How I managed to setup my Ubuntu 12.04 laptop, so I can run Crab2

CVMFS and CMSW and Grid stuff (including automatically up to date certificated and CRL's)

• Install CVMFS
  • followed online documentation: http://cernvm.cern.ch/portal/filesystem
  • plus: CVMFS_HTTP_PROXY='DIRECT' (from David A.)
• mount
  • /cvmfs/cms.cern.ch
  • /cvmfs/grid.cern.ch

• now can create a CMSSW release

cd /home/belforte/STEFANO/WORK/CRAB/CMSSW/
cmsrel CMSSW_7_0_2
cd CMSSW_7_0_2
cmsenv

• but can't do scram b, so I have to copy the directory from lxplus in order to run customized cmsRun
  • OTOH cmsRun and EdmConfigHash run

GSI part

• install globus-proxy-utils via synaptic
• in my .bashrc

export X509_CERT_DIR=/cvmfs/grid.cern.ch/etc/grid-security/certificates
export X509_VOMSES=/cvmfs/grid.cern.ch/emi-ui-3.7.3-1_sl6v2/etc/vomses
export X509_VOMS_DIR=/cvmfs/grid.cern.ch/emi-ui-3.7.3-1_sl6v2/etc/grid-security/vomsdir
export X509_USER_PROXY=/tmp/x509up_u`id -u`

• and since voms-proxy-init in globus-proxy-utils is old and does not know to look in X509_VOMSES

mkdir ~/.glite
ln -s /cvmfs/grid.cern.ch/emi-ui-3.7.3-1_sl6v2/etc/vomses  ~/.glite/vomses

• alternatively could simply run /cvmfs/grid.cern.ch/emi-ui-3.7.3-1_sl6v2/usr/bin/voms-proxy-init

• as root, added a symlink, see http://askubuntu.com/questions/342484/etc-pki-tls-certs-ca-bundle-crt-not-found

mkdir -p /etc/pki/tls/certs/
cd /etc/pki/tls/certs/
ln -s /etc/ssl/certs/ca-certificates.crt ./ca-bundle.crt

• now gsissh. See http://askubuntu.com/questions/249881/how-do-i-install-globus-toolkit-5-2 and http://www.astro.gla.ac.uk/~matthew/blog/?p=476

 wget http://www.globus.org/ftppub/gt5/5.2/5.2.3/installers/repo/globus-repository-5.2-stable-precise_0.0.3_all.deb
sudo dpkg -i globus-repository-5.2-stable-precise_0.0.3_all.deb
sudo apt-get update
sudo apt-get install gsi-openssh-clients

CRAB part

• installed locally CRAB_2_10_7_pre1 from tarball so that can edit

• finally to setup the crab environment

source /cvmfs/cms.cern.ch/cmsset_default.sh 
#source /cvmfs/grid.cern.ch/emi-ui-3.7.3-1_sl6v2/etc/profile.d/setup-emi3-ui-example.sh 
cd /home/belforte/STEFANO/WORK/CRAB/CMSSW/CMSSW_7_0_2
cmsenv
cd  /home/belforte/STEFANO/WORK/CRAB/TESTCRAB

source /home/belforte/STEFANO/WORK/CRAB/CRAB_2_10_7_pre1/crab.sh 

• now crab -create works

• and now also crab -submit and crab -status work

NOTES

• no myproxy-* yet, need to use dont_check_proxy=1 in crab.cfg

The myproxy problem

myproxy-info: error while loading shared libraries: libssl.so.10: cannot open shared object file: No such file or directory

Also libcrypto.so.10 is missing. I did as superuser

cd /usr/lib/x86_64-linux-gnu/
ln -s  libssl.so  libssl.so.10
ln -s  libcrypto.so libcrypto.so.10

LapSB:TESTCRAB$ myproxy-info -d -s myproxy.cern.ch
myproxy-info: /cvmfs/cms.cern.ch/slc6_amd64_gcc481/cms/cmssw/CMSSW_7_0_2/external/slc6_amd64_gcc481/lib/libldap_r-2.4.so.2: no version information available (required by /usr/lib/libmyproxy.so.5)
myproxy-info: /cvmfs/cms.cern.ch/slc6_amd64_gcc481/cms/cmssw/CMSSW_7_0_2/external/slc6_amd64_gcc481/lib/liblber-2.4.so.2: no version information available (required by /usr/lib/libmyproxy.so.5)
Error authenticating: Connection closed.

If I try to unsetenv scram, like Crab2 does now, only get the authentication error:

LapSB:TESTCRAB$ eval `scram unsetenv -sh`
LapSB:TESTCRAB$ myproxy-info -v -d -s myproxy.cern.ch
MyProxy v5.5 5 Sep 2011 PAM SASL KRB5 LDAP VOMS OCSP
Attempting to connect to 188.184.135.252:7512 
Successfully connected to myproxy.cern.ch:7512 
using trusted certificates directory /cvmfs/grid.cern.ch/etc/grid-security/certificates
Using Proxy file (/tmp/x509up_u1000)
Error authenticating: Connection closed.

For reference, the same on lxplus6 gives (making sure to use same grid-security cert. list):

belforte@lxplus0107/~> export X509_CERT_DIR=/cvmfs/grid.cern.ch/etc/grid-security/certificates
belforte@lxplus0107/~> myproxy-info -v -d -s myproxy.cern.ch
MyProxy v5.9 Jul 2012 PAM SASL KRB5 LDAP VOMS OCSP
Attempting to connect to 188.184.135.252:7512 
Successfully connected to myproxy.cern.ch:7512 
using trusted certificates directory /cvmfs/grid.cern.ch/etc/grid-security/certificates
Using Proxy file (/tmp/x509up_u8516)
server name: /DC=ch/DC=cern/OU=computers/CN=px402.cern.ch
checking that server name is acceptable...
server name matches "myproxy@px402.cern.ch"
authenticated server name is acceptable
username: /C=IT/O=INFN/OU=Personal Certificate/L=Trieste/CN=Stefano Belforte
owner: /C=IT/O=INFN/OU=Personal Certificate/L=Trieste/CN=Stefano Belforte
  timeleft: 131:16:39  (5.5 days)

-- StefanoBelforte - 01 Aug 2014