1-updates/filelists_db | 113 kB 00:00
epel/filelists_db | 5.5 MB 00:00
sl-base/filelists | 3.3 MB 00:02
sl-security/filelists_db | 1.1 MB 00:01
---> Package voms.x86_64 0:2.0.2-1.sl5 set to be updated
--> Running transaction check
---> Package globus-common-progs.x86_64 0:11.6-5.el5 set to be updated
--> Processing Dependency: autoconf for package: globus-common-progs
--> Processing Dependency: finger for package: globus-common-progs
--> Processing Dependency: cvs for package: globus-common-progs
---> Package globus-libtool.x86_64 0:1.2-4.el5 set to be updated
---> Package globus-openssl.x86_64 0:5.1-2.el5 set to be updated
---> Package globus-openssl-progs.x86_64 0:5.1-2.el5 set to be updated
---> Package globus-proxy-utils.x86_64 0:3.10-1.el5 set to be updated
---> Package voms-clients.x86_64 0:2.0.0-1.sl5 set to be updated
--> Running transaction check
---> Package autoconf.noarch 0:2.59-12 set to be updated
--> Processing Dependency: imake for package: autoconf
---> Package cvs.x86_64 0:1.11.22-7.el5 set to be updated
---> Package finger.x86_64 0:0.17-33 set to be updated
--> Running transaction check
---> Package imake.x86_64 0:1.0.2-3 set to be updated
--> Finished Dependency Resolution
Beginning Kernel Module Plugin
Finished Kernel Module Plugin
Dependencies Resolved
==================================================================================================================================================================================
Package Arch Version Repository Size
==================================================================================================================================================================================
Installing:
emi-px x86_64 1.0.0-1.sl5 EMI-1-base 1.7 k
Installing for dependencies:
autoconf noarch 2.59-12 sl-base 648 k
bdii noarch 5.2.5-2.el5 EMI-1-updates 20 k
cvs x86_64 1.11.22-7.el5 sl-base 737 k
emi-version x86_64 1.7.0-1.sl5 EMI-1-updates 2.1 k
expect x86_64 5.43.0-5.1 sl-base 160 k
fetch-crl noarch 2.8.4-2.el5 epel 24 k
finger x86_64 0.17-33 sl-base 21 k
glite-info-provider-service noarch 1.7.0-1.el5 EMI-1-updates 53 k
glite-px-myproxy-yaim x86_64 4.1.4-2.sl5 EMI-1-base 8.1 k
glite-yaim-bdii noarch 4.3.4-1.el5 EMI-1-updates 10 k
glite-yaim-core noarch 5.0.2-1.sl5 EMI-1-updates 116 k
globus-callout x86_64 0.7-8.el5 epel 16 k
globus-common x86_64 11.6-5.el5 epel 109 k
globus-common-progs x86_64 11.6-5.el5 epel 67 k
globus-gsi-callback x86_64 2.8-2.el5 epel 39 k
globus-gsi-cert-utils x86_64 6.7-2.el5 epel 18 k
globus-gsi-cert-utils-progs x86_64 6.7-2.el5 epel 26 k
globus-gsi-credential x86_64 3.5-3.el5 epel 32 k
globus-gsi-openssl-error x86_64 0.14-8.el5 epel 15 k
globus-gsi-proxy-core x86_64 4.7-2.el5 epel 33 k
globus-gsi-proxy-ssl x86_64 2.3-3.el5 epel 17 k
globus-gsi-sysconfig x86_64 3.2-1.el5 epel 28 k
globus-gss-assist x86_64 5.10-1.el5 epel 31 k
globus-gssapi-gsi x86_64 7.8-1.el5 epel 55 k
globus-libtool x86_64 1.2-4.el5 epel 4.2 k
globus-openssl x86_64 5.1-2.el5 epel 4.6 k
globus-openssl-module x86_64 1.3-3.el5 epel 13 k
