Grid Interoperation Now (GIN)
Steps and info
With EGEE
- Contact
Erwin Laure (Erwin.Laure@cern.ch) for EGEE
resource allocation
- Human
resources and contacts
- Grid
systems
- Foreign
grid application users and technical support and EGEE technical support
exchange systems and application info and resolve any questions
- EGEE
gateway, system, software info. (A user guide url would be helpful
– this guide maybe different from internal user guide. Either add
contents to existing user guide, or to create a separate guide.)
- Application
requirements
- EGEE
VO administrator creates a VO and inform the foreign grid administrator
and user
- VO
name
- VO
server name and server certificate file
- EGEE
root CA certificate files
i. http://pragma-goc.rocksclusters.org/secure/certificates/16da7552.0
ii. http://pragma-goc.rocksclusters.org/secure/certificates/16da7552.signing_policy
- VO
registration and configuration URLs
- Vomses
file
- URLs
to adminstrators and users guide (This maybe different from the guides
for EGEE internal administrators and users. May need to create one for
GIN.)
- EGEE
VO administrator adds the foreign grid certificates in EGEE trust
database, if were not trusted already.
- Application
driver performs VO registration with a browser
- Import
EGEE root CA certificate file,
http://certificate.nikhef.nl/cgi-bin/nikhef-ms?cert, as a root level
certificate in the browser
- Import
the driver’s own root CA certificate file as a root level certificate in
the browser
- Import
the driver’s personal certificate file (normally can be found in
~/.globus/usercert.p12) as a personal certificate in the browser
- Point
the browser to the VO registration URL given in 3.d and register as a new
user
- Application
driver or his/her site administrator installs VOMS software on their own
system
- Download
a current version of VOMS software from http://glite.web.cern.ch/glite/packages/
- Install
VOMS (installation instructions are in the INSTALL file)
- Make
sure that the files given in 3.c are in your CA trust database
- Deposit
the vomses file given in 3.e in $VOMS_LOCATION/etc/vomses. The directory
and files should all be set to own by root:root and with permission 755
and 644 respectively
- Deposit
the server certificate file given in 3.b in /etc/grid-security/vomsdir.
The directory and files should all be set to own by root:root and with
permission 755 and 644 respectively
- Application
driver test access
- Make
sure that your personal certificate files are in ~/.globus directory
- Set
environmental variables for
i. VOMS_LOCATION,
point to VOMS installation directory
ii. VOMS_USERCONF,
point to the location of vomses files (see 6.d, or if user makes his/her own vomses
files somewhere)
iii. Add
$VOMS_LOCATION/bin in PATH
- Test
access to the VO server and resources by running
i. voms-proxy-init
–debug –voms {VO-name}
ii. voms-proxy-info
iii. voms-proxy-list
–voms {VO-name}