1. www.eu-eela.org E-science grid facility for Europe and Latin America Installation and configuration of a top BDII Gianni M. Ricciardi – Consorzio COMETA Joint EELA-2/EGEE-III tutorial for trainers Catania, 2008 June 30th – 2008 July 4th

2. www.eu-eela.eu Catania (Italy), Joint EELA/EGEEIII Tutorial for Trainers, 30.06.2008 – 04.07.2008 gLite Information System(s)‏ To collect information about the status of resources All pieces of information are published according to a well known data model Used for: – resource discovery – workload management – monitoring More than one implementation – BDII (Berkeley DB Information Index)‏ – R-GMA (Relational Grid Monitoring Architecture)‏

3. www.eu-eela.eu Catania (Italy), Joint EELA/EGEEIII Tutorial for Trainers, 30.06.2008 – 04.07.2008 Overview of BDII Adopted by gLite as production IS Based on LDAP (Light Direct Access Protocol) servers Several layers: – a GRIS (Grid Resource Information Server) on each Grid element (CE, SE, RB...) that collects static and dynamic information about that element – a GIIS (Grid Index Information Server) (or site BDII) on each Grid site to collect information by all GRISes present in that site – a top BDII (the BDII Server), as central service, to collect information from all GIISes

4. www.eu-eela.eu Catania (Italy), Joint EELA/EGEEIII Tutorial for Trainers, 30.06.2008 – 04.07.2008 The BDII Server It consists of two or more standard LDAP databases that are populated by an updating process (2171,2172,2173 ports) Port forwarding is used to enable one database to publish data while the other is refreshing. Options exist to update the list of GIIS LDAP URLs from a web page and to use an LDIF file from a web page

5. www.eu-eela.eu Catania (Italy), Joint EELA/EGEEIII Tutorial for Trainers, 30.06.2008 – 04.07.2008 Scenario WEB Server - Configuration file for BDII Site BDII TOP BDII Write and update the web page read and write LDAP URLs file ldapsearch queries ldapsearch -x –h -p 2170 –b mds-vo-name=local,o=grid BDII query 2171,2172,2173 ports write LDAP databases Web administrator

6. www.eu-eela.eu Catania (Italy), Joint EELA/EGEEIII Tutorial for Trainers, 30.06.2008 – 04.07.2008 Configuration: bdii-update.conf Line format: ldap:// :2170/mds-vo- name=,o=grid Example: http://grid018.ct.infn.it/fileadmin/bdii/glite-bdii-update.conf INFN-CATANIA ldap://grid010.ct.infn.it:2170/mds-vo-name=infn- catania,o=grid INFN-CNAF ldap://grid011f.cnaf.infn.it:2170/mds-vo-name=infn- cnaf,o=grid [...]

7. www.eu-eela.eu Catania (Italy), Joint EELA/EGEEIII Tutorial for Trainers, 30.06.2008 – 04.07.2008 /opt/bdii/etc/bdii.conf example BDII_PORT_READ=2170 BDII_PORTS_WRITE="2171 2172 2173" BDII_USER=edguser BDII_BIND=mds-vo-name=local,o=grid BDII_PASSWD=ru3hg5y BDII_SEARCH_FILTER='(|(objectClass=GlueSchemaVersion)(obj ectClass=GlueTop))' BDII_SEARCH_TIMEOUT=30 BDII_BREATHE_TIME=60 BDII_AUTO_UPDATE=yes BDII_AUTO_MODIFY=no BDII_DIR=/opt/bdii/ BDII_UPDATE_URL=http://grid018.ct.infn.it/fileadmin/bdii/glite- bdii-update.conf BDII_UPDATE_LDIF=http://goc.grid- support.ac.uk/gridsite/bdii/BDII/www/bdii-update.ldif SLAPD=/usr/sbin/slapd SLAPADD=/usr/sbin/slapadd

8. www.eu-eela.eu Catania (Italy), Joint EELA/EGEEIII Tutorial for Trainers, 30.06.2008 – 04.07.2008 Top BDII Installation Pre-requisites: – a machine with Scientific Linux 4.X on board and following rpm package groups: X Window System Editors X Software Development Text-based Internet Server Configuration Tools Development Tools Administration Tools System Tools Legacy Software Development – for 64-bit machines you need also these package groups: Compatibility Arch Support Compatibility Arch Development Support

9. www.eu-eela.eu Catania (Italy), Joint EELA/EGEEIII Tutorial for Trainers, 30.06.2008 – 04.07.2008 Firewall settings Port 2170 TCP has to be open to outside world: # vi /etc/sysconfig/iptables-config -A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp -- dport 2170 -j ACCEPT # service iptables restart