globus-openssl-progs x86_64 5.1-2.el5 epel 4.3 k
globus-proxy-utils x86_64 3.10-1.el5 epel 45 k
globus-usage x86_64 1.4-2.el5 epel 15 k
globus-xio x86_64 2.8-4.el5 epel 123 k
glue-schema noarch 2.0.8-1.el5 EMI-1-updates 33 k
imake x86_64 1.0.2-3 sl-base 318 k
libtool-ltdl x86_64 1.5.22-7.el5_4 sl-base 38 k
myproxy x86_64 5.5-1.el5 epel 86 k
myproxy-admin x86_64 5.5-1.el5 epel 55 k
myproxy-libs x86_64 5.5-1.el5 epel 121 k
myproxy-server x86_64 5.5-1.el5 epel 52 k
openldap-clients x86_64 2.3.43-12.el5_6.7 sl-base 223 k
openldap-servers x86_64 2.3.43-12.el5_6.7 sl-base 2.2 M
voms x86_64 2.0.2-1.sl5 EMI-1-base 165 k
voms-clients x86_64 2.0.0-1.sl5 EMI-1-base 178 k
Transaction Summary
==================================================================================================================================================================================
Install 43 Package(s)
Upgrade 0 Package(s)
Total download size: 5.9 M
Is this ok [y/N]:
Downloading Packages:
(1/43): emi-px-1.0.0-1.sl5.x86_64.rpm | 1.7 kB 00:00
(2/43): emi-version-1.7.0-1.sl5.x86_64.rpm | 2.1 kB 00:00
(3/43): globus-libtool-1.2-4.el5.x86_64.rpm | 4.2 kB 00:00
(4/43): globus-openssl-progs-5.1-2.el5.x86_64.rpm | 4.3 kB 00:00
(5/43): globus-openssl-5.1-2.el5.x86_64.rpm | 4.6 kB 00:00
(6/43): glite-px-myproxy-yaim-4.1.4-2.sl5.x86_64.rpm | 8.1 kB 00:00
(7/43): glite-yaim-bdii-4.3.4-1.el5.noarch.rpm | 10 kB 00:00
(8/43): globus-openssl-module-1.3-3.el5.x86_64.rpm | 13 kB 00:00
(9/43): globus-gsi-openssl-error-0.14-8.el5.x86_64.rpm | 15 kB 00:00
(10/43): globus-usage-1.4-2.el5.x86_64.rpm | 15 kB 00:00
(11/43): globus-callout-0.7-8.el5.x86_64.rpm | 16 kB 00:00
(12/43): globus-gsi-proxy-ssl-2.3-3.el5.x86_64.rpm | 17 kB 00:00
(13/43): globus-gsi-cert-utils-6.7-2.el5.x86_64.rpm | 18 kB 00:00
(14/43): bdii-5.2.5-2.el5.noarch.rpm | 20 kB 00:00
(15/43): finger-0.17-33.x86_64.rpm | 21 kB 00:00
(16/43): fetch-crl-2.8.4-2.el5.noarch.rpm | 24 kB 00:00
(17/43): globus-gsi-cert-utils-progs-6.7-2.el5.x86_64.rpm | 26 kB 00:00
(18/43): globus-gsi-sysconfig-3.2-1.el5.x86_64.rpm | 28 kB 00:00
(19/43): globus-gss-assist-5.10-1.el5.x86_64.rpm | 31 kB 00:00
(20/43): globus-gsi-credential-3.5-3.el5.x86_64.rpm | 32 kB 00:00
(21/43): globus-gsi-proxy-core-4.7-2.el5.x86_64.rpm | 33 kB 00:00
(22/43): glue-schema-2.0.8-1.el5.noarch.rpm | 33 kB 00:00
(23/43): libtool-ltdl-1.5.22-7.el5_4.x86_64.rpm | 38 kB 00:00
(24/43): globus-gsi-callback-2.8-2.el5.x86_64.rpm | 39 kB 00:00
(25/43): globus-proxy-utils-3.10-1.el5.x86_64.rpm | 45 kB 00:00
(26/43): myproxy-server-5.5-1.el5.x86_64.rpm | 52 kB 00:00
(27/43): glite-info-provider-service-1.7.0-1.el5.noarch.rpm | 53 kB 00:00
(28/43): globus-gssapi-gsi-7.8-1.el5.x86_64.rpm | 55 kB 00:00
(29/43): myproxy-admin-5.5-1.el5.x86_64.rpm | 55 kB 00:00
(30/43): globus-common-progs-11.6-5.el5.x86_64.rpm | 67 kB 00:00
(31/43): myproxy-5.5-1.el5.x86_64.rpm | 86 kB 00:00
(32/43): globus-common-11.6-5.el5.x86_64.rpm | 109 kB 00:00
(33/43): glite-yaim-core-5.0.2-1.sl5.noarch.rpm | 116 kB 00:00
(34/43): myproxy-libs-5.5-1.el5.x86_64.rpm | 121 kB 00:00
