Tags:
, view all tags

Notes about Installation and Configuration of myproxy (DRAFT)

  • These notes are provided by site admins on a best effort base as a contribution to the IGI communities and MUST not be considered as a subsitute of the Official IGI documentation.
  • This document is addressed to site administrators responsible for middleware installation and configuration.
  • The goal of this page is to provide some hints and examples on how to install and configure an IGI myproxy service based on UMD middleware.

NB: The myproxy service is a CORE service, it should not be installed at Resource Center level. The official endpoint provided by IGI is myproxy.cnaf.infn.it and MUST be used by all Resource Centers and Services part of the IGI infrastructure.

References

  1. About IGI - Italian Grid infrastructure
  2. About IGI Release
  3. IGI Official Installation and Configuration guide
  4. Troubleshooting Guide for Operational Errors on EGI Sites
  5. Grid Administration FAQs page

Reccommendations

  • The service needs at least:
    • 3 cores
    • 3 GB RAM
    • 10 GB disk space.
A full virtualized machine based on KVM has been used in the following notes.

O.S. and Repos

  • Starts from a fresh installation of Scientific Linux 5.x (x86_64).
# cat /etc/redhat-release 
Scientific Linux SL release 5.7 (Boron) 

* Install the additional repositories: EPEL, Certification Authority, UMD

# cd /etc/yum.repos.d/
# rpm -ivh http://mirror.switch.ch/ftp/mirror/epel//5/x86_64/epel-release-5-4.noarch.rpm
# wget http://repo-pd.italiangrid.it/mrepo/repos/egi-trustanchors.repo
# rpm -ivh http://repo-pd.italiangrid.it/mrepo/EMI/1/sl5/x86_64/updates/emi-release-1.0.1-1.sl5.noarch.rpm
# yum install yum-priorities yum-protectbase

  • Be sure that SELINUX is disabled (or permissive). Details on how to disable SELINUX are here:

# getenforce 
Disabled

  • Check the repos list (sl-*.repo are the repos of the O.S. and they should be present by default).

# ls /etc/yum.repos.d/
egi-trustanchors.repo  
emi1-third-party.repo emi1-base.repo emi1-updates.repo
epel.repo epel-testing.repo  
sl-contrib.repo sl-fastbugs.repo sl-security.repo sl-testing.repo sl-debuginfo.repo sl.repo sl-srpms.repo

Update host and perform the installation of package(s) (DRAFT)

# yum clean all
Loaded plugins: downloadonly, kernel-module, priorities, protect-packages, protectbase, security, verify, versionlock
Cleaning up Everything

