[DESY Home] [DESY IT Home] [DESY IT Physics Computing] [Grid Computing at DESY] [DESY Computing Seminar] [Imprint]
Grid Computing at DESY DESY
[Home] [Monitor] [Grid@DESY] [Certs & VOs] [VOMS] [User Guide] [FAQ] [Install Guides] [Admin Guide] [Talks & Conferences] [Glossary] [Documentation] [Links]

In order to ensure response in case of problems, use the Global Grid User Support GGUS and/or your VO support rather than private e-mail contacts or internal mailing lists.

How to Install a Local gLite UI.

We summarize here the steps to install and use an LCG User Interface (UI).

Please keep in mind: A Virtual Organization (VO) is a dynamic collection of individuals, institutions, and resources, which is defined by certain sharing rules. In practice, this means that computing cycles and data are by definition accessible within a VO by its members (only).

The tar-ball can be installed on Scientific Linux 3 as rolled out at DESY without major modification to the original FermiLab version.

Documentation

  • gLite 3.0
  • gLite 3.0 updates
  • How to install the TAR_UI

  • Index of /grid-deployment/download/relocatable

  • http://grid.desy.de
  • http://grid.desy.de/certs
  • http://grid.desy.de/voms

    Getting a certificate

    User certificates are issued by the national Certification Authorities (CA). The Globus Security Infrastructure (GSI) assumes your certificate as a public/private key pair. GSI is very picky about the permission settings. Allow reading of the userkey.pem for the user only: 

      ls -l $HOME/.globus/
-rw-r--r--    .globus/usercert.pem
-rw-------    .globus/userkey.pem

    Becoming a member of a VO

    VOs hosted by DESY are managed via the Virtual Organization Membership Service VOMS at https://grid-voms.desy.de:8443/vomses/. You will need to load your certificate into your browser to register for a VO.

    In order to create a loadable certificate type (Refer also to Loading Certificates into Browser): 

      openssl pkcs12 -export -out my_cert.p12 -inkey userkey.pem -in usercert.pem

    Sources

    UI tar-balls 

      wget http://grid-deployment.web.cern.ch/grid-deployment/download/relocatable/gliteUI_WN-2007-06-20.tar.gz
  wget http://grid-deployment.web.cern.ch/grid-deployment/download/relocatable/gliteUI_WN-userdeps-2007-06-20.tar.gz

    Installation

    Preparation: (the example root directory was arbitrarily chosen!) 

      export INSTALL_ROOT=/afs/desy.de/group/grid/UI/GLITE-3_0.2007-06-20

    Configuration: (adjust entries for your needs) 

      vi user.conf

  vi group.conf

  vi $INSTALL_ROOT/site-info.def
#
# site config file
#

# the dir where your software is installed (CHANGE if necessary)
INSTALL_ROOT=/afs/desy.de/group/grid/UI/GLITE-3_0.2007-06-20

# output storage dir
OUTPUT_STORAGE="/tmp"

# java (CHANGE if necessary)
JAVA_LOCATION="/opt/products/java/1.5.0"

# the entry points to the DESY Grid infrastructure (do NOT change)
RB_HOST="grid-rb.desy.de"
WMS_HOST="grid-wms.desy.de"
BDII_HOST="grid-bdii.desy.de"
PX_HOST="grid-pxy.desy.de"
MON_HOST="grid-rgma.desy.de"
REG_HOST=lcgic01.gridpp.rl.ac.uk

USERS_CONF=$INSTALL_ROOT/users.conf
GROUPS_CONF=$INSTALL_ROOT/groups.conf

SITE_EMAIL=Andreas.Gellrich@desy.de

CA_REPOSITORY="rpm http://linuxsoft.cern.ch/ LCG-CAs/current production"

QUEUES="atlas calice cms dech desy dgtest dteam geant4 ghep hermes hone icecube ilc ildg ops zeus"
ATLAS_GROUP_ENABLE="atlas"
CALICE_GROUP_ENABLE="calice"
CMS_GROUP_ENABLE="cms"
DECH_GROUP_ENABLE="dech"
DESY_GROUP_ENABLE="desy"
DGTEST_GROUP_ENABLE="dgtest"
DTEAM_GROUP_ENABLE="dteam"
GEANT4_GROUP_ENABLE="geant4"
GHEP_GROUP_ENABLE="ghep"
HERMES_GROUP_ENABLE="hermes"
HONE_GROUP_ENABLE="hone"
ICECUBE_GROUP_ENABLE="icecube"
ILC_GROUP_ENABLE="ilc"
ILDG_GROUP_ENABLE="ildg"
OPS_GROUP_ENABLE="ops"
ZEUS_GROUP_ENABLE="zeus"

# the space seperated list of VOs you want to support (CHANGE if necessary)
VOS="atlas cms calice hermes hone icecube ilc ildg zeus dteam ops dech dgtest ghep desy"

VO_ATLAS_DEFAULT_SE=grid-se3.desy.de
VO_ATLAS_VOMSES="'atlas lcg-voms.cern.ch 15001 /DC=ch/DC=cern/OU=computers/CN=lcg-voms.cern.ch atlas' 'atlas voms.cern.ch 15001 /DC=ch/DC=cern/OU=computers/CN=voms.cern.ch atlas'"

