Before Starting
- HOSTNAME: emitestbed08.cnaf.infn.it
- OS: SL5 X86_64 Installed + Network
- Host certificate required: must be copied under /etc/grid-security/ before yaim configuration
Service Installation
- Repositories ( see EMI basic configuration):
- egi-trustanchors.repo + emi1.repo + epel.repo
- $> yum clean all
- $> yum makecache
- INSTALLING ARGUS SERVER
- $> yum install fetch-crl
- $> yum install emi-release yum-protectbase yum-priorities
- $> yum install emi-argus
Service Configuration
- PREPARING FOR YAIM CONFIGURATION:
- COPY YAIM FILES UNDER ROOT: $>cp -r /opt/glite/yaim/examples/siteinfo/ /root/siteinfo/
- TESTERS VO files: follow description at [[https://twiki.cern.ch/twiki/bin/view/EMI/TestBed] [VO TESTERS HOWTO section 3.5]], download the following files: groups.conf, users.conf + vo.d directory
- CONTENT of /root/siteinfo: site-info.def + groups.conf + users.conf + vo.d (DIR)
- Find below the settings for Inter-Component testing EMI Testbed. Of course you will need to adapt these values to your own site (hostnames of other servers (SE, BDII, ARGUS..) , passwd, etc. etc. )
[root@emitestbed10 siteinfo]# grep -v "#" site-info.def |grep "="
USERS_CONF=/root/siteinfo/users.conf
GROUPS_CONF=/root/siteinfo/groups.conf
SITE_NAME=EMI-INFN-CNAF
SITE_EMAIL="root@localhost"
ARGUS_HOST=emitestbed10.cnaf.infn.it
PAP_ADMIN_DN="/C=IT/O=INFN/OU=Personal Certificate/L=CNAF/CN=Danilo Nicola Dongiovanni"
USE_ARGUS=yes
VOS="testers.eu-emi.eu"
Note :
- YAIM variables set into /root/siteinfo/services/XXXfiles will overrid variables in siteinfo.def file with same name
- some YAIM variables are set in the yaim defaults files: /opt/glite/yaim//defaults/XXXfiles
- After all yaim files are OK run the following commands:
- $> /opt/glite/yaim/bin/yaim -c -s site-info.def -n ARGUS_server
- If everything's OK yaim will end with (BTW yaim output is in /opt/glite/yaim/log/yaimlog file)
.....
INFO: Configuration Complete. [ OK ]
INFO: YAIM terminated succesfully.
Service Testing
- Test some basic commands:
- pap-admin lp
- pap-admin apf policy_test1.txt
- /etc/init.d/argus-pepd clearcache
- /etc/init.d/argus-pdp reloadpolicy
where
[root@emitestbed10 siteinfo]# cat policy/policy_test1.txt
resource "http://cnaf.infn.it/cert-07" {
obligation "http://glite.org/xacml/obligation/local-environment-map" {
}
action ".*" {
rule permit { vo = "testers.eu-emi.eu" }
}
}
- Other basic test on UI was done testing authorization on CE as reported at this page EMI gLite Job Management Tests Page
--
DaniloDongiovanni - 24-May-2011