1. EPIKH School for Grid Site Administrators, Amman, 21.12.2011 1/32 Introductions BDII Installation and Configuration Miguel Angel Díaz Corchero (miguelangel.diaz@ciemat.es) CETA-CIEMAT Asia 11 2011 - EPIKH School for Grid Site Administrators Amman, 21.11.2011

2. EPIKH School for Grid Site Administrators, Amman, 21.12.2011 2/32 Check your host Vi /etc/hosts (for example) # Do not remove the following line, or various programs # that require network functionality will fail. 127.0.0.1 localhost.localdomain localhost 202.122.37.107 gilda01.ihep.ac.cn gilda01 Start ntpd yum install ntp chkconfig --list | grep ntp chkconfig --level 2345 ntpd on ntpdate ntp-1.infn.it service ntpd start

3. EPIKH School for Grid Site Administrators, Amman, 21.12.2011 3/32 Repository settings 1) Disable DAG repositories. 2) Install the EPEL repository rpm -ivh http://download.fedora.redhat.com/pub/epel/5/x86_64/epel-release-5- 4.noarch.rpm 3) Install the EMI middleware repository wget http://emisoft.web.cern.ch/emisoft/dist/EMI/1/sl5/x86_64/base/emi-release- 1.0.0-1.sl5.noarch.rpm yum install./emi-release-1.0.0-1.sl5.noarch.rpm 4) Install the Certification Authority repository wget http://repository.egi.eu/sw/production/cas/1/current/repo-files/EGI- trustanchors.repo -O /etc/yum.repos.d/EGI-trustanchors.repo

4. EPIKH School for Grid Site Administrators, Amman, 21.12.2011 4/32 Install by yum BDII specific Installation: Install the metapackage: yum clean all yum install emi-bdii-top (This is a trainning. We are not going to install all the CAs)

5. EPIKH School for Grid Site Administrators, Amman, 21.12.2011 5/32 edit site-info.def Edit site-info.def: wget 10.248.251.140/mrepo/site-info.def -O /opt/glite/yaim/etc/site-info.def nano /opt/glite/yaim/etc/site-info.def Other fields have been configured before. Have a look to all the site-info.def chmod -c 755 /opt/glite/yaim/etc/site-info.def SITE_BDII_HOST=ce-xx BDII_HOST=bdii-xx WMS_HOST=wms-xx LB_HOST=lb-xx SE_LIST=se-xx CE_HOST=ce-xx MY_DOMAIN=xxxxxxxx.xx # BDII/GIP specific settings BDII_HTTP_URL="http://bdii-xx.xxxxxxxx.xx/ceta-prod.conf" BDII_REGIONS="WMS CE SE LFC MON PX" # list of the services provided by the site BDII_WMS_URL="ldap://$WMS_HOST:2170/mds-vo-name=resource,o=grid" BDII_CE_URL="ldap://$CE_HOST:2170/mds-vo-name=resource,o=grid" BDII_SE_URL="ldap://$DPM_HOST:2170/mds-vo-name=resource,o=grid" BDII_LFC_URL="ldap://LFC_HOST:2170/mds-vo-name=resource,o=grid" BDII_MON_URL="ldap://$MON_HOST:2170/mds-vo-name=resource,o=grid" BDII_PX_URL="ldap://$PX_HOST:2170/mds-vo-name=resource,o=grid" # Use this to set your contact string.

6. EPIKH School for Grid Site Administrators, Amman, 21.12.2011 6/32 Other files to do the mapping Get host-certificates wget 10.248.251.140/mrepo/hostcert-xx.pem -O /etc/grid- security/hostcert.pem wget 10.248.251.140/mrepo/hostkey-xx.pem -O /etc/grid- security/hostkey.pem chmod 644 /etc/grid-security/hostcert.pem chmod 400 /etc/grid-security/hostkey.pem

7. EPIKH School for Grid Site Administrators, Amman, 21.12.2011 7/32 Configure CA and VO Gilda provides a package with all the necessary Configure Certification Authority (CA) and Virtual Organization (VO): wget http://grid018.ct.infn.it/mrepo/repos/gilda.repo -O /etc/yum.repos.d/gilda.repo yum install gilda_utils Fixing the VO configuration 1 ) mkdir /etc/grid-security/vomsdir/gilda/ mv /etc/grid-security/vomsdir/voms.ct.infn.it.pem /etc/grid- security/vomsdir/gilda/ 2) mv /opt/glite/yaim/etc/gilda/vo.d /opt/glite/yaim/etc

8. EPIKH School for Grid Site Administrators, Amman, 21.12.2011 8/32 Running Yaim /opt/glite/yaim/bin/yaim -c -s /opt/glite/yaim/etc/site-info.def -n BDII_top

9. EPIKH School for Grid Site Administrators, Amman, 21.12.2011 9/32 Thank you very much!