10. www.eu-eela.eu Catania (Italy), Joint EELA/EGEEIII Tutorial for Trainers, 30.06.2008 – 04.07.2008 Repository settings The default software package manager used by SL4 is YUM In order to use right repositories we need to set a temporary variable: # REPOS=”ca ig glite-bdii jpackage gilda dag” and then get repositories files using this command: # for name in $REPOS; do wget http://grid018.ct.infn.it/mrepo/repos/$name.repo -O /etc/yum.repos.d/$name.repo; done

11. www.eu-eela.eu Catania (Italy), Joint EELA/EGEEIII Tutorial for Trainers, 30.06.2008 – 04.07.2008 Installing Java Install JDK 1.5.0 before the installation of middleware metapackages: # rpm -ihv http://grid-it.cnaf.infn.it/mrepo/ig_sl4- i386/RPMS.3_1_0_externals/jdk-1.5.0_14-fcs.i586.rpm # rpm -ihv http://grid-it.cnaf.infn.it/mrepo/ig_sl4- i386/RPMS.3_1_0_externals/java-1.5.0-sun-compat-1.5.0.14- 1.sl4.jpp.noarch.rpm

12. www.eu-eela.eu Catania (Italy), Joint EELA/EGEEIII Tutorial for Trainers, 30.06.2008 – 04.07.2008 Metapackages Installation To install all middleware packages required you only need to run: # yum -y install ig_BDII Then we need to install Certification Authorities's CRLs: # yum -y install lcg-CA and finally GILDA's CA and VOMS certificate: # yum -y install gilda_utils

13. www.eu-eela.eu Catania (Italy), Joint EELA/EGEEIII Tutorial for Trainers, 30.06.2008 – 04.07.2008 Customization of site-info.def To configure gLite middleware you need to edit a site-info.def file for your machine: # cp /opt/glite/yaim/examples/siteinfo/ig-site-info.def /opt/glite/yaim/etc/gilda/ then edit it setting right values for following variables: JAVA_LOCATION="/usr/java/jdk1.5.0_14/" BDII_HTTP_URL="http://grid018.ct.infn.it/fileadmin/bdii/glite-bdii- update.conf" #BDII_FCR=http://lcg-fcr.cern.ch:8083/fcr-data/exclude.ldif

14. www.eu-eela.eu Catania (Italy), Joint EELA/EGEEIII Tutorial for Trainers, 30.06.2008 – 04.07.2008 Nodetype Configuration To configure your node as a top BDII you only need to run: # /opt/glite/yaim/bin/ig_yaim -c -s /opt/glite/yaim/etc/gilda/ -n ig_BDII_top Post-configuration steps: – disable YUM autoupdate: # /opt/glite/yaim/etc/gilda/disable_yum.sh – set autoupdate of CAs: # /opt/glite/yaim/etc/gilda/set_CAs_autoupdate.sh

15. www.eu-eela.eu Catania (Italy), Joint EELA/EGEEIII Tutorial for Trainers, 30.06.2008 – 04.07.2008 BDII Testing Try to query the BDII server: # ldapsearch -x -h -p 2170 -b mds-vo- name=local,o=grid Log into a User Interface and use Information System tools: $ LCG_GFAL_INFOSYS= :2170 $ lcg-infosites --vo gilda ce $ lcg-info --vo gilda --list-ce

16. www.eu-eela.eu Catania (Italy), Joint EELA/EGEEIII Tutorial for Trainers, 30.06.2008 – 04.07.2008 Troubleshooting If a query to the BDII doesn't show information about a site, you have to look at log files and check for errors: # less /opt/bdii/var/bdii.log [...] GILDA-ROMA3: ldap_bind: Can't contact LDAP server [...] in this case contact the site administrator to check if site BDII is up and running and there are no connection issues (firewall, TCP wrapper, etc.)

17. www.eu-eela.eu Catania (Italy), Joint EELA/EGEEIII Tutorial for Trainers, 30.06.2008 – 04.07.2008 Troubleshooting If in BDII logs you get an error Time for searches: 31 s current port: 32912 - OK [...] ldap_bind: Can't contact LDAP server (-1) Time to load DB: 61 s probably you have some troubles about slapd access from localhost: check TCP wrappers.

18. www.eu-eela.eu Catania (Italy), Joint EELA/EGEEIII Tutorial for Trainers, 30.06.2008 – 04.07.2008 References GILDA site: installation and configuration of glite 3.1 on SL4xLite User guide – https://grid.ct.infn.it/twiki/bin/view/GILDA/GILDASiteInstall BDII documentation – https://twiki.cern.ch/twiki//bin/view/EGEE/BDII – https://twiki.cern.ch/twiki/bin/view/LCG/BdiiNotes

19. www.eu-eela.eu Catania (Italy), Joint EELA/EGEEIII Tutorial for Trainers, 30.06.2008 – 04.07.2008 19 Questions …