Before Starting

• SL5/64bit installation according to the generic guidelines
• host certificate required
• for autorization:
  • DN list of authorized renewals (WMS and nagios)
  • DN list of trusted retrievers (nagios)
• testbed additional steps

Service installation

yum install emi-px

Service Configuration

cd ~/
mkdir -m 700 yaim
cd yaim
cat << EOF > site-info.def
SITE_NAME=emitb
PX_HOST=`hostname -f`
GRID_AUTHORIZED_RETRIEVERS="\*"
GRID_AUTHORIZED_RENEWERS="
'/DC=org/DC=terena/DC=tcs/C=CZ/O=Masaryk University/CN=emitb2.ics.muni.cz'
'/DC=ch/DC=cern/OU=computers/CN=cvitbrcnagios.cern.ch'
'/DC=ch/DC=cern/OU=computers/CN=lxbra2302.cern.ch'
'/C=CH/O=CERN/OU=GRID/CN=host/lxbra2302.cern.ch'
'/C=CH/O=CERN/OU=GRID/CN=host/cvitbrcnagios.cern.ch'
"
GRID_TRUSTED_RETRIEVERS="
'/DC=ch/DC=cern/OU=computers/CN=cvitbrcnagios.cern.ch'
'/C=CH/O=CERN/OU=GRID/CN=host/cvitbrcnagios.cern.ch'
"
EOF
/opt/glite/yaim/bin/yaim -c -s ./site-info.def -n glite-PX

# quick check of proxyrenewal too
mkdir ~glite/.certs
cp /etc/grid-security/host* ~glite/.certs/
chown -R glite ~glite/.certs/

export GLITE_USER=glite
GLITE_HOME=`getent passwd ${GLITE_USER} | cut -d: -f6`
export GLITE_HOST_KEY=$GLITE_HOME/.certs/hostkey.pem
export GLITE_HOST_CERT=$GLITE_HOME/.certs/hostcert.pem

/etc/init.d/glite-proxy-renewald start

Service Testing

Basic test:

#PX_HOST=`hostname -f`
PX_HOST=emitb2.ics.muni.cz
myproxy-init -s $PX_HOST
myproxy-get-delegation -s $PX_HOST
myproxy-destroy -s $PX_HOST

BDII (Middleware version, HealthState, GLUE2PolicyRule):

ldapsearch -x -H ldap://emitb-myproxy.zcu.cz:2170 -b o=glue

Info

I'll just briefly summarize what needs to be done. In order to make
the WMS renewal function it is necessary:
1. To include the DN of the WMS that process the jobs among the
   authorized renewers on the MyProxy server, i.e. to add
      authorized_renewers <DN>
   to the configuration and restart the server
2. Upload the proxy of the job submitter in the MyProxy server using
      myproxy-init -s <myproxy_server> -d -n
3. Submit the job with the MyProxy server hostname being given in the
   JDL
 -- Daniel, Tue, 25 Oct 2011

Deployment Tests

EMI-1 (Kebnekaise):

EMI-2 (Matterhorn):

EPEL Testing Tests

globus 5.2.2 (2012-12-29):

• EMI1 EmiMyProxyLogBookEMI1epel1
• EMI2 EmiMyProxyLogBookEMI2epel1

-- FrantisekDvorak - 29-May-2011