VO_CALICE_DEFAULT_SE=srm-dcache.desy.de
VO_CALICE_VOMSES="'calice grid-voms.desy.de 15102 /O=GermanGrid/OU=DESY/CN=host/grid-voms.desy.de calice'"

VO_CMS_DEFAULT_SE=grid-se3.desy.de
VO_CMS_VOMSES="'cms lcg-voms.cern.ch 15002 /DC=ch/DC=cern/OU=computers/CN=lcg-voms.cern.ch cms' 'cms voms.cern.ch 15002 /DC=ch/DC=cern/OU=computers/CN=voms.cern.ch cms'"

VO_DECH_DEFAULT_SE=grid-se3.desy.de
VO_DECH_VOMSES="'dech glite-io.scai.fraunhofer.de 15000 /O=GermanGrid/OU=Fraunhofer SCAI/CN=host/glite-io.scai.fraunhofer.de dech'"

VO_DESY_DEFAULT_SE=grid-se3.desy.de
VO_DESY_VOMSES="'desy grid-voms.desy.de 15104 /O=GermanGrid/OU=DESY/CN=host/grid-voms.desy.de desy'"

VO_DGTEST_DEFAULT_SE=grid-se3.desy.de
VO_DGTEST_VOMSES="'dgtest dgrid-voms.fzk.de 15000 /O=GermanGrid/OU=FZK/CN=host/dgrid-voms.fzk.de dgtest'"

VO_DTEAM_DEFAULT_SE=grid-se3.desy.de
VO_DTEAM_VOMSES="'dteam lcg-voms.cern.ch 15004 /DC=ch/DC=cern/OU=computers/CN=lcg-voms.cern.ch dteam' 'dteam voms.cern.ch 15004 /DC=ch/DC=cern/OU=computers/CN=voms.cern.ch dteam'"

VO_GHEP_DEFAULT_SE=grid-se3.desy.de
VO_GHEP_VOMSES="'ghep grid-voms.desy.de 15105 /O=GermanGrid/OU=DESY/CN=host/grid-voms.desy.de ghep'"

VO_GEANT4_DEFAULT_SE=grid-se3.desy.de
VO_GEANT4_VOMSES="'geant4 lcg-voms.cern.ch 15007 /DC=ch/DC=cern/OU=computers/CN=lcg-voms.cern.ch geant4' 'geant4 voms.cern.ch 15007 /DC=ch/DC=cern/OU=computers/CN=voms.cern.ch geant4'"

VO_HERMES_DEFAULT_SE=grid-se3.desy.de
VO_HERMES_VOMSES="'hermes grid-voms.desy.de 15108 /O=GermanGrid/OU=DESY/CN=host/grid-voms.desy.de hermes'"

VO_HONE_DEFAULT_SE=grid-se3.desy.de
VO_HONE_VOMSES="'hone grid-voms.desy.de 15106 /O=GermanGrid/OU=DESY/CN=host/grid-voms.desy.de hone'"

VO_ICECUBE_DEFAULT_SE=grid-se3.desy.de
VO_ICECUBE_VOMSES="'icecube grid-voms.desy.de 15109 /O=GermanGrid/OU=DESY/CN=host/grid-voms.desy.de icecube'"

VO_ILC_DEFAULT_SE=srm-dcache.desy.de
VO_ILC_VOMSES="'ilc grid-voms.desy.de 15110 /O=GermanGrid/OU=DESY/CN=host/grid-voms.desy.de ilc'"

VO_ILDG_DEFAULT_SE=grid-se3.desy.de
VO_ILDG_VOMSES="'ildg grid-voms.desy.de 15111 /O=GermanGrid/OU=DESY/CN=host/grid-voms.desy.de ildg'"

VO_OPS_DEFAULT_SE=grid-se3.desy.de
VO_OPS_VOMSES="'ops lcg-voms.cern.ch 15009 /DC=ch/DC=cern/OU=computers/CN=lcg-voms.cern.ch ops' 'ops voms.cern.ch 15009 /DC=ch/DC=cern/OU=computers/CN=voms.cern.ch ops'"

VO_ZEUS_DEFAULT_SE=grid-se3.desy.de
VO_ZEUS_VOMSES="'zeus grid-voms.desy.de 15112 /O=GermanGrid/OU=DESY/CN=host/grid-voms.desy.de zeus'"

    Installation: (< 1GB) 

      cd /tmp
  wget ...
  wget ...

  cd $INSTALL_ROOT
  tar zxvf /tmp/_UI_

  cd $INSTALL_ROOT
  tar zxvf /tmp/_UI_userdeps_

  #vi ./glite/yaim/functions/install_certs_userland
#CA_WGET="http://linuxsoft.cern.ch/LCG-CAs/current/RPMS.production"

  $INSTALL_ROOT/glite/yaim/scripts/configure_node ./site-info.def TAR_UI

  cd $INSTALL_ROOT
  ./glite/yaim/bin/yaim -c -s ./site-info.def -n TAR_UI

    More configurations: 

      cd $INSTALL_ROOT/etc

  \rm -r grid-security
  #ln -s /afs/desy.de/group/grid/www/html/etc/grid-security .