# yum install ca-policy-egi-core  emi-px 
Loaded plugins: downloadonly, kernel-module, priorities, protectbase
sl-security                                                                                                                                                | 1.9 kB     00:00     
sl-security/primary_db                                                                                                                                     | 299 kB     00:01     
242 packages excluded due to repository priority protections
0 packages excluded due to repository protections
Setting up Install Process
Package ca-policy-egi-core-1.43-1.noarch already installed and latest version
Resolving Dependencies
--> Running transaction check
---> Package emi-px.x86_64 0:1.0.0-1.sl5 set to be updated
--> Processing Dependency: glite-px-myproxy-yaim for package: emi-px
--> Processing Dependency: emi-version for package: emi-px
--> Processing Dependency: myproxy-admin for package: emi-px
--> Processing Dependency: fetch-crl for package: emi-px
--> Processing Dependency: bdii for package: emi-px
--> Processing Dependency: myproxy-server for package: emi-px
--> Processing Dependency: glue-schema for package: emi-px
--> Processing Dependency: glite-info-provider-service for package: emi-px
--> Running transaction check
---> Package bdii.noarch 0:5.2.5-2.el5 set to be updated
--> Processing Dependency: openldap-servers for package: bdii
--> Processing Dependency: expect for package: bdii
--> Processing Dependency: openldap-clients for package: bdii
---> Package emi-version.x86_64 0:1.7.0-1.sl5 set to be updated
---> Package fetch-crl.noarch 0:2.8.4-2.el5 set to be updated
---> Package glite-info-provider-service.noarch 0:1.7.0-1.el5 set to be updated
---> Package glite-px-myproxy-yaim.x86_64 0:4.1.4-2.sl5 set to be updated
--> Processing Dependency: glite-yaim-core for package: glite-px-myproxy-yaim
--> Processing Dependency: glite-yaim-bdii for package: glite-px-myproxy-yaim
---> Package glue-schema.noarch 0:2.0.8-1.el5 set to be updated
---> Package myproxy-admin.x86_64 0:5.5-1.el5 set to be updated
--> Processing Dependency: myproxy-libs = 5.5-1.el5 for package: myproxy-admin
--> Processing Dependency: myproxy = 5.5-1.el5 for package: myproxy-admin
--> Processing Dependency: globus-gsi-cert-utils-progs for package: myproxy-admin
--> Processing Dependency: libglobus_gsi_credential.so.1()(64bit) for package: myproxy-admin
--> Processing Dependency: libglobus_gsi_cert_utils.so.0()(64bit) for package: myproxy-admin
--> Processing Dependency: libglobus_gsi_sysconfig.so.1()(64bit) for package: myproxy-admin
--> Processing Dependency: libltdl.so.3()(64bit) for package: myproxy-admin
--> Processing Dependency: libglobus_openssl.so.0()(64bit) for package: myproxy-admin
--> Processing Dependency: libglobus_proxy_ssl.so.1()(64bit) for package: myproxy-admin
--> Processing Dependency: libglobus_gsi_callback.so.0()(64bit) for package: myproxy-admin
--> Processing Dependency: libglobus_gsi_proxy_core.so.0()(64bit) for package: myproxy-admin
--> Processing Dependency: libglobus_xio.so.0()(64bit) for package: myproxy-admin
--> Processing Dependency: libmyproxy.so.5()(64bit) for package: myproxy-admin
--> Processing Dependency: libglobus_openssl_error.so.0()(64bit) for package: myproxy-admin
--> Processing Dependency: libglobus_oldgaa.so.0()(64bit) for package: myproxy-admin
--> Processing Dependency: libvomsapi.so.1()(64bit) for package: myproxy-admin
--> Processing Dependency: libglobus_gssapi_gsi.so.4()(64bit) for package: myproxy-admin
--> Processing Dependency: libglobus_common.so.0()(64bit) for package: myproxy-admin
--> Processing Dependency: libglobus_gss_assist.so.3()(64bit) for package: myproxy-admin
--> Processing Dependency: libglobus_callout.so.0()(64bit) for package: myproxy-admin
--> Processing Dependency: libglobus_usage.so.0()(64bit) for package: myproxy-admin
---> Package myproxy-server.x86_64 0:5.5-1.el5 set to be updated
--> Running transaction check
---> Package expect.x86_64 0:5.43.0-5.1 set to be updated
---> Package glite-yaim-bdii.noarch 0:4.3.4-1.el5 set to be updated
---> Package glite-yaim-core.noarch 0:5.0.2-1.sl5 set to be updated
