gLite-3.0 UI

gLite-3.0 User Interface Installation Guide   

Introduction
This document describe the guide lines to install and configure a gLite-3.0 User Interface (UI).

Installation Pre-Requisites
We assumed that the machine's target server platform is Red Hat Linux 3.0 or any binary compatible distribution, such as Scientific Linux (SL) or CentOS. The Scientific Linux 3.0.4 distribution, and some indication on how to install it, can be easily downloaded from the following link: Scientific Linux CERN 3

The Java JRE or JDK are required to run the. In particular this release requires v.1.4.2 or greater. Due to license reasons,
Java package is not distribuited. Please download and install it from http://java.sun.com if you have not yet installed it.

Node Synchronization
A general requirement for the gLite nodes is that they are synchronized. This requirement may be fulfilled in several ways.
If your nodes run under AFS most likely they are already synchronized. Otherwise, you can use the NTP protocol with a time server.

Instructions and examples for a NTP client configuration are provided in this section. If you are not planning to use a
time server on your machine you can just skip it.

NTP Software Installation
Use the latest ntp version available for your system. If you are using APT, an apt-get install ntp will do the work.

NTP Configuration
# Configure the file /etc/ntp.conf by adding the lines dealing with your time server configuration such as, for instance:

 restrict <time_server_IP_address> mask 255.255.255.255 nomodify notrap noquery
 server <time_server_name>

Additional time servers can be added for better performance results. For each server, the hostname and IP address are required. Then, for each time-server you are using, add a couple of lines similar to the ones shown above into the file
/etc/ntp.conf.

# Edit the file /etc/ntp/step-tickers adding a list of your time server(s) hostname(s), as in the following example:

137.138.16.69
137.138.17.69

# If you are running a kernel firewall, you will have to allow inbound communication on the NTP port.

If you are using iptables, you can add the following to /etc/sysconfig/iptables

-A INPUT -s <NTP-serverIP-1> -p udp --dport 123 -j ACCEPT
-A INPUT -s <NTP-serverIP-2> -p udp --dport 123 -j ACCEPT

Remember that, in the provided examples, rules are parsed in order, so ensure that there are no matching REJECT lines
preceding those that you add. You can then reload the firewall :

/etc/init.d/iptables restart

# Activate the ntpd service with the following commands:

 ntpdate <your ntp server name>
 service ntpd start
 chkconfig ntpd on

# You can check ntpd's status by running the following command

 ntpq -p

Configuration Tool: YAIM

Note on yaim and gLite nodes
Where yaim is configuring a gLite node type, it populates the XML files and runs the gLite config scripts. Please note
that any modifications you make to the XML files, to parameters not managed by yaim, should be preserved. Parameters
managed by yaim will be clearly marked in the XML after it has been run. The intention is that yaim offers a simple
interface if prefered, but the ability to use the more powerful native machanism is retained.

Please use yaim to configure pool accounts. Yaim allows non-contiguous ranges of uids which some sites require and is
therefore the default user configuration mechanism.

Installing yaim
From now on we will refer to the node to be installed as the target node
In order to work with the yaim installation and configuration tool yaim must be installed on the target node.
In order to download yaim:

    * Log to target node as 'root'
    * Install yaim
          o find the latest version at http://www.cern.ch/grid-deployment/gis/yaim/

          o Yaim version numbers correspond to the version of LCG/gLite they are intended to configure.
     Use the latest patch release you can find for your version of the middleware.

          o download it using wget :

   wget http://www.cern.ch/grid-deployment/gis/yaim/glite-yaim-x.x.x-x.noarch.rpm

          o install using :

   rpm -ivh glite-yaim-x.x.x-x.noarch.rpm

Site Configuration File
All the configuration values relevant to sites have to be configured in a site configuration file using key-value pairs.
The site configuration file is shared among all the different node types. So we suggest to edit it once and keep it in a
safe place in order not to have to edit it again for each installation.
Modifications possibly occurring in the specification of the site configuration file will be published with this document.
An up-to-date example of site configuration file is anyway provided in the file /opt/glite/yaim/examples/site-info.def
Copy the file /opt/glite/yaim/examples/site-info.def into your working directory (e.g.: /root) renaming it as
my-site-info.def

User Interface installation using yaim
Open the my-site-info.def file using your preferred text editor and configure the file describing as better as possible
your grid site. A list of modified tags have been highlighted below:

# YAIM example site configuration file - adapt it to your site!

MY_DOMAIN=cnaf.infn.it

# Node names
# Note: - SE_HOST -->  Removed, see CLASSIC_HOST, DCACHE_ADMIN, DPM_HOST below
#       - REG_HOST --> There is only 1 central registry for the time being.
CE_HOST=my-ce.$MY_DOMAIN
RB_HOST=egee-rb-01.$MY_DOMAIN
WMS_HOST=egee-rb-01.$MY_DOMAIN
PX_HOST=grid001.ct.infn.it
BDII_HOST=egee-bdii.$MY_DOMAIN
MON_HOST=my-mon.$MY_DOMAIN
FTS_HOST=my-fts.$MY_DOMAIN
REG_HOST=my-reg.$MY_DOMAIN

[..]

# LFC - Set these if you are installing an LFC
LFC_HOST=lfsserver.$MY_DOMAIN

[..]

# These variables tell YAIM where to find additional configuration files.
WN_LIST=/opt/glite/yaim/etc/wn-list.conf
USERS_CONF=/opt/glite/yaim/etc/users.conf
GROUPS_CONF=/opt/glite/yaim/etc/groups.conf
FUNCTIONS_DIR=/opt/glite/yaim/functions
YAIM_VERSION=3.0.0-3

[..]