(35/43): globus-xio-2.8-4.el5.x86_64.rpm | 123 kB 00:00
(36/43): expect-5.43.0-5.1.x86_64.rpm | 160 kB 00:00
(37/43): voms-2.0.2-1.sl5.x86_64.rpm | 165 kB 00:00
(38/43): voms-clients-2.0.0-1.sl5.x86_64.rpm | 178 kB 00:00
(39/43): openldap-clients-2.3.43-12.el5_6.7.x86_64.rpm | 223 kB 00:00
(40/43): imake-1.0.2-3.x86_64.rpm | 318 kB 00:00
(41/43): autoconf-2.59-12.noarch.rpm | 648 kB 00:00
(42/43): cvs-1.11.22-7.el5.x86_64.rpm | 737 kB 00:00
(43/43): openldap-servers-2.3.43-12.el5_6.7.x86_64.rpm | 2.2 MB 00:00
----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
Total 727 kB/s | 5.9 MB 00:08
warning: rpmts_HdrFromFdno: Header V3 DSA signature: NOKEY, key ID 217521f6
epel/gpgkey | 1.7 kB 00:00
Importing GPG key 0x217521F6 "Fedora EPEL <epel@fedoraproject.org>" from /etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL
Is this ok [y/N]: y
warning: rpmts_HdrFromFdno: Header V3 DSA signature: NOKEY, key ID df9e12ef
EMI-1-updates/gpgkey | 1.7 kB 00:00
Importing GPG key 0xDF9E12EF "Doina Cristina Aiftimiei (EMI Release Manager) <aiftim@pd.infn.it>" from /etc/pki/rpm-gpg/RPM-GPG-KEY-emi
Is this ok [y/N]: y
Running rpm_check_debug
Running Transaction Test
Finished Transaction Test
Transaction Test Succeeded
Running Transaction
Installing : libtool-ltdl 1/43
Installing : voms 2/43
Installing : globus-openssl 3/43
Installing : globus-gsi-proxy-ssl 4/43
Installing : globus-libtool 5/43
Installing : globus-common 6/43
Installing : globus-gsi-openssl-error 7/43
Installing : globus-gsi-sysconfig 8/43
Installing : globus-openssl-module 9/43
Installing : globus-gsi-cert-utils 10/43
Installing : globus-gsi-callback 11/43
Installing : globus-gsi-credential 12/43
Installing : globus-gsi-proxy-core 13/43
Installing : globus-gssapi-gsi 14/43
Installing : globus-callout 15/43
Installing : globus-gss-assist 16/43
Installing : globus-xio 17/43
Installing : globus-usage 18/43
Installing : myproxy-libs 19/43
Installing : myproxy-server 20/43
Installing : glue-schema 21/43
Installing : globus-proxy-utils 22/43
Installing : voms-clients 23/43
Installing : myproxy 24/43
Installing : openldap-servers 25/43
Installing : expect 26/43
Installing : openldap-clients 27/43
Installing : imake 28/43
Installing : cvs 29/43
Installing : finger 30/43
Installing : autoconf 31/43
Installing : globus-common-progs 32/43
Installing : bdii 33/43
Installing : globus-openssl-progs 34/43
Installing : globus-gsi-cert-utils-progs 35/43
Installing : myproxy-admin 36/43
Installing : glite-yaim-bdii 37/43
Installing : glite-yaim-core 38/43
Installing : glite-px-myproxy-yaim 39/43
Installing : emi-version 40/43
Installing : glite-info-provider-service 41/43
Installing : fetch-crl 42/43
Installing : emi-px 43/43
Installed:
emi-px.x86_64 0:1.0.0-1.sl5
Dependency Installed:
autoconf.noarch 0:2.59-12 bdii.noarch 0:5.2.5-2.el5 cvs.x86_64 0:1.11.22-7.el5
emi-version.x86_64 0:1.7.0-1.sl5 expect.x86_64 0:5.43.0-5.1 fetch-crl.noarch 0:2.8.4-2.el5
finger.x86_64 0:0.17-33 glite-info-provider-service.noarch 0:1.7.0-1.el5 glite-px-myproxy-yaim.x86_64 0:4.1.4-2.sl5