---> Package globus-callout.x86_64 0:0.7-8.el5 set to be updated
--> Processing Dependency: globus-libtool >= 1 for package: globus-callout
---> Package globus-common.x86_64 0:11.6-5.el5 set to be updated
---> Package globus-gsi-callback.x86_64 0:2.8-2.el5 set to be updated
--> Processing Dependency: globus-openssl >= 1 for package: globus-gsi-callback
---> Package globus-gsi-cert-utils.x86_64 0:6.7-2.el5 set to be updated
---> Package globus-gsi-cert-utils-progs.x86_64 0:6.7-2.el5 set to be updated
--> Processing Dependency: globus-common-setup >= 2 for package: globus-gsi-cert-utils-progs
--> Processing Dependency: globus-openssl-progs >= 1 for package: globus-gsi-cert-utils-progs
---> Package globus-gsi-credential.x86_64 0:3.5-3.el5 set to be updated
---> Package globus-gsi-openssl-error.x86_64 0:0.14-8.el5 set to be updated
---> Package globus-gsi-proxy-core.x86_64 0:4.7-2.el5 set to be updated
---> Package globus-gsi-proxy-ssl.x86_64 0:2.3-3.el5 set to be updated
---> Package globus-gsi-sysconfig.x86_64 0:3.2-1.el5 set to be updated
---> Package globus-gss-assist.x86_64 0:5.10-1.el5 set to be updated
---> Package globus-gssapi-gsi.x86_64 0:7.8-1.el5 set to be updated
---> Package globus-openssl-module.x86_64 0:1.3-3.el5 set to be updated
---> Package globus-usage.x86_64 0:1.4-2.el5 set to be updated
---> Package globus-xio.x86_64 0:2.8-4.el5 set to be updated
---> Package libtool-ltdl.x86_64 0:1.5.22-7.el5_4 set to be updated
---> Package myproxy.x86_64 0:5.5-1.el5 set to be updated
--> Processing Dependency: globus-proxy-utils for package: myproxy
--> Processing Dependency: voms-clients for package: myproxy
---> Package myproxy-libs.x86_64 0:5.5-1.el5 set to be updated
---> Package openldap-clients.x86_64 0:2.3.43-12.el5_6.7 set to be updated
---> Package openldap-servers.x86_64 0:2.3.43-12.el5_6.7 set to be updated
EGI-trustanchors/filelists                                                                                                                                 |  14 kB     00:00     
EMI-1-base/filelists_db                                                                                                                                    | 181 kB     00:00     
EMI-1-third-party/filelists_db                                                                                                                             |  57 kB     00:00     
EMI-1-updates/filelists_db                                                                                                                                 | 113 kB     00:00     
epel/filelists_db                                                                                                                                          | 5.5 MB     00:00     
sl-base/filelists                                                                                                                                          | 3.3 MB     00:02     
sl-security/filelists_db                                                                                                                                   | 1.1 MB     00:01     
---> Package voms.x86_64 0:2.0.2-1.sl5 set to be updated
--> Running transaction check
---> Package globus-common-progs.x86_64 0:11.6-5.el5 set to be updated
--> Processing Dependency: autoconf for package: globus-common-progs
--> Processing Dependency: finger for package: globus-common-progs
--> Processing Dependency: cvs for package: globus-common-progs
---> Package globus-libtool.x86_64 0:1.2-4.el5 set to be updated
---> Package globus-openssl.x86_64 0:5.1-2.el5 set to be updated
---> Package globus-openssl-progs.x86_64 0:5.1-2.el5 set to be updated
---> Package globus-proxy-utils.x86_64 0:3.10-1.el5 set to be updated
---> Package voms-clients.x86_64 0:2.0.0-1.sl5 set to be updated
--> Running transaction check
---> Package autoconf.noarch 0:2.59-12 set to be updated
--> Processing Dependency: imake for package: autoconf
---> Package cvs.x86_64 0:1.11.22-7.el5 set to be updated
---> Package finger.x86_64 0:0.17-33 set to be updated
--> Running transaction check
---> Package imake.x86_64 0:1.0.2-3 set to be updated
--> Finished Dependency Resolution
Beginning Kernel Module Plugin
Finished Kernel Module Plugin

