1. FP6−2004−Infrastructures−6-SSA-026409 www.eu-eela.org E-infrastructure shared between Europe and Latin America FiReMan Installation Emidio Giorgio INFN EELA – EGEE tutorial Madrid, 20.02.2006

2. FP6−2004−Infrastructures−6-SSA-026409 E-infrastructure shared between Europe and Latin America Madrid, EELA Kick-off Meeting, 30.01.2006 2 gLite general installation – short reminder Start from a fresh install of Scientific Linux >= 3.0.4 FiReMan server can be installed via a gLite deployment package –Download: http://glite.web.cern.ch/glite/packageshttp://glite.web.cern.ch/glite/packages Installation via –Installer script –APT Installation will install all dependencies, including –other necessary gLite modules –external dependencies (e.g. TOMCAT) You will need to install non-freely available packages yourself (e.g. Java, Oracle) Be sure that, if needed, non EGEE CA’s rpm are present

3. FP6−2004−Infrastructures−6-SSA-026409 E-infrastructure shared between Europe and Latin America Madrid, EELA Kick-off Meeting, 30.01.2006 3 Installing FiReMan via apt 1.Verify if apt is present: –rpm -qa | grep apt –Install apt if necessary:  rpm -ivh http://linuxsoft.cern.ch/cern/slc30X/i386/SL/RPMS/apt- 0.5.15cnc6-8.SL.cern.i386.rpmhttp://linuxsoft.cern.ch/cern/slc30X/i386/SL/RPMS/apt- 0.5.15cnc6-8.SL.cern.i386.rpm 2.Add gLite apt repository: –Put one of the following lines in a file (e.g. glite.list) inside the /etc/apt/sources.list.d directory –rpm http://glitesoft.cern.ch/EGEE/gLite/APT/R1.4/ rhel30 externals Release1.4 updates 3.Update apt repository: –apt-get update –apt-get dist-upgrade 4.Install FiReMan server: –apt-get install glite-data-single-catalog-config Extra packages needed (non freely distributable) : J2SE v 1.4.2_08 JRE: http://java.sun.com/j2se/1.4.2/download.htmlhttp://java.sun.com/j2se/1.4.2/download.html See http://glite.web.cern.ch/glite/packages/APT.asp

4. FP6−2004−Infrastructures−6-SSA-026409 E-infrastructure shared between Europe and Latin America Madrid, EELA Kick-off Meeting, 30.01.2006 4 Request host certificates for the box – https://gilda.ct.infn.it/CA/mgt/restricted/srvreq.php https://gilda.ct.infn.it/CA/mgt/restricted/srvreq.php Copy host certificate ( hostcert.pem and hostkey.pem ) in /etc/grid-certificates. – chmod 644 hostcert.pem – chmod 400 hostkey.pem If planning to use certificates released by unsupported EGEE CA’s, be sure that their public key and CRLs (usually distributed with an rpm) are installed. – CA GILDA ones are available from https://gilda.ct.infn.it/RPMS/ca_GILDA-0.28.1.i386.rpm Preliminary

5. FP6−2004−Infrastructures−6-SSA-026409 E-infrastructure shared between Europe and Latin America Madrid, EELA Kick-off Meeting, 30.01.2006 5 Fireman Configuration ls /opt/glite/etc/config/templates to find the xml templates for configuration files. Copy needed ones under /opt/glite/etc/config [root@glite-se-test root]# cd /opt/glite/etc/config/ [root@glite-se-test config]# ls -1 glite-data-single-catalog.cfg.xml glite-global.cfg.xml glite-rgma-common.cfg.xml glite-rgma-servicetool.cfg.xml glite-security-utils.cfg.xml Fireman specific parameters Parameters for R-GMA service tools Common environment variables GSI and security utilities

6. FP6−2004−Infrastructures−6-SSA-026409 E-infrastructure shared between Europe and Latin America Madrid, EELA Kick-off Meeting, 30.01.2006 6 Other cfg.xml glite-rgma-common.cfg.xml –Set the RGMA-server name(s) glite-rgma-servicetool.cfg.xml –Just the machine FQDN name on rgma.servicetool.sitename attribute glite-global.cfg.xml –General aspects. Typically just the JAVA_HOME attribute needs to be changed, put in the location of your JVM glite-security-utils.cfg.xml –Just set the cron.mailto attribute value

7. FP6−2004−Infrastructures−6-SSA-026409 E-infrastructure shared between Europe and Latin America Madrid, EELA Kick-off Meeting, 30.01.2006 7 glite-global.cfg.xml Check the correct path of your JAVA JRE/JDK.