  cd $INSTALL_ROOT/glite/etc
  \rm -r grid-security
   #ln -s /afs/desy.de/group/grid/www/html/etc/grid-security .
  \rm vomses
  #ln -s /afs/desy.de/group/grid/www/html/etc/vomses .

  crontab -e

  vi $INSTALL_ROOT/etc/profile.d/glite_setenv.csh
...
#
# DESY
#
setenv GRID_SECURITY_DIR /afs/desy.de/group/grid/www/html/etc/grid-security

setenv X509_CERT_DIR ${GRID_SECURITY_DIR}/certificates
setenv X509_VOMS_DIR ${GRID_SECURITY_DIR}/vomsdir
setenv X509_USER_PROXY ${HOME}/k5-ca-proxy.pem
setenv VOMS_USERCONF /afs/desy.de/group/grid/www/html/etc/vomses/vomses

setenv MYPROXY_SERVER grid-pxy.desy.de
setenv MYPROXY_SERVER_DN "/O=GermanGrid/OU=DESY/CN=host/grid-pxy.desy.de"

setenv PERLLIB ${PERLLIB}:${INSTALL_ROOT}/glite/lib/perl5/vendor_perl/5.8.0


  vi $INSTALL_ROOT/etc/profile.d/glite_setenv.sh
...
#
# DESY
#
export GRID_SECURITY_DIR=/afs/desy.de/group/grid/www/html/etc/grid-security

export X509_CERT_DIR=${GRID_SECURITY_DIR}/certificates
export X509_VOMS_DIR=${GRID_SECURITY_DIR}/vomsdir
export X509_USER_PROXY=${HOME}/k5-ca-proxy.pem
export VOMS_USERCONF=/afs/desy.de/group/grid/www/html/etc/vomses/vomses

export MYPROXY_SERVER=grid-pxy.desy.de
export MYPROXY_SERVER_DN="/O=GermanGrid/OU=DESY/CN=host/grid-pxy.desy.de"

export PERLLIB=$PERLLIB:$INSTALL_ROOT/glite/lib/perl5/vendor_perl/5.8.0

    Setting up the environment: (depends on your favorite shell in use) 

      source $INSTALL_ROOT/etc/profile.d/grid_env.csh
  source $INSTALL_ROOT/etc/profile.d/grid_env.sh

    More environment: 

      #cd $GLITE_LOCATION/etc
  #grep "/tmp" *

  \cp ./GLITE/edg/etc/atlas/edg_wl_ui.conf ./GLITE-3_0.2007-06-20/edg/etc/atlas/.
  \cp ./GLITE/edg/etc/calice/edg_wl_ui.conf ./GLITE-3_0.2007-06-20/edg/etc/calice/.
  \cp ./GLITE/edg/etc/cms/edg_wl_ui.conf ./GLITE-3_0.2007-06-20/edg/etc/cms/.
  \cp ./GLITE/edg/etc/dech/edg_wl_ui.conf ./GLITE-3_0.2007-06-20/edg/etc/dech/.
  \cp ./GLITE/edg/etc/desy/edg_wl_ui.conf ./GLITE-3_0.2007-06-20/edg/etc/desy/.
  \cp ./GLITE/edg/etc/dgtest/edg_wl_ui.conf ./GLITE-3_0.2007-06-20/edg/etc/dgtest/.
  \cp ./GLITE/edg/etc/dteam/edg_wl_ui.conf ./GLITE-3_0.2007-06-20/edg/etc/dteam/.
  \cp ./GLITE/edg/etc/geant4/edg_wl_ui.conf ./GLITE-3_0.2007-06-20/edg/etc/geant4/.
  \cp ./GLITE/edg/etc/ghep/edg_wl_ui.conf ./GLITE-3_0.2007-06-20/edg/etc/ghep/.
  \cp ./GLITE/edg/etc/hermes/edg_wl_ui.conf ./GLITE-3_0.2007-06-20/edg/etc/hermes/.
  \cp ./GLITE/edg/etc/hone/edg_wl_ui.conf ./GLITE-3_0.2007-06-20/edg/etc/hone/.
  \cp ./GLITE/edg/etc/icecube/edg_wl_ui.conf ./GLITE-3_0.2007-06-20/edg/etc/icecube/.
  \cp ./GLITE/edg/etc/ilc/edg_wl_ui.conf ./GLITE-3_0.2007-06-20/edg/etc/ilc/.
  \cp ./GLITE/edg/etc/ildg/edg_wl_ui.conf ./GLITE-3_0.2007-06-20/edg/etc/ildg/.
  \cp ./GLITE/edg/etc/ops/edg_wl_ui.conf ./GLITE-3_0.2007-06-20/edg/etc/ops/.
  \cp ./GLITE/edg/etc/zeus/edg_wl_ui.conf ./GLITE-3_0.2007-06-20/edg/etc/zeus/.

    [top]

    Last modified: Tue Jul 5 17:03:47 MEST 2005
    by the DESY Grid Team: http://grid.desy.de/