Dependencies Resolved

==================================================================================================================================================================================
 Package                                               Arch                             Version                                     Repository                               Size
==================================================================================================================================================================================
Installing:
 emi-px                                                x86_64                           1.0.0-1.sl5                                 EMI-1-base                              1.7 k
Installing for dependencies:
 autoconf                                              noarch                           2.59-12                                     sl-base                                 648 k
 bdii                                                  noarch                           5.2.5-2.el5                                 EMI-1-updates                            20 k
 cvs                                                   x86_64                           1.11.22-7.el5                               sl-base                                 737 k
 emi-version                                           x86_64                           1.7.0-1.sl5                                 EMI-1-updates                           2.1 k
 expect                                                x86_64                           5.43.0-5.1                                  sl-base                                 160 k
 fetch-crl                                             noarch                           2.8.4-2.el5                                 epel                                     24 k
 finger                                                x86_64                           0.17-33                                     sl-base                                  21 k
 glite-info-provider-service                           noarch                           1.7.0-1.el5                                 EMI-1-updates                            53 k
 glite-px-myproxy-yaim                                 x86_64                           4.1.4-2.sl5                                 EMI-1-base                              8.1 k
 glite-yaim-bdii                                       noarch                           4.3.4-1.el5                                 EMI-1-updates                            10 k
 glite-yaim-core                                       noarch                           5.0.2-1.sl5                                 EMI-1-updates                           116 k
 globus-callout                                        x86_64                           0.7-8.el5                                   epel                                     16 k
 globus-common                                         x86_64                           11.6-5.el5                                  epel                                    109 k
 globus-common-progs                                   x86_64                           11.6-5.el5                                  epel                                     67 k
 globus-gsi-callback                                   x86_64                           2.8-2.el5                                   epel                                     39 k
 globus-gsi-cert-utils                                 x86_64                           6.7-2.el5                                   epel                                     18 k
 globus-gsi-cert-utils-progs                           x86_64                           6.7-2.el5                                   epel                                     26 k
 globus-gsi-credential                                 x86_64                           3.5-3.el5                                   epel                                     32 k
 globus-gsi-openssl-error                              x86_64                           0.14-8.el5                                  epel                                     15 k
 globus-gsi-proxy-core                                 x86_64                           4.7-2.el5                                   epel                                     33 k
 globus-gsi-proxy-ssl                                  x86_64                           2.3-3.el5                                   epel                                     17 k
 globus-gsi-sysconfig                                  x86_64                           3.2-1.el5                                   epel                                     28 k
 globus-gss-assist                                     x86_64                           5.10-1.el5                                  epel                                     31 k
 globus-gssapi-gsi                                     x86_64                           7.8-1.el5                                   epel                                     55 k
 globus-libtool                                        x86_64                           1.2-4.el5                                   epel                                    4.2 k
 globus-openssl                                        x86_64                           5.1-2.el5                                   epel                                    4.6 k
 globus-openssl-module                                 x86_64                           1.3-3.el5                                   epel                                     13 k
 globus-openssl-progs                                  x86_64                           5.1-2.el5                                   epel                                    4.3 k
 globus-proxy-utils                                    x86_64                           3.10-1.el5                                  epel                                     45 k
 globus-usage                                          x86_64                           1.4-2.el5                                   epel                                     15 k
 globus-xio                                            x86_64                           2.8-4.el5                                   epel                                    123 k
 glue-schema                                           noarch                           2.0.8-1.el5                                 EMI-1-updates                            33 k
 imake                                                 x86_64                           1.0.2-3                                     sl-base                                 318 k
 libtool-ltdl                                          x86_64                           1.5.22-7.el5_4                              sl-base                                  38 k
 myproxy                                               x86_64                           5.5-1.el5                                   epel                                     86 k
 myproxy-admin                                         x86_64                           5.5-1.el5                                   epel                                     55 k
 myproxy-libs                                          x86_64                           5.5-1.el5                                   epel                                    121 k
 myproxy-server                                        x86_64                           5.5-1.el5                                   epel                                     52 k
 openldap-clients                                      x86_64                           2.3.43-12.el5_6.7                           sl-base                                 223 k
 openldap-servers                                      x86_64                           2.3.43-12.el5_6.7                           sl-base                                 2.2 M
 voms                                                  x86_64                           2.0.2-1.sl5                                 EMI-1-base                              165 k
 voms-clients                                          x86_64                           2.0.0-1.sl5                                 EMI-1-base                              178 k

