CDB & Sindes Modifications

This needs more adding to it. SteveTraylen , 13 Aug 2008

To Modify CDB templates

Requirements : lxadm account, write access to CDB

Note : All things are done from a lxadm node (lxadm[01-03]).

Run cdbop :

  • get <file>
  • vi <file>
  • ...
  • update <files>
  • commit (Warning: can be long, even when there are only few changes)
Once done, you have to reconfigure corresponding node's components (spma, sindes, ...). So the following commands must be executed on the affected nodes :
  • ccm-fetch
  • ncm-ncd --configure <component>
For spma, a simplier way would be to execute ' spma_wrapper.sh ' which does all.
You can do it from a lxadm node, and even for several nodes at the same times.

To do it to all gridvoms cluster (voms101, voms102, voms103) :

  • wassh -c gridvoms -l root 'spma_wrapper.sh'
To do it to several nodes (part of a cluster, or on several clusters) :
  • wassh root@voms10[2-3] 'spma_wrapper.sh'

To upload a RPM package into Quattor repository

Requirements : lxadm account, Nice account

Note : All things are done from a lxadm node (lxadm[01-03]).

swrep-soap-client put i386_slc3 /cern/cc <rpms>

The login/password couple required in the Nice one.

Use sindes for yaim secrets

This is where the db passwords are stored.
$ mkdir yaim-secrets
$ scp root@voms115:/etc/yaim.secretpasswords yaim-secrets
$ Add the extra lines you need.
$ tar cvfz yaim-secrets.tgz yaim-secrets
$ sindes-upload-file -f yaim-secrets.tgz -i yaim-secrets -t voms115 -s node -S sindes-server

To use Sindes to store grid certificates

Requirements : lxadm account, Write access to Sindes

Note : All things are done from a lxadm node (lxadm[01-03]).

First of all, you have to make an archive in which the node grid certificates will be in a sub-directory named grid-host-certificates.
On the node :

  • cd /tmp
  • mkdir grid-host-certificates (Warning: the name of this directory is very important !)
  • cp /etc/grid-security/host{cert,key}.pem grid-host-certificates/
  • tar zcf grid-host-certificates.tar.gz grid-host-certificates/
Then you can you have to copy this archive on AFS or directly on the lxadm node.

Now, you just have to do :

  • sindes-upload-file -f <archive> -i grid-host-certificates -t <node> -s node -S sindes-server

To use Sindes to store SSH keys

Requirements : lxadm account, Write access to Sindes

Note : All things are done from a lxadm node (lxadm[01-03]).

First of all, you have to make an archive in which the host SSH keys will be in a sub-directory named ssh_key.
On the node :

  • cd /tmp
  • mkdir ssh_key (Warning: the name of this directory is very important !)
  • cp /etc/ssh/ssh_host_* ssh_key/
  • tar zcf ssh_key.tar.gz ssh_key/
Then you can you have to copy this archive on AFS or directly on the lxadm node.

Now, you just have to do :

  • sindes-upload-file -f <archive> -i ssh_key -t <node> -s node -S sindes-server

-- Main.rmollon - 05 Apr 2007

Edit | Attach | Watch | Print version | History: r4 < r3 < r2 < r1 | Backlinks | Raw View | WYSIWYG | More topic actions
Topic revision: r4 - 2010-09-13 - SteveTraylen
 
    • Cern Search Icon Cern Search
    • TWiki Search Icon TWiki Search
    • Google Search Icon Google Search

    LCG All webs login

This site is powered by the TWiki collaboration platform Powered by PerlCopyright & 2008-2020 by the contributing authors. All material on this collaboration platform is the property of the contributing authors.
Ideas, requests, problems regarding TWiki? Send feedback