UI with AFS access installed as root

Basic installation, configuration and creation of users on a UI installed with root privileges at CERN

Set-up AFS clients (CERN)

After the 'root' installation of the UI run the following script

#!/bin/sh

#Install AFS
apt-get -y install ccdb-tools openafs openafs-server openafs-client openafs-compat openafs-kpasswd openafs-krb5 kernel-module-openafs-`uname -a | cut -d " " -f3` lcm compat-db
export PERLLIB=/usr/lib/perl
lcm --configure afsclt krb5clt krb4clt srvtab
/etc/init.d/afs start

Some issues in the lcm perl script dealing with environment. The script works only if run directly from /usr/lib/perl (not the cleanes solution)

Create AFS users (CERN)

Run the following script

#!/bin/sh

if [ "x$1" = "x" ]; then
    echo "Usage: $0 <afs user name>|<cluster file>"
    exit 1
fi

if [ -f $1 ]; then
    . $1
    users=$USERS
else
    users=$1
fi

for user in $users
  do
  ccdbuser $user
  if [ -f /root/.klogin ]; then
      R=`grep $user /root/.klogin`
  fi
  if [ "x$R" = "x" ]
      then
      echo $user@CERN.CH >> /root/.klogin
  fi
  R=`grep $user /etc/security/limits.conf`
  if [ "x$R" = "x" ]
      then
      echo "$user   -   maxlogins   999" >> /etc/security/limits.conf
  fi
done

Tricks needed to make a UI installation in user space work on lxplus at CERN

Prevent problems in voms-proxy-init

In user space installations the file ${GLITE_LOCATION}/etc/vomses cannot normally be created with the correct ownership (root). Therefore, if the user is not using a local ${HOME}/.glite/vomses file, the voms-proxy-init command would fail because of the wrong privileges.

What we use to do in PPS is a hack in the setenv script: if the file in the user's directory does not exist we copy the central file, namely:

[aretico@lxplus068 ~] tail -6 /afs/cern.ch/project/gd/egee/glite/ui_PPS/etc/profile.d/grid_env.sh

# Trick from Andrea's script for VOMS
if [ ! -f $HOME/.glite/vomses ] ; then
mkdir -p $HOME/.glite
cp $GLITE_LOCATION/etc/vomses $HOME/.glite/
fi

[aretico@lxplus068 ~] tail -6 /afs/cern.ch/project/gd/egee/glite/ui_PPS/etc/profile.d/grid_env.csh
# Trick from Andrea's script for VOMS
if ( ! -f $HOME/.glite/vomses ) then
mkdir -p $HOME/.glite
cp $GLITE_LOCATION/etc/vomses $HOME/.glite/
endif

-- Main.diana - 12 Jan 2007