Transaction Summary
==================================================================================================================================================================================
Install      43 Package(s)
Upgrade       0 Package(s)

Total download size: 5.9 M
Is this ok [y/N]: 
Downloading Packages:
(1/43): emi-px-1.0.0-1.sl5.x86_64.rpm                                                                                                                      | 1.7 kB     00:00     
(2/43): emi-version-1.7.0-1.sl5.x86_64.rpm                                                                                                                 | 2.1 kB     00:00     
(3/43): globus-libtool-1.2-4.el5.x86_64.rpm                                                                                                                | 4.2 kB     00:00     
(4/43): globus-openssl-progs-5.1-2.el5.x86_64.rpm                                                                                                          | 4.3 kB     00:00     
(5/43): globus-openssl-5.1-2.el5.x86_64.rpm                                                                                                                | 4.6 kB     00:00     
(6/43): glite-px-myproxy-yaim-4.1.4-2.sl5.x86_64.rpm                                                                                                       | 8.1 kB     00:00     
(7/43): glite-yaim-bdii-4.3.4-1.el5.noarch.rpm                                                                                                             |  10 kB     00:00     
(8/43): globus-openssl-module-1.3-3.el5.x86_64.rpm                                                                                                         |  13 kB     00:00     
(9/43): globus-gsi-openssl-error-0.14-8.el5.x86_64.rpm                                                                                                     |  15 kB     00:00     
(10/43): globus-usage-1.4-2.el5.x86_64.rpm                                                                                                                 |  15 kB     00:00     
(11/43): globus-callout-0.7-8.el5.x86_64.rpm                                                                                                               |  16 kB     00:00     
(12/43): globus-gsi-proxy-ssl-2.3-3.el5.x86_64.rpm                                                                                                         |  17 kB     00:00     
(13/43): globus-gsi-cert-utils-6.7-2.el5.x86_64.rpm                                                                                                        |  18 kB     00:00     
(14/43): bdii-5.2.5-2.el5.noarch.rpm                                                                                                                       |  20 kB     00:00     
(15/43): finger-0.17-33.x86_64.rpm                                                                                                                         |  21 kB     00:00     
(16/43): fetch-crl-2.8.4-2.el5.noarch.rpm                                                                                                                  |  24 kB     00:00     
(17/43): globus-gsi-cert-utils-progs-6.7-2.el5.x86_64.rpm                                                                                                  |  26 kB     00:00     
(18/43): globus-gsi-sysconfig-3.2-1.el5.x86_64.rpm                                                                                                         |  28 kB     00:00     
(19/43): globus-gss-assist-5.10-1.el5.x86_64.rpm                                                                                                           |  31 kB     00:00     
(20/43): globus-gsi-credential-3.5-3.el5.x86_64.rpm                                                                                                        |  32 kB     00:00     
(21/43): globus-gsi-proxy-core-4.7-2.el5.x86_64.rpm                                                                                                        |  33 kB     00:00     
(22/43): glue-schema-2.0.8-1.el5.noarch.rpm                                                                                                                |  33 kB     00:00     
(23/43): libtool-ltdl-1.5.22-7.el5_4.x86_64.rpm                                                                                                            |  38 kB     00:00     
(24/43): globus-gsi-callback-2.8-2.el5.x86_64.rpm                                                                                                          |  39 kB     00:00     
(25/43): globus-proxy-utils-3.10-1.el5.x86_64.rpm                                                                                                          |  45 kB     00:00     
(26/43): myproxy-server-5.5-1.el5.x86_64.rpm                                                                                                               |  52 kB     00:00     
(27/43): glite-info-provider-service-1.7.0-1.el5.noarch.rpm                                                                                                |  53 kB     00:00     
(28/43): globus-gssapi-gsi-7.8-1.el5.x86_64.rpm                                                                                                            |  55 kB     00:00     
(29/43): myproxy-admin-5.5-1.el5.x86_64.rpm                                                                                                                |  55 kB     00:00     
(30/43): globus-common-progs-11.6-5.el5.x86_64.rpm                                                                                                         |  67 kB     00:00     
(31/43): myproxy-5.5-1.el5.x86_64.rpm                                                                                                                      |  86 kB     00:00     
(32/43): globus-common-11.6-5.el5.x86_64.rpm                                                                                                               | 109 kB     00:00     
(33/43): glite-yaim-core-5.0.2-1.sl5.noarch.rpm                                                                                                            | 116 kB     00:00     
(34/43): myproxy-libs-5.5-1.el5.x86_64.rpm                                                                                                                 | 121 kB     00:00     
(35/43): globus-xio-2.8-4.el5.x86_64.rpm                                                                                                                   | 123 kB     00:00     
(36/43): expect-5.43.0-5.1.x86_64.rpm                                                                                                                      | 160 kB     00:00     
(37/43): voms-2.0.2-1.sl5.x86_64.rpm                                                                                                                       | 165 kB     00:00     
(38/43): voms-clients-2.0.0-1.sl5.x86_64.rpm                                                                                                               | 178 kB     00:00     
(39/43): openldap-clients-2.3.43-12.el5_6.7.x86_64.rpm                                                                                                     | 223 kB     00:00     
(40/43): imake-1.0.2-3.x86_64.rpm                                                                                                                          | 318 kB     00:00     
(41/43): autoconf-2.59-12.noarch.rpm                                                                                                                       | 648 kB     00:00     
(42/43): cvs-1.11.22-7.el5.x86_64.rpm                                                                                                                      | 737 kB     00:00     
(43/43): openldap-servers-2.3.43-12.el5_6.7.x86_64.rpm                                                                                                     | 2.2 MB     00:00     
----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
Total                                                                                                                                             727 kB/s | 5.9 MB     00:08     
warning: rpmts_HdrFromFdno: Header V3 DSA signature: NOKEY, key ID 217521f6
epel/gpgkey                                                                                                                                                | 1.7 kB     00:00     
