Globus Toolkit 4'0'2 Installation Report

1
Globus Toolkit 4.0.2Installation Report

• Leordeanu Catalin catalin.leordeanu_at_gmail.com
• Simion Bogdan bogdansimion_at_gmail.com
• Nistor Adrian adrian.nistor_at_yahoo.com

2
Agenda

• Globus Toolkit
• Installation Prerequisites
• Testbed description
• Prerequisites
• Installing Globus Toolkit 4.0.2
• Creating user accounts
• Installation process
• Obtaining certificates
• Testing procedure
• GridFTP
• Submitting a job
• Future Work

3
Globus Toolkit 4

• The Globus Toolkit is an open source software
  toolkit used for building Grid systems and
  applications.
• The toolkit includes software for security,
  information infrastructure, resource management,
  data management, communication, fault detection,
  and portability.
• It is packaged as a set of components that can be
  used either independently or together to develop
  applications

4
Globus Toolkit 4
5
Testbed description
6
Prerequisites

• Required
• Java SDK 1.4.2 or newer
• Ant 1.6 or newer
• C compiler
• GNU Make
• GNU tar
• JDBC Compliant database (PostgreSQL or MySQL, as
  example)
• Optional
• Tomcat

7
Installing Globus Toolkit 4.0.2

• Creating user accounts
• useradd globus
• passwd globus globus
• useradd student
• passwd student student

8
Installing Globus Toolkit 4.0.2

• Creating install directory
• mkdir /opt/globus
• chown globus /opt/globus
• Change the default Java installation
  using the alternatives command
• root /usr/sbin/alternatives --install
  /usr/bin/java java /usr/java/j2sdk1.4.2_08/bin/jav
  a 2
• root /usr/sbin/alternatives --config java
• There are 2 programs which provide 'java'.
• Selection Command
• -----------------------------------------------
• 1 /usr/lib/jvm/jre-1.4.2-gcj/bin/java
  
• 2 /usr/java/j2sdk1.4.2_08/bin/java
• Enter to keep the current selection, or type
  selection number

9
Installing Globus Toolkit 4.0.2

• As the globus user, run
• globus export GLOBUS_LOCATION/opt/globus
• globus ./configure --prefixGLOBUS_LOCATION
• globus make
• globus make install
• export LD_LIBRARY_PATHGLOBUS_LOCATION/lib
• export PATHPATHGLOBUS_LOCATION/bin
• export PATHPATH GLOBUS_LOCATION/sbin
• Change the security context for the shared
  libraries
• chcon -t texrel_shlib_t GLOBUS_LOCATION/lib/
  .so

10
Obtaining certificates

• Run the setup script
• GLOBUS_LOCATION/setup/globus/setup-simple-ca
• Run the following as root (or, if no root
  privileges are available, add the -nonroot option
  to the command line)
• GLOBUS_LOCATION/setup/globus_simple_ca_CA_Hash_se
  tup/setup-gsi default
• Next you will need to request a host certificate.
  As root, run
• grid-cert-request -host 'hostname'

11
Obtaining certificates

• The next step is to sign the host certificate.
• 1. As globus, run
• grid-ca-sign -in hostcert_request.pem -out
  hostsigned.pem
• 2. A signed host certificate, named
  hostsigned.pem, is written to the current
  directory.
• 3. When prompted for a passphrase enter the one
  you specified in the previous section (for the
  private key of the CA certificate).
• 4. As root move the signed host certificate to
  /etc/grid-security/hostcert.pem.

12
Obtaining certificates

• As your normal user account (not globus), run
• grid-cert-request
• After you enter a passphrase, this creates
• USER/.globus/usercert.pem (empty)
• USER/.globus/userkey.pem
• USER/.globus/usercert_request.pem
• Test the user certificate using
• student_at_localhost grid-proxy-init -debug
  -verify

13
Grid-mapfile

• Create /etc/grid-security/grid-mapfile as root
• cd /etc/grid-security
• vi grid-mapfile
• Run grid-cert-info to get your subject name, and
  whoami to get the account name (as student)
• student_at_localhost grid-cert-info -subject
• /OGrid/OUGlobusTest/OUsimpleCA-localhost.locald
  omain/OUlocaldomain/CNstudent
• student_at_localhost whoami
• Student
• The corresponding line in the grid-mapfile
• "/OGrid/OUGlobusTest/OUsimpleCA-localhost.local
  domain/OUlocaldomain/CNstudent" student

14
Configure SimpleCA for multiple machines

• A CA setup package was created in
  globus/simpleCA/globus_simple_ca_HASH_setup-0.17.t
  ar.gz.
• If you want to use your certificates on another
  machine, you must install that CA setup package
  on that machine.
• To install it, copy that package to the second
  machine and run
• GLOBUS_LOCATION/sbin/gpt-build
  globus_simple_ca_HASH_setup-0.17.tar.gz gcc32dbg
• GLOBUS_LOCATION/sbin/gpt-postinstall
• Then you will have to perform setup-gsi -default.
• If you are going to run services on the second
  host, it will need its own host certificate and
  grid-mapfile

15
Testing GridFTP

• Start a GridFTP server on a machine
• root_at_localhost /opt/globus/sbin/globus-gridft
  p-serverServer listening at localhost.localdomain
  32771
• On another machine running the following command
  will transfer the file file from the machine
  running the server.
• student_at_localhost globus-url-copy -vb -dbg
  -stripe gsiftp//10.38.227.10032771/home/student/
  file file///home/student/file

16
Testing the pre-WS gatekeeper

• Start the pre-WS globus gatekeeper with following
  command, as root
• root_at_localhost globus-gatekeeper -conf
  GLOBUS_LOCATION/etc/globus-gatekeeper.conf
• GRAM contact localhost.localdomain33302/OGrid/
  OUGlobusTest/OUsimpleCA-localhost.localdomain/OU
  localdomain/CNstudent
• student_at_localhost globus-job-run
• localhost.localdomain33302/OGrid/OUGlobusTest
  /OUsimpleCA-localhost.localdomain/OUlocaldomain/
  CNstudent /bin/hostname

17
Testing the pre-WS gatekeeper

• You can also use the globus-job-submit command
• student_at_localhost globus-job-submit
  "localhost.localdomain33305/OGrid/OUGlobusTest
  /OUsimpleCA-localhost.localdomain/OUlocaldomain/
  CNstudent" /bin/hostname
• https//localhost.localdomain33327/7279/115460188
  6/
• student_at_localhost globus-job-status
  https//localhost.localdomain33315/6750/115460180
  8/
• DONE
• student_at_localhost globus-job-get-output -r
  "localhost.localdomain33305/OGrid/OUGlobusTest
  /OUsimpleCA-localhost.localdomain/OUlocaldomain/
  CNstudent" https//localhost.localdomain33315/6
  750/1154601808/

18
Bibliography

• GT4 Admin Guide http//www.globus.org/toolkit/doc
  s/4.0/admin/docbook/index.html
• Globus Toolkit 4.0 installation
  http//faculty.washington.edu/chungsa/2005/spring/
  tcss568/discussions/
• GT 3.9.4 WS GRAM User's Guide http//www.globus.o
  rg/toolkit/docs/development/3.9.4/execution/wsgram
  /user/
• 4. Globus Toolkit 4 Early Access WSRF
• http//www-128.ibm.com/developerworks/grid/librar
  y/gr-gt4early/

19
Future work

• Implementing a Web Service for scheduling

20
Questions

• ?