glite-yaim-bdii.noarch 0:4.3.4-1.el5 glite-yaim-core.noarch 0:5.0.2-1.sl5 globus-callout.x86_64 0:0.7-8.el5
globus-common.x86_64 0:11.6-5.el5 globus-common-progs.x86_64 0:11.6-5.el5 globus-gsi-callback.x86_64 0:2.8-2.el5
globus-gsi-cert-utils.x86_64 0:6.7-2.el5 globus-gsi-cert-utils-progs.x86_64 0:6.7-2.el5 globus-gsi-credential.x86_64 0:3.5-3.el5
globus-gsi-openssl-error.x86_64 0:0.14-8.el5 globus-gsi-proxy-core.x86_64 0:4.7-2.el5 globus-gsi-proxy-ssl.x86_64 0:2.3-3.el5
globus-gsi-sysconfig.x86_64 0:3.2-1.el5 globus-gss-assist.x86_64 0:5.10-1.el5 globus-gssapi-gsi.x86_64 0:7.8-1.el5
globus-libtool.x86_64 0:1.2-4.el5 globus-openssl.x86_64 0:5.1-2.el5 globus-openssl-module.x86_64 0:1.3-3.el5
globus-openssl-progs.x86_64 0:5.1-2.el5 globus-proxy-utils.x86_64 0:3.10-1.el5 globus-usage.x86_64 0:1.4-2.el5
globus-xio.x86_64 0:2.8-4.el5 glue-schema.noarch 0:2.0.8-1.el5 imake.x86_64 0:1.0.2-3
libtool-ltdl.x86_64 0:1.5.22-7.el5_4 myproxy.x86_64 0:5.5-1.el5 myproxy-admin.x86_64 0:5.5-1.el5
myproxy-libs.x86_64 0:5.5-1.el5 myproxy-server.x86_64 0:5.5-1.el5 openldap-clients.x86_64 0:2.3.43-12.el5_6.7
openldap-servers.x86_64 0:2.3.43-12.el5_6.7 voms.x86_64 0:2.0.2-1.sl5 voms-clients.x86_64 0:2.0.0-1.sl5
Complete!
Service configuration
The configuration file for this service is really basic.
For autorization:
- DN list of authorized renewals (WMS and nagios)
- DN list of trusted retrievers (nagios)
cat << EOF > site-info.def
SITE_NAME=emitb
PX_HOST=`hostname -f`
GRID_AUTHORIZED_RETRIEVERS="\*"
GRID_AUTHORIZED_RENEWERS="
'/DC=org/DC=terena/DC=tcs/C=CZ/O=Masaryk University/CN=emitb2.ics.muni.cz'
'/DC=ch/DC=cern/OU=computers/CN=cvitbrcnagios.cern.ch'
'/DC=ch/DC=cern/OU=computers/CN=lxbra2302.cern.ch'
'/C=CH/O=CERN/OU=GRID/CN=host/lxbra2302.cern.ch'
'/C=CH/O=CERN/OU=GRID/CN=host/cvitbrcnagios.cern.ch'
"
GRID_TRUSTED_RETRIEVERS="
'/DC=ch/DC=cern/OU=computers/CN=cvitbrcnagios.cern.ch'
'/C=CH/O=CERN/OU=GRID/CN=host/cvitbrcnagios.cern.ch'
"
host certificate required
YAIM check
# chmod -R 600 /root/siteinfo
# /opt/glite/yaim/bin/yaim -v -s /root/siteinfo/site-info.def -n ?????? /opt/glite/yaim/bin/yaim -c -s ./site-info.def -n glite-PX
Know Issue and Workaround
YAIM config
Please use the debug flag (
"-d 6"
) to configure the services in order to have detailed information. For your convenience yo can save all the configuration information in a log file you can look at any time, separated from the
yaimlog
defulat one.
# /opt/glite/yaim/bin/yaim -c -d 6 -s /root/siteinfo/site-info.def -n ?????? /opt/glite/yaim/bin/yaim -c -s ./site-info.def -n glite-PX
Service checks
Additional notes
In order to make the WMS renewal function it is necessary:
- To include the DN of the WMS that process the jobs among the authorized renewers on the MyProxy server, i.e. to add
authorized_renewers DN
to the configuration and restart the server;
- Upload the proxy of the job submitter in the MyProxy server using
myproxy-init -s myproxy_server -d -n
- Submit the job with the MyProxy server hostname being given in the JDL
Revision
--
PaoloVeronesi - 2011-12-28