# Repository settings
LCG_REPOSITORY="'rpm http://linuxsoft.cern.ch LCG/apt/LCG-2_7_0/sl3/en/i386 lcg_sl3 lcg_sl3.updates lcg_sl3.security'
  'rpm http://grid-deployment.web.cern.ch/grid-deployment/gis apt/LCG-2_7_0/sl3/en/i386 lcg_sl3 lcg_sl3.updates lcg_sl3.security'
  'rpm http://glitesoft.cern.ch/EGEE/gLite/APT/R3.0/ rhel30 externals Release3.0 updates'"

CA_REPOSITORY="rpm http://grid-deployment.web.cern.ch/grid-deployment/gis apt/LCG_CA/en/i386 lcg"
REPOSITORY_TYPE="apt" # or "yum"

[..]

# You will probably want to change these too for the relocatable dist
OUTPUT_STORAGE=/tmp/jobOutput
JAVA_LOCATION="/usr/java/j2sdk1.4.2_11"  <== check the Java package installed on your machine.

[..]

# GridIce server host name (usually run on the MON node).
GRIDICE_SERVER_HOST=$MON_HOST

# Site-wide settings
SITE_EMAIL=your email address
SITE_NAME=your site name
SITE_LOC="your location"
SITE_LAT=0.0 # -90 to 90 degrees
SITE_LONG=0.0 # -180 to 180 degrees
SITE_WEB http://www.my-site.org"
SITE_TIER="TIER 2"
SITE_SUPPORT_SITE="my-bigger-site.their_domain"

[..]

# VOS="atlas alice lhcb cms dteam biomed"
# Space separated list of supported VOs by your site
VOS="bio"    
QUEUES=${VOS}

VO_BIO_SW_DIR=$VO_SW_DIR/bio
VO_BIO_DEFAULT_SE=$CLASSIC_HOST
VO_BIO_STORAGE_DIR=$CLASSIC_STORAGE_DIR/bio
VO_BIO_QUEUES="short long infinite"
VO_BIO_VOMS_SERVERS="vomss://voms.cnaf.infn.it:8443/voms/bio?/bio"
VO_BIO_VOMSES="'bio voms.cnaf.infn.it 15007 /C=IT/O=INFN/OU=Host/L=CNAF/CN=voms.cnaf.infn.itt.infn.it bio'"

User Interface installation
In order to install the node with the user interface packages run the command :

     /opt/glite/yaim/scripts/install_node my-site.def glite-UI

When the yaim installation procedure has been completed, some further manual changes are needed. The first change is
to modify the content of file /opt/glite/etc/glite_wmsui_cmd_var.conf as follow :

[
  ErrorStorage = "/tmp/glite/glite-ui";
  DefaultLogInfoLevel = 1;
  LoggingTimeout = 10;
  rank = - other.GlueCEStateEstimatedResponseTime;
  NSLoggerLevel = 1;
  LoggingSyncTimeout = 10;
  DefaultVo = "bio";
  OutputStorage = "/tmp/glite/glite-ui";
  ListenerStorage = "/tmp/glite/glite-ui";
  RetryCount = 3;
  DefaultStatusLevel = 1;
  requirements = other.GlueCEStateStatus == "Production";
]

Make a new directory:  mkdir /opt/glite/yaim/etc
Then copy the template files users.conf and groups.conf from the directory /opt/glite/yaim/examples/ to
the new directory /opt/glite/yaim/etc.

Configure the user interface running the command:

     /opt/glite/yaim/scripts/configure_node my-site.def UI

Installation VOMS Certificate
Install the public key of the bio's VO under the /etc/grid-security/vomsdir folder.
A copy of this public key can be easily downloaded from here: download public key

Edit the /opt/glite/etc/vomses/bio-voms.cnaf.infn.it file as follow:
"bio" "voms.cnaf.infn.it" "15007" "/C=IT/O=INFN/OU=Host/L=CNAF/CN=voms.cnaf.infn.it" "bio"

Add the following settings to /etc/profile in order to properly set up the users' environment variables.

source /etc/glite/profile.d/glite_setenv.sh
PATH=$PATH:/opt/glite/externals/myproxy-1.14/bin:/opt/lcg/bin:/opt/lcg/sbin:/opt/alice/root/3.10.02/bin
LD_LIBRARY_PATH=$LD_LIBRARY_PATH:/opt/glite/externals/myproxy-1.14/lib:/opt/lcg/lib

export PATH USER LOGNAME MAIL HOSTNAME HISTSIZE INPUTRC LD_LIBRARY_PATH

/etc/profile.d
To assure the correct functionality of the User Interface it is necessary to copy the two files listed below
under /etc/profile.d/ folder.

------ /etc/profile.d/lfc.sh - BEGIN ----------
export LCG_CATALOG_TYPE=lfc
export LFC_HOST=lfsserver.cnaf.infn.it
export LCG_GFAL_INFOSYS=egee-bdii.cnaf.infn.it:2170
export LCG_LOCATION=/opt/lcg
export LCG_TMP=/opt/lcg/tmp
------ /etc/profile.d/lfc.sh - END   ----------

------ /etc/profile.d/lfc.csh - BEGIN ----------
setenv LCG_CATALOG_TYPE lfc
setenv LFC_HOST lfsserver.cnaf.infn.it
setenv LCG_GFAL_INFOSYS egee-bdii.cnaf.infn.it:2170
setenv LCG_LOCATION /opt/lcg
setenv LCG_TMP /opt/lcg/tmp
------ /etc/profile.d/lfc.csh - END   ----------