8. FP6−2004−Infrastructures−6-SSA-026409 E-infrastructure shared between Europe and Latin America Madrid, EELA Kick-off Meeting, 30.01.2006 8 glite-rgma-common.cfg.xml <rgma.server.hostname description="Host name of the R-GMA server. [Example: lxb1420.cern.ch] [Type: 'string']" value=“gilXX.ciemat.es"/> <rgma.schema.hostname description="Host name of the R-GMA schema service. (See also configuration parameter 'rgma.server.run_schema_service' in the R-GMA server configuration file in case you install a server). [Example: lxb1420.cern.ch] [Type: 'string']" value=" gilXX.ciemat.es "/> <rgma.registry.hostname description="Host name of the R-GMA registry service. You must specify at least one hostname and you can specify several if you want to use several registries. (See also configuration parameter 'rgma.server.run_registry_service' in the R-GMA server configuration file in case you install a server). [Example: lxb2029.cern.ch] [Type: 'string']"> gilXX.ciemat.es

9. FP6−2004−Infrastructures−6-SSA-026409 E-infrastructure shared between Europe and Latin America Madrid, EELA Kick-off Meeting, 30.01.2006 9 <rgma.servicetool.sitename description="DNS name of the site publisher node. This parameter must have the same value as the rgma.site-publisher.sitename parameter in the R-GMA Server configuration. value=" gilXX.ciemat.es "/> <rgma.servicetool.vo description="List of VOs that this service is considered part of.> gilda glite-rgma-servicetool.cfg.xml

10. FP6−2004−Infrastructures−6-SSA-026409 E-infrastructure shared between Europe and Latin America Madrid, EELA Kick-off Meeting, 30.01.2006 10 glite-security-utils.cfg.xml <cron.mailto description="E-mail address for sending cron job notifications" value="root@localhost"/>

11. FP6−2004−Infrastructures−6-SSA-026409 E-infrastructure shared between Europe and Latin America Madrid, EELA Kick-off Meeting, 30.01.2006 11 glite-data-single-catalog.cfg.xml Key parameters –VO Name served by the instance (more VO can be served) –DB Admin passwd –DB Name, user and password for used database (configurator script will create it if not existing) –Secure / Unsecure mode, switched through the allow.unsecure.port attribute. If working in secure mode, the endpoint will be reachable only through https protocol at the port 8443, and comunication will pass trough GSI. Otherwise http and the port 8080 can be used

12. FP6−2004−Infrastructures−6-SSA-026409 E-infrastructure shared between Europe and Latin America Madrid, EELA Kick-off Meeting, 30.01.2006 12 When finished, run the configurator/start scripts cd /opt/glite/etc/config/scripts/./glite-data-single-catalog.config.py –- configure./glite-data-single-catalog.config.py --start Be sure that firewall is open on the port you choose for FireMan (default is 8443)

13. FP6−2004−Infrastructures−6-SSA-026409 E-infrastructure shared between Europe and Latin America Madrid, EELA Kick-off Meeting, 30.01.2006 13 Basic tests Test tomcat is working  Point your browser to catalog/SEIndex endpoint Test catalog functions from UI clients [glite-tutor] /home/giorgio > glite-catalog-ls -v \ -s https://glite-se-test.trigrid.it:8443/romaVO/\https://glite-se-test.trigrid.it:8443/romaVO/\ glite-data-catalog-service-fr-mysql/services/FiremanCatalogglite-data-catalog-service-fr-mysql/services/FiremanCatalog \ -l / # Using endpoint https://glite-se-test.trigrid.it:8443/romaVO/\https://glite-se-test.trigrid.it:8443/romaVO/\ glite-data-catalog-service-fr-mysql/services/FiremanCatalog # Service version: 1.4.2 # Interface version: 2.0.0 # Schema version: 1 dpdrwlx--pdrwlx--pdrwlx-- 0 1970-01-01 01:00:01 /free dpdrwlx--pdrwlx--pdrwlx-- 0 1970-01-01 01:00:01 /tmp

14. FP6−2004−Infrastructures−6-SSA-026409 E-infrastructure shared between Europe and Latin America Madrid, EELA Kick-off Meeting, 30.01.2006 14 For More Information JRA1 Data Management homepage http://cern.ch/egee-jra1-dm http://cern.ch/egee-jra1-dm gLite FiReMan user guide –Overview https://edms.cern.ch/file/570643/1/EGEE-TECH-570643-v1.0.pdf –Command Line tools https://edms.cern.ch/file/570780/1/EGEE-TECH-570780-v1.0.pdf –C/C++ API https://edms.cern.ch/file/570780/1/EGEE-TECH-570780-C-CPP-API-v1.0.pdf –Java API https://edms.cern.ch/file/570780/1/EGEE-TECH-570780-JAVA-API-v1.0.pdf gLite Release 1 –http://glite.web.cern.ch/glite/packages/R1.0/R20050331http://glite.web.cern.ch/glite/packages/R1.0/R20050331 –http://glite.web.cern.ch/glite/documentationhttp://glite.web.cern.ch/glite/documentation