1. FP6−2004−Infrastructures−6-SSA-026409 www.eu-eela.org E-infrastructure shared between Europe and Latin America User Interface (gLite 1.4) Installation and Configuration Valeria Ardizzone INFN Catania First EELA Grid tutorial for users and system administrators Madrid, 20-24th February 2006

2. E-infrastructure shared between Europe and Latin America First EELA Grid tutorial for users and system administrators, 20-24.02.2006 2 Outline What is a User Interface (UI) ? How to install a User Interface. How to configure a User Interface.

3. E-infrastructure shared between Europe and Latin America First EELA Grid tutorial for users and system administrators, 20-24.02.2006 3 What is a UI? The UI is a suite of clients and API that users and applications can use to access the gLite services. The gLite UI includes the following components: – VOMS command-line tools – Workload Management System clients and APIs – Logging and Bookkeeping clients and APIs – Data Transfer command-line clients and APIs – Data Catalog command-line clients and APIs – gLite I/O client and APIs – R-GMA client and APIs

4. E-infrastructure shared between Europe and Latin America First EELA Grid tutorial for users and system administrators, 20-24.02.2006 4 Installing User Interface (UI)

5. E-infrastructure shared between Europe and Latin America First EELA Grid tutorial for users and system administrators, 20-24.02.2006 5 Installation Pre-requisites Start from a fresh install of SLC 3.0.x Verify that apt is installed and properly configured: rpm -qa | grep apt Install apt if necessary: rpm -ivh http://linuxsoft.cern.ch/cern/slc30X/i386/SL/RPMS/apt-0.5.15cnc6- 8.SL.cern.i386.rpmhttp://linuxsoft.cern.ch/cern/slc30X/i386/SL/RPMS/apt-0.5.15cnc6- 8.SL.cern.i386.rpm Java SDK is required to install almost any LCG/gLite grid service. Due to license issues, it is not found in the LCG repositories. So please download and install a release of Sun Java SDK >= 1.4.2_08 from http://java.sun.com/j2se/1.4.2/download.html http://java.sun.com/j2se/1.4.2/download.html chmod +x j2sdk-1_4_2_10-linux-i586-rpm.bin./j2sdk-1_4_2_10-linux-i586-rpm.bin rpm -ivh j2sdk-1_4_2_10-linux-i586.rpm Preparing... ########################################### [100%] 1:j2sdk ########################################### [100%]

6. E-infrastructure shared between Europe and Latin America First EELA Grid tutorial for users and system administrators, 20-24.02.2006 6 Security pre-requisites Request a X509 host certificate for the User Interface you are going to install from a Certification Autority (CA). For example, to get host certificates from the GILDA CA, go to: – https://gilda.ct.infn.it/CA/mgt/restricted/srvreq.php https://gilda.ct.infn.it/CA/mgt/restricted/srvreq.php Install host certificates (hostcert.pem and hostkey.pem) in /etc/grid-security. – chmod 644 hostcert.pem – chmod 400 hostkey.pem If you plan to use certificates released by unsupported EGEE CA’s, be sure that their public key, signing policy and CRLs (usually distributed with an rpm) are installed in /etc/grid- security/certificates. – For the VO GILDA, the RPM is available from https://gilda.ct.infn.it/RPMS/ca_GILDA-0.28.1.i386.rpm

7. E-infrastructure shared between Europe and Latin America First EELA Grid tutorial for users and system administrators, 20-24.02.2006 7 Node Syncronization with NTP Syncronization among all LCG nodes is mandatory. It can be achieved by the NTP protocol with a time server Install ntp if not already available for your system: – apt-get install ntp Add your time server in /etc/ntp.conf – restrict mask 255.255.255.255 nomodify notrap noquery – server –(you can use ntp-1.infn.it – IP 193.206.144.10 ) Edit /etc/ntp/step-tickers adding your(s) time server(s) hostname If you are running a firewall, you will have to allow inbound comminication on the NTP port: -A INPUT -s -p udp --dport 123 -j ACCEPT Activate the ntpd service with the following commands:  ntpdate  service ntpd start  chkconfig ntpd on –You can check ntpd’s status with :  ntpq -p = ntp-1.infn.it