Importing GPG key 0x217521F6 "Fedora EPEL <epel@fedoraproject.org>" from /etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL
Is this ok [y/N]: y
warning: rpmts_HdrFromFdno: Header V3 DSA signature: NOKEY, key ID df9e12ef
EMI-1-updates/gpgkey                                                                                                                                       | 1.7 kB     00:00     
Importing GPG key 0xDF9E12EF "Doina Cristina Aiftimiei (EMI Release Manager) <aiftim@pd.infn.it>" from /etc/pki/rpm-gpg/RPM-GPG-KEY-emi
Is this ok [y/N]: y
Running rpm_check_debug
Running Transaction Test
Finished Transaction Test
Transaction Test Succeeded
Running Transaction
  Installing     : libtool-ltdl                                                                                                                                              1/43 
  Installing     : voms                                                                                                                                                      2/43 
  Installing     : globus-openssl                                                                                                                                            3/43 
  Installing     : globus-gsi-proxy-ssl                                                                                                                                      4/43 
  Installing     : globus-libtool                                                                                                                                            5/43 
  Installing     : globus-common                                                                                                                                             6/43 
  Installing     : globus-gsi-openssl-error                                                                                                                                  7/43 
  Installing     : globus-gsi-sysconfig                                                                                                                                      8/43 
  Installing     : globus-openssl-module                                                                                                                                     9/43 
  Installing     : globus-gsi-cert-utils                                                                                                                                    10/43 
  Installing     : globus-gsi-callback                                                                                                                                      11/43 
  Installing     : globus-gsi-credential                                                                                                                                    12/43 
  Installing     : globus-gsi-proxy-core                                                                                                                                    13/43 
  Installing     : globus-gssapi-gsi                                                                                                                                        14/43 
  Installing     : globus-callout                                                                                                                                           15/43 
  Installing     : globus-gss-assist                                                                                                                                        16/43 
  Installing     : globus-xio                                                                                                                                               17/43 
  Installing     : globus-usage                                                                                                                                             18/43 
  Installing     : myproxy-libs                                                                                                                                             19/43 
  Installing     : myproxy-server                                                                                                                                           20/43 
  Installing     : glue-schema                                                                                                                                              21/43 
  Installing     : globus-proxy-utils                                                                                                                                       22/43 
  Installing     : voms-clients                                                                                                                                             23/43 
  Installing     : myproxy                                                                                                                                                  24/43 
  Installing     : openldap-servers                                                                                                                                         25/43 
  Installing     : expect                                                                                                                                                   26/43 
  Installing     : openldap-clients                                                                                                                                         27/43 
  Installing     : imake                                                                                                                                                    28/43 
  Installing     : cvs                                                                                                                                                      29/43 
  Installing     : finger                                                                                                                                                   30/43 
  Installing     : autoconf                                                                                                                                                 31/43 
  Installing     : globus-common-progs                                                                                                                                      32/43 
  Installing     : bdii                                                                                                                                                     33/43 
  Installing     : globus-openssl-progs                                                                                                                                     34/43 
  Installing     : globus-gsi-cert-utils-progs                                                                                                                              35/43 
  Installing     : myproxy-admin                                                                                                                                            36/43 
  Installing     : glite-yaim-bdii                                                                                                                                          37/43 
  Installing     : glite-yaim-core                                                                                                                                          38/43 
  Installing     : glite-px-myproxy-yaim                                                                                                                                    39/43 
  Installing     : emi-version                                                                                                                                              40/43 
  Installing     : glite-info-provider-service                                                                                                                              41/43 
  Installing     : fetch-crl                                                                                                                                                42/43 
  Installing     : emi-px                                                                                                                                                   43/43 

