WMSMonitorForWeNMR < WeNMR

Tags: , view all tags
---+ WMSMonitor 3.0 for !WeNMR

WMSMonitor web page: https://wmsmonitor.cnaf.infn.it:8443/wmsmon/main/main.php

Access requires a valid certificate.

Detailed documentation and instructions about WMSMonitor could be found at https://wiki.italiangrid.it/twiki/bin/view/WMSMonitor/WebDownload3
---
---+ Old Stuff
---+ WMSMonitor 2.1 for !WeNMR

WMSMonitor web page: https://wmsmonitor.pd.infn.it:50080/wmsmon/main/main.php

Access requires a valid certificate.

Detailed documentation and instructions about WMSMonitor could be found at https://twiki.cnaf.infn.it/cgi-bin/twiki/view/WMSMonitor/WebDocumentation 
---
---++ Management instructions
---+++ Add, remove or change a WMS/LB entry in WMSMonitor

To modify the list of monitored WMS/LB, execute these steps on wmsmonitor.pd.infn.it:
<verbatim> cd /opt/WMSMonitor/collector/etc/ </verbatim>
   * edit the file wmslist.conf
      * syntax is WMS-hostname LB-hostname VO [SNMPport]
         * VO is needed only for grouping WMS/LB on wmsmon web pages, not for job counting.
         * If SNMPport is not declared, the collector connects to WMS/LB on standard SNMP port 161. 
      * comments are not allowed in this file 
<verbatim> ./wmsmon_server_setup.py </verbatim>
   * the script above resets the file /var/www/html/wmsmon/common/config.php, so:
      * copy the good backuped config.php:
<verbatim> cp /var/www/html/wmsmon/common/config.php.ok /var/www/html/wmsmon/common/config.php </verbatim>
      * be sure that, for each VO values in wmslist.conf, there are lines like these in config.php
            (otherwise add/remove them and create a new backup of config.php):
<verbatim>
case 'enmr.eu':
             $wmsCount[0]='wms-enmr.chem.uu.nl';
             $wmsCount[1]='mb-enmr.chemie.uni-frankfurt.de';
             $wmsCount[2]='wms-enmr.cerm.unifi.it';
             $wmsCount[3]='prod-wms-01.pd.infn.it'; 
break; 
</verbatim>

---+++ Add or remove authorized users to let them see User Activity

For privacy reasons, User Activity pages on WMSMonitor are protected.
To permit some user to see them, insert certificate DNs of authorized users in
/var/www/html/wmsmon/common/config.php; for example:
   * $config->dnEnabledList=array('/C=IT/O=INFN/OU=Personal Certificate/L=LNL/CN=Simone Badoer','/C=IT/O=INFN/OU=Personal Certificate/L=Padova/CN=Marco Verlato');
---
---++ Installation instructions
---+++ WMS/LB sensors installation

These steps must be executed both on WMS and LB hosts.

   * Required o.s.: SL4
<verbatim>
cd /etc/yum.repos.d
wget http://grid-it.cnaf.infn.it/certification/downloads/WMSMonitor.repo
yum clean all
yum install WMSMonitor.sensors
cd /opt/WMSMonitor/common 
</verbatim>
   * Edit wmsmon_site-info.def defining this variables:
      * WMSMON_HOST = wmsmonitor.pd.infn.it
      * LEMONFLAG = 0
      * SERVER_MYSQL_PASSWORD = '<WMS_LB_mysql_pwd>'
      * LB_PARA_HOST = https://wmsmonitor.pd.infn.it:50080
      * SNMPPASSWD = '<SNMP_pwd>' 
<verbatim>
cd /opt/WMSMonitor/sensors/etc
./WMSLB_wmsmon_configuration.py
</verbatim>
   * running this script on WMS could generate this error:
      * ERROR 1049 (42000): Unknown database 'lbserver20'
   * ignore it 