8. E-infrastructure shared between Europe and Latin America First EELA Grid tutorial for users and system administrators, 20-24.02.2006 8 Installing User Interface via apt 1. Create the file glite.list in the /etc/apt/sources.list.d directory and put this row on it: rpm http://glitesoft.cern.ch/EGEE/gLite/APT/R1.4/ rhel30 externals Release1.4 updateshttp://glitesoft.cern.ch/EGEE/gLite/APT/R1.4/ 2. Digit the following commands: – apt-get update – apt-get upgrade 3. Install User Interface: – apt-get install glite-ui-config See http://glite.web.cern.ch/glite/packages/APT.asp

9. E-infrastructure shared between Europe and Latin America First EELA Grid tutorial for users and system administrators, 20-24.02.2006 9 Installation of VOMS Certificate Install the GILDA's VOMS server host certificates gilda-voms.ct.infn.it.pem and voms.ct.infn.it.pem in the directory /etc/grid-security/vomsdir Edit the /opt/glite/etc/vomses file as follow: "gilda" "voms.ct.infn.it" "15001" "/C=IT/O=GILDA/OU=Host/L=INFN Catania/CN=voms.ct.infn.it/Email=emidio.giorgio@ct.inf n.it" "gilda"

10. E-infrastructure shared between Europe and Latin America First EELA Grid tutorial for users and system administrators, 20-24.02.2006 10 Installing User Interface via apt If the installation is performed successfully, the following components are installed: – gLite in /opt/glite – Globus in /opt/globus – GPT in /opt/gpt

11. E-infrastructure shared between Europe and Latin America First EELA Grid tutorial for users and system administrators, 20-24.02.2006 11 User Interface Configuration Configuration comes through the execution of pyhton scripts, which takes as input XML files. So services have to be configured by editing these XML files. Attributes in XML file are well commented and selfexplaining. XML files are provided as templates, under /opt/glite/etc/config/templates Copy templates file to /opt/glite/etc/config Edit each of them separately. Then we could launch the configurator scripts for the User Interface.

12. E-infrastructure shared between Europe and Latin America First EELA Grid tutorial for users and system administrators, 20-24.02.2006 12 User Interface Configuration (cont.)

13. E-infrastructure shared between Europe and Latin America First EELA Grid tutorial for users and system administrators, 20-24.02.2006 13 glite-global.cfg.xml <JAVA_HOME description="Environment variable pointing to the SUN Java JRE or J2SE package for example '/usr/java/j2re1.4.2_08/' or '$JAVA_HOME' (if it is defined as an environment variable)" value="/usr/java/j2XX-1.4.2_10"/> Check your java package installed.

14. E-infrastructure shared between Europe and Latin America First EELA Grid tutorial for users and system administrators, 20-24.02.2006 14 glite-security-utils.cfg.xml <cron.mailto description="E-mail address for sending cron job notifications“ value=“siteadmin@yourdomain"/>

15. E-infrastructure shared between Europe and Latin America First EELA Grid tutorial for users and system administrators, 20-24.02.2006 15 glite-rgma-common.cfg.xml <rgma.server.hostname value="rgmasrv.ct.infn.it"/> <rgma.schema.hostname value="rgmasrv.ct.infn.it"/> <rgma.registry.hostname rgmasrv.ct.infn.it

16. E-infrastructure shared between Europe and Latin America First EELA Grid tutorial for users and system administrators, 20-24.02.2006 16 glite-io-client.cfg.xml …. <service-discovery.file.service_name description="The globally unique name of the service. The convention is serviceHostName_voName_serviceType (for serviceType see parameter servicediscovery. file.service_type).“ value="IOServerGILDA"/> <service-discovery.file.url_endpoint description="URL endpoint of the service. The host name is the name of your io server, the port depends on your vo.“ value=“gliteio://egee015.cnaf.infn.it:9999"/>

17. E-infrastructure shared between Europe and Latin America First EELA Grid tutorial for users and system administrators, 20-24.02.2006 17 glite-file-transfer-serviceclient.cfg.xml (1) <service-discovery.file.service_name value="gildaFTS"/> <service-discovery.file.url_endpoint value="https://fts.ct.infn.it:8443/gildav/glite-data-transfer- fts/services/FileTransfer"/> <service-discovery.file.service_version value="3.0.0"/>