Installed:
  emi-px.x86_64 0:1.0.0-1.sl5                                                                                                                                                     

Dependency Installed:
  autoconf.noarch 0:2.59-12                                 bdii.noarch 0:5.2.5-2.el5                                     cvs.x86_64 0:1.11.22-7.el5                              
  emi-version.x86_64 0:1.7.0-1.sl5                          expect.x86_64 0:5.43.0-5.1                                    fetch-crl.noarch 0:2.8.4-2.el5                          
  finger.x86_64 0:0.17-33                                   glite-info-provider-service.noarch 0:1.7.0-1.el5              glite-px-myproxy-yaim.x86_64 0:4.1.4-2.sl5              
  glite-yaim-bdii.noarch 0:4.3.4-1.el5                      glite-yaim-core.noarch 0:5.0.2-1.sl5                          globus-callout.x86_64 0:0.7-8.el5                       
  globus-common.x86_64 0:11.6-5.el5                         globus-common-progs.x86_64 0:11.6-5.el5                       globus-gsi-callback.x86_64 0:2.8-2.el5                  
  globus-gsi-cert-utils.x86_64 0:6.7-2.el5                  globus-gsi-cert-utils-progs.x86_64 0:6.7-2.el5                globus-gsi-credential.x86_64 0:3.5-3.el5                
  globus-gsi-openssl-error.x86_64 0:0.14-8.el5              globus-gsi-proxy-core.x86_64 0:4.7-2.el5                      globus-gsi-proxy-ssl.x86_64 0:2.3-3.el5                 
  globus-gsi-sysconfig.x86_64 0:3.2-1.el5                   globus-gss-assist.x86_64 0:5.10-1.el5                         globus-gssapi-gsi.x86_64 0:7.8-1.el5                    
  globus-libtool.x86_64 0:1.2-4.el5                         globus-openssl.x86_64 0:5.1-2.el5                             globus-openssl-module.x86_64 0:1.3-3.el5                
  globus-openssl-progs.x86_64 0:5.1-2.el5                   globus-proxy-utils.x86_64 0:3.10-1.el5                        globus-usage.x86_64 0:1.4-2.el5                         
  globus-xio.x86_64 0:2.8-4.el5                             glue-schema.noarch 0:2.0.8-1.el5                              imake.x86_64 0:1.0.2-3                                  
  libtool-ltdl.x86_64 0:1.5.22-7.el5_4                      myproxy.x86_64 0:5.5-1.el5                                    myproxy-admin.x86_64 0:5.5-1.el5                        
  myproxy-libs.x86_64 0:5.5-1.el5                           myproxy-server.x86_64 0:5.5-1.el5                             openldap-clients.x86_64 0:2.3.43-12.el5_6.7             
  openldap-servers.x86_64 0:2.3.43-12.el5_6.7               voms.x86_64 0:2.0.2-1.sl5                                     voms-clients.x86_64 0:2.0.0-1.sl5                       