   * If a firewall is blocking remote connection to standard SNMP port (161)
      * change the file /etc/snmp/snmpd.conf editing the line:
         * agentaddress <secure_port_number>
         * for example agentaddress 10161
         * Use the same port for WMS and associated LB 
<verbatim> service snmpd restart </verbatim>
      * check SNMP from collector host:
<verbatim> snmpwalk -v 3 -u wmsmon -l authNoPriv -a MD5 -A <SNMP_pwd> hostname:10161 1.3.6.1.4.1.10403.80 </verbatim>

---+++ WMSMonitor collector installation

Steps executed on collector host wmsmonitor.pd.infn.it 
<verbatim>
cd /etc/yum.repos.d
wget http://grid-it.cnaf.infn.it/certification/downloads/WMSMonitor.repo
yum clean all
yum install WMSMonitor.collector 
</verbatim>
   * edited file /opt/WMSMonitor/common/wmsmon_site-info.def defining this variables
      * WMSMON_HOST = wmsmonitor.pd.infn.it
      * WMSMON_DB_PWD = <collector_mysql_pwd>
      * LEMONFLAG=0
      * WMSMON_SEVER_CONTACT_EMAIL = grid-services-pd(AT)lists.infn.it
      * SNMPPASSWD = '<SNMP_pwd>'
      * Load Balancing Arbiter not installed 
<verbatim> cd /opt/WMSMonitor/collector/etc </verbatim>
   * edited wmslist.conf (comments not allowed, syntax is: WMSname LBname VO SNMPport):
      * wms-enmr.chem.uu.nl lb-enmr.chem.uu.nl enmr.eu 10161
      * mb-enmr.chemie.uni-frankfurt.de mb-enmr.chemie.uni-frankfurt.de enmr.eu
      * wms-enmr.cerm.unifi.it lb-enmr.cerm.unifi.it enmr.eu 10161
      * prod-wms-01.pd.infn.it prod-lb-01.pd.infn.it enmr.eu 
<verbatim> 
service mysqld start
chkconfig mysqld on
chkconfig httpd on
./wmsmon_server_setup.py
</verbatim>
      * this script installed:
         * web pages in /var/www/html/wmsmon/
         * /etc/cron.d/wmsmon.cron (every 15 minutes collects data)
         * /etc/cron.d/wmsmon_logrotate.conf
         * /var/www/html/wmsmon/common/config.php
            * *NOTE*: after every run of wmsmon_server_setup.py, config.php is not well configured and must be modified
            by hand (see TIPS below) 
   * edit /etc/php.ini changing the line
      * memory_limit = 56M 
   * enabled secure http
<verbatim>
yum install mod_ssl
cd /etc/yum.repos.d/
wget -O lcg-ca.repo http://grid-it.cnaf.infn.it/mrepo/repos/lcg-ca.repo
yum install lcg_CA 
</verbatim>
      * edited the /etc/httpd/conf/httpd.conf adding the following lines inside section <Directory /var/www/html>
         * SSLRequireSSL
         * SSLVerifyClient require
         * SSLVerifyDepth 10 
      * edited /etc/httpd/conf.d/ssl.conf and setting:
         * Listen 50080
         * SSLCertificateFile /etc/grid-security/hostcert.pem
         * SSLCertificateKeyFile /etc/grid-security/hostkey.pem
         * SSLCACertificatePath /etc/grid-security/certificates
         * SSLInsecureRenegotiation on
            * The latter line was modified to permit not-updated browsers to view web pages (for security reasons
                  recent httpd versions deny access with the error log "SSL3_ACCEPT:unsafe legacy renegotiation disabled") 

   * edited the /var/www/html/wmsmon/common/config.php file and modified the line:
      * $config->dnEnabledList=array('DN1','DN2'....'DNn')
      where DN are authorized people allowed to view users statistics 
---

-- Main.MarcoVerlato - 2012-11-22
Topic revision: r2 - 2012-11-22 - MarcoVerlato
Account
- Log In
Edit
Attach