This is a list of actions to be done over a normal UI.

SLC3

Install ARCD

  • Install the arcd daemon rpm:
          apt-get install arc-server
        
  • edit the file /etc/xinetd.d/arcd and change the value on "disable line" to "no"
          ( disable                 = no)
        
  • be sure that the file /etc/krb.realms contains the lines:
   .wgs.cern.ch CERN.CH
   .plus.cern.ch CERN.CH
        
  • be sure that CERN.CH is the first line of the file /etc/krb.conf
(if the files above do not exist please install krbafs-1.1.1-11 rpm)

  • be sure that the line
   arc     4241/tcp        # Authenticated Remote Control
is included in the file /etc/services

  • Make also sure that your local firewall is configured to let
in traffic to port 4241 (arc) (edit the file /etc/sysconfig/iptables and add this lines before the REJECT rules) and restart then the iptables
-A INPUT -m state --state NEW -m tcp -p tcp --dport 4241 -j ACCEPT
/etc/init/iptables restart

  • remove any possible local cronjobs that tends to restore default iptables ( chmod 655 /etc/cron.hourly/firewall.cron)
  • check the existence of the file /etc/krb5.keytab.
If not do the command
 cern-config-srvtab
to obtain the /etc/srvtab and /etc/krb5.keytab files

ALTERNATIVELY you can do:

apt-get install lcm
 lcm --configure krb4clt
 lcm --configure srvtab
and probabily also:

>lcm --configure krb5clt
  • Run the command:
    ln -s /usr/lib/perl/* /usr/lib/perl5/5.8.0/
  • add users to the file /usr/libexec/arcd/ACL as following:
lfield.@CERN.CH
 rgracian.@CERN.CH
 santinel.@CERN.CH

  • In order to add someone to do something you have to add a perl module under the directory /usr/libexec/arcd. This module should be named as: remote-command.arc and should contain both the policy (who can run) and the action (what the command should
do). For instance the module check_status.arc:

#!/usr/bin/perl

$ACL{'check_status'}="ANY"; sub check_status { system "su - rgracian 
/afs/cern.ch/lhcb/project/web/wdqa/DC04-LCG/LCG-Job-Submit/cron_LCG-Check_/
status"; 
}
allows anybody in the ACL file to run the command that sues to the local user "rgracian" and calls the script located under the afs directory: /afs/cern.ch/lhcb/project/web/wdqa/DC04-LCG/LCG-Job-Submit/cron_LCG-Check_status
  • restart xinetd (/etc/init.d/xinetd restart)
  • If the installation described here doesn't work we strongly suggest to reboot the machine

more info about acrontab can be retrieved at:

link to arc other links

default VO

modify /opt/edg/etc/edg_wl_ui_cmd_var.conf by changing the Default VO:

DefaultVo = "lhcb";

AFS users allowed:

The following LHCb users have to been added with the command:
/afs/usr/local/etc/ccdbuser _username_ 
  1. joel
  2. paterson
  3. rgracian
  4. atsareg
  5. vgaronne
  6. mgsanche
  7. saborido
  8. acsmith
  9. brook
  10. castella
  11. mbargiot
  12. santinel

Disk server for Input/Output Sandboxes:

The LHCb UI needs to have mounted an external file system for storing Input/Output Sandboxes. Add the following line on the /etc/fstab

cat >> /etc/fstab <<EOF
 lxfsrk524:/shift/lxfsrk524/data01/lxb2004 /storage nfs  defaults        0 0
 EOF
then mount the /storage directory (create it if doesn't exists yet)
mount /storage

RH73

Install AFS

  • cd /afs/cern.ch/lhcb/project/web/wdqa/DC04-LCG/lxn1176/AFS
  • rpm -ivh *.rpm

Install ARCD

  • mkdir ~root/ACRONTAB
  • cd /root/ACRONTAB
  • rpm -ivh /afs/cern.ch/project/linux/cern/7.3.4/i386/RedHat/RPMS/pdksh-5.2.14-16.i386.rpm
  • Install minisue:
    • /afs/cern.ch/lhcb/project/web/wdqa/DC04-LCG/lxn1176/ACRONTAB/minisue
  • /etc/init.d/xinetd restart
  • check if everything is OK:
    • tail /etc/hosts.allow
(if everything is ok you should see this file changed..) with the new entries:
 
        arcd : 127.0.0.1, afsdb1.cern.ch, afsdb2.cern.ch, afsdb3.cern.ch, afsdb4.cern.ch, afsdb5.cern.ch, afsmisc1.cern.ch, afsmisc2.cern.ch
    • Make sure the file /etc/krb.realm contains the following lines:
       .wgs.cern.ch CERN.CH
       .plus.cern.ch CERN.CH
       .cern.ch CERN.CH

default VO

modify /opt/edg/etc/edg_wl_ui_cmd_var.conf by changing the Default VO:

DefaultVo = "lhcb";

AFS users allowed:

The following LHCb users have to been added with the command:
/afs/usr/local/etc/ccdbuser _username_ 

  1. joel
  2. paterson
  3. rgracian
  4. atsareg
  5. vgaronne
  6. mgsanche
  7. saborido
  8. acsmith
  9. brook
  10. castella
  11. mbargiot
  12. santinel

Disk server for Input/Output Sandboxes:

The LHCb UI needs to have mounted an external file system for storing Input/Output Sandboxes. Add the following line on the /etc/fstab
cat >> /etc/fstab <<EOF
 lxfsrk524:/shift/lxfsrk524/data01/lxb2004 /storage nfs  defaults        0 0
 EOF
then mount the /storage directory (create it if doesn't exists yet)
mount /storage

Please note that the same disk server is mounted by the lxb2003.cern.ch SE used for storing and surfing through log files.

/shift/lxfsrk524/data01/lxshare009d/data03

mail to roberto.santinelli@cernNOSPAMPLEASE.ch

Edit | Attach | Watch | Print version | History: r6 < r5 < r4 < r3 < r2 | Backlinks | Raw View | WYSIWYG | More topic actions
Topic revision: r6 - 2006-12-01 - unknown
 
    • Cern Search Icon Cern Search
    • TWiki Search Icon TWiki Search
    • Google Search Icon Google Search

    LCG All webs login

This site is powered by the TWiki collaboration platform Powered by PerlCopyright & 2008-2019 by the contributing authors. All material on this collaboration platform is the property of the contributing authors.
Ideas, requests, problems regarding TWiki? Send feedback