Complete!

Service configuration

The configuration file for this service is really basic. For autorization:
  • DN list of authorized renewals (WMS and nagios)
  • DN list of trusted retrievers (nagios)

cat << EOF > site-info.def
SITE_NAME=emitb
PX_HOST=`hostname -f`
GRID_AUTHORIZED_RETRIEVERS="\*"
GRID_AUTHORIZED_RENEWERS="
'/DC=org/DC=terena/DC=tcs/C=CZ/O=Masaryk University/CN=emitb2.ics.muni.cz'
'/DC=ch/DC=cern/OU=computers/CN=cvitbrcnagios.cern.ch'
'/DC=ch/DC=cern/OU=computers/CN=lxbra2302.cern.ch'
'/C=CH/O=CERN/OU=GRID/CN=host/lxbra2302.cern.ch'
'/C=CH/O=CERN/OU=GRID/CN=host/cvitbrcnagios.cern.ch'
"
GRID_TRUSTED_RETRIEVERS="
'/DC=ch/DC=cern/OU=computers/CN=cvitbrcnagios.cern.ch'
'/C=CH/O=CERN/OU=GRID/CN=host/cvitbrcnagios.cern.ch'
"

host certificate required

YAIM check

#  chmod -R 600 /root/siteinfo

# /opt/glite/yaim/bin/yaim -v -s /root/siteinfo/site-info.def -n ?????? /opt/glite/yaim/bin/yaim -c -s ./site-info.def -n glite-PX

Know Issue and Workaround

YAIM config

Please use the debug flag ( "-d 6") to configure the services in order to have detailed information. For your convenience yo can save all the configuration information in a log file you can look at any time, separated from the yaimlog defulat one.
# /opt/glite/yaim/bin/yaim -c -d 6 -s /root/siteinfo/site-info.def -n ?????? /opt/glite/yaim/bin/yaim -c -s ./site-info.def -n glite-PX
  

Service checks

Additional notes

In order to make the WMS renewal function it is necessary:
  1. To include the DN of the WMS that process the jobs among the authorized renewers on the MyProxy server, i.e. to add authorized_renewers DN to the configuration and restart the server;
  2. Upload the proxy of the job submitter in the MyProxy server using myproxy-init -s myproxy_server -d -n
  3. Submit the job with the MyProxy server hostname being given in the JDL

Revision

-- PaoloVeronesi - 2011-12-28

Edit | Attach | PDF | History: r11 | r5 < r4 < r3 < r2 | Backlinks | Raw View | More topic actions...
Topic revision: r3 - 2011-12-28 - PaoloVeronesi
 
  • Edit
  • Attach
This site is powered by the TWiki collaboration platformCopyright © 2008-2024 by the contributing authors. All material on this collaboration platform is the property of the contributing authors.
Ideas, requests, problems regarding TWiki? Send feedback