1c.1 Assignment 2 Preliminaries Review (Full details in assignment write-up.)‏ © 2011 B. Wilkinson/Clayton Ferner. Fall 2011 Grid computing course. Modification date: Sept 9b, 2011

1c.2 Traditional way from a Windows system is to use PuTTY to get remote access. Obtain from ~sgtatham/putty/download.html Remote Access coit-grid01.uncc.edu Select ssh Can save and reload

1c.3 WinSCP Another method is WinSCP will can be used for file transfer as well as a login client via secured socket layer Obtain from Remote directory Local directory Drag to move files

1c.4 WinSCP console window Console terminal selection

1c.5 As will be fully explained later in the course, X509 certificates used to provide security in a Grid system. Each user needs a certificate issued (signed) by a “certificate authority” (CA). The course CA is set up on coit-grid02.uncc.edu. User “certificates”

1c.6 Requesting a certificate 1.Log into coit-grid01.uncc.edu 2.Issue the command grid-cert-request You will be prompted for your name and a passphrase. (Yet another password!) Don't forget this. We cannot reset it if you lose it. Obtaining a “certificate” You will not do this on the assignment

1c.7 Requesting a certificate This will produce three files in.globus in your home directory: usercert_request.pem usercert.pem (an empty file)‏ userkey.pem Obtaining a “certificate” cont. You will not do this on the assignment

1c.8 Request: usercert_request.pem –Certificate request, which you should send to CA. Certificate: usercert.pem –Initially an empty file. Signed certificate from CA will be placed here. (In assignment, this will be done for you.)‏ User’s private key: userkey.pem –Private key associated with your certificate request, encrypted with pass phrase that you entered when prompted by grid-cert-request. Files held by user after using grid-cert-request You will not do this on the assignment

1c file grid-cert-request.pem to CA course administrator (the course TA).‏ Request your certificate within 2 days, as we need time to sign and download. 2. CA administrator will create certificate as file usercert.pem. In our case, CA administrator will secure copy this file into your.globus directory replacing empty file created with grid-cert- request. 3. You will receive an when this has been done. Obtaining a “certificate” cont. You will not do this on the assignment

1c.10 4.Test that certificate works by issuing the command grid-proxy-init which creates a “proxy” certificate to access resources on your behalf. You will be prompted for a passphase, which will be the same as you used when making the request. 5. Check that you got a proxy by using the command: grid-proxy-info which will show the proxy subject and time left. Proxy can be destroyed with: grid-proxy-destroy Obtaining a “proxy certificate” You will not do this on the assignment

1c.11 1.When you registered to use the portal a certificate request was created for you automatically using the slides above. The CA signed your certificate and stored them on the MyProxy server (coit-grid02.uncc.edu). 2.The MyProxy server is a repository for certificates and private keys. Using the MyProxy server, your private key is better protected. 3.The obtain a proxy certificate issue the command myproxy-logon –s coit-grid02.uncc.edu You will be prompted for a passphase, which should be the password you supplied when you registered yourself on the portal. Obtaining a “proxy certificate” using the MyProxy server

1c.12 4.Check that you got a proxy by using the command: grid-proxy-info which will show the proxy subject and time left. 5.To see the complete proxy information, you can use the command: openssl x509 –in proxy_path -noout –text Where “proxy_path” is the path given by the grid-proxy-info command. 6.Proxy can be destroyed with: grid-proxy-destroy Obtaining a “proxy certificate” using the MyProxy server (cont.)

1c.13 Submitting a job Assignment first asks you to submit a job using the –c option: globusrun-ws -submit -F localhost:8440 -s -so echo_output -c /bin/echo hello This should simply work. You are asked to check the output.

1c.14 Then create XML job description document (JDD) and resubmit using that: globusrun-ws -submit -F localhost:8440 -f test1.xml At this point, you will need to use an editor to create test1.xml. Use any. One suggestion is to use nano.

1c.15 nano In your case, you will be using coit-grid01.edu Control key commands: Control-O to save, Control-X to exit

1c.16 Next step is run the same command on the machine torvalds.cis.uncw.edu globusrun-ws -submit -F torvalds.cis.uncw.edu -f test1.xml After seeing that it works, you will perform the same multi-step application using different grid resource with data movement as you did in the first assignment. You will want to have two ssh windows (one logged into the servers at the two sites) to verify the results

1c.17 Task 3b: Create XML job description document to perform the integration using the trapeziodal method and submit to run on coit-grid01. Task 3c:Transfer the output to torvalds: globus-url-copy file:///path to your directory/ area_output gsiftp://torvalds.cis.uncw.edu/path to your directory/ Task 3d: Create XML job description document to perform the computation of the mulch and submit to run on torvalds. Task 3e: Transfer the output back to coit-grid01 from torvalds using globus-url-copy.

1c.18 Compute area of flower bed torvaldscoit-grid01 area_ output Compute volume and cost of mulch globus-url-copy mulch_ output globus-url-copy mulch_ output area_ output

1c.19 Task 4 asks you to do file staging as well as file cleanup as part of the XML job description file. This means that the globusrun-ws command will take care of the file transfer for you. You won’t need to execute the globus-url-copy commands. The file staging and file cleanup should go in the XML job description file just before the closing tag.

1c.20 Stage in and stage out are similar in structure, except source and destination will likely be reversed: gsiftp://coit-grid01.uncc.edu:2811/path to file file:///${GLOBUS_USER_HOME}/path/ Note that the variable “${GLOBUS_USER_HOME} is defined to the be users home directory on the remote server, not the local computer.

1c.21 File clean up is structure like this: path to file...

1c.22 Questions?