18. E-infrastructure shared between Europe and Latin America First EELA Grid tutorial for users and system administrators, 20-24.02.2006 18 glite-file-transfer-serviceclient. cfg.xml (2) <service-discovery.file.service_version value="3.0.0"/>

19. E-infrastructure shared between Europe and Latin America First EELA Grid tutorial for users and system administrators, 20-24.02.2006 19 glite-service-discovery.cfg.xml (1)

20. E-infrastructure shared between Europe and Latin America First EELA Grid tutorial for users and system administrators, 20-24.02.2006 20 glite-service-discovery.cfg.xml (2) <service-discovery.vo description="Default VO to be used to find a friendly VO. Leave the parameter empty if you don't want to specify a default VO. Example: EGEE [Type: 'string']" value="gilda"/> <service-discovery.bdii.provider description="Host and port of the BDII service for service discovery.Leave empty or remove parameter if you do not use BDII as information provider.Example: lxb1386.cern.ch:2170 [Type: 'string']“ value="grid004.ct.infn.it:2170"/>

21. E-infrastructure shared between Europe and Latin America First EELA Grid tutorial for users and system administrators, 20-24.02.2006 21 glite-ui.cfg.xml (1) <set description="Unique name of the set. It might be set to the VO name. [Example: EGEE] [Type: 'string']“ name="gilda"> <ui.VirtualOrganisation description="Name of the VO corresponding to this set. [Example: EGEE] [Type: 'string']" name="gilda">

22. E-infrastructure shared between Europe and Latin America First EELA Grid tutorial for users and system administrators, 20-24.02.2006 22 glite-ui.cfg.xml (2) <ui.NSAddresses description="List of NSserver:port pairs corresponding to the given VO"> <item description="Network Server address and port on which the network server is running separated by the ':' character. In case of multiple Network Servers this tag can be repeated. [Example: lxb1420.cern.ch:7772] [Type: 'string']" value="glite-rb.ct.infn.it:7772"> <ui.LBAddresses description="List of Logging and Bookkeeping server address:port pairs corresponding to the given Network Server. Example: lxb1419.cern.ch:9000] [Type: 'string]"> glite-rb.ct.infn.it:9000

23. E-infrastructure shared between Europe and Latin America First EELA Grid tutorial for users and system administrators, 20-24.02.2006 23 glite-ui.cfg.xml (3)

24. E-infrastructure shared between Europe and Latin America First EELA Grid tutorial for users and system administrators, 20-24.02.2006 24 glite-ui.cfg.xml (4) <py-ui.requirements value='other.GlueCEStateStatus == "Production"'/>

25. E-infrastructure shared between Europe and Latin America First EELA Grid tutorial for users and system administrators, 20-24.02.2006 25 glite-ui.cfg.xml (5) <service-discovery.file.service_name value="FiReManGILDA"/> <service-discovery.file.url_endpoint value="https://grid017.ct.infn.it:8443/gilda/glite-data- catalog-service-fr-mysql/services/FiremanCatalog"/> <service-discovery.file.service_version value="1.7.0"/>

26. E-infrastructure shared between Europe and Latin America First EELA Grid tutorial for users and system administrators, 20-24.02.2006 26 glite-ui.cfg.xml (6) <service-discovery.file.service_name value="SEIndexGILDA"/> <service-discovery.file.url_endpoint value="https://grid017.ct.infn.it:8443/gilda/glite-data- catalog-service-fr-mysql/services/SEIndex"/>

27. E-infrastructure shared between Europe and Latin America First EELA Grid tutorial for users and system administrators, 20-24.02.2006 27 Post configuration In order to commit configuration, execute the script in /opt/glite/etc/config/scripts./glite-uiconfig.py To assure the correct functionality of the gLite UI it is necessary to add, as root, the following rows in /etc/profile source /etc/glite/profile.d/glite_setenv.sh PATH=$PATH:/opt/glite/externals/myproxy-1.14/bin:/opt/lcg/bin:/opt/lcg/sbin LD_LIBRARY_PATH=$LD_LIBRARY_PATH:/opt/glite/externals/myproxy- 1.14/lib:/opt/lcg/lib

28. E-infrastructure shared between Europe and Latin America First EELA Grid tutorial for users and system administrators, 20-24.02.2006 28 Questions…