NPACI All Hands Meeting

1
Tutorial Outline

• Part I Catherine Mills (SDSC)
• Portal and Grid Tools Overview
• Part II Kurt Mueller (SDSC)
• Grid Tools Installation
• Part III Maytal Dahan (TACC)
• Gridport Installation and API

2
What well cover

• Server and OS considerations
• Globus client install
• Myproxy client install
• Web server software
• SRB client install

3
What is Required?

• Modest hardware
• 512MB RAM, 1GB HD space, 500MHz
• Unix system
• Production portals currently running on Solaris
  7, in process of moving to linux
• At least perl 5.6
• Tutorial covers installing on linux
• Probably works on NT/2000/XP
• Perl not installed by default
• Greater OS overhead
• Greater security risks

4
Operating System

• Redhat Linux 7.3
• Choose server installation
• Dont install any unnecessary network services
  (ftp, telnet server, DNS)
• Do check redhats website immediately after
  installation and apply security patches or, use
  up2date
• Consider using iptables for firewall protection
  -- allow web ports 80 and 443, and ssh port 22

5
Globus 2.2 installation

• Download linux files from
• http//www.globus.org/gt2.2/download.html
• gpt-2.2.5-src.tar.gz
• All Client Linux - 2.x - i686 - GCC
• Create globus directory
• gt mkdir /usr/local/globus
• Set Globus environment variable
• GLOBUS_LOCATION/usr/local/globus
• For SRB, also set
• GLOBUS_INSTALL_PATH/usr/local/globus
• LD_LIBRARY_PATH/usr/local/globus/lib

6
Globus 2.2 Installation

• Install globus packaging toolkit
• gt tar xvfz gpt-2.2.5-src.tar.gz
• gt cd gpt-2.2.5-src
• gt ./build_gpt
• gt cd ..

7
Globus 2.2 Installation

• Install globus client tools
• gt /usr/local/globus/sbin/gpt-install
  globus-all-client-2.2.4-
• i686-pc-linux-gnu-bin.tar.gz
• gt source GLOBUS_LOCATION/etc/globus-user-env.csh
  
• gt /usr/local/globus/sbin/gpt- postinstall

8
Globus 2.2 Installation

• Configure /etc/grid-security directory
• gt /usr/local/globus/setup/globus/setup-gsi
• Verify your installation
• gt /usr/local/globus/sbin/gpt_verify

9
Certificate considerations

• Users must get certificates from a certificate
  authority that is trusted by portal and
  resources.
• Certificates can be stored in gridport, or
  accessed via myproxy
• http//www.ncsa.uiuc.edu/Divisions/ACES/MyProxy/
• Users must be in grid-mapfile on resources in
  order to access them.

10
Install MyProxy

• Get myproxy 1.3 from http//www.ncsa.uiuc.edu/Divi
  sions/ACES/MyProxy/download.html
• gt /usr/local/globus/sbin/gpt-install -verbose
  myproxy-1.3-i686-pc-linux-gnu-bin.tar.gz
• gt /usr/local/globus/sbin/gpt-postinstall

11
Install Apache server

• need Apache with SSL support
• Using apache 1.3.27
• Packages
• apache_1.3.27.tar.gz
• mod_ssl-2.8.12-1.3.27.tar.gz
• openssl-0.9.7a.tar.gz

12
Install Apache server

• gt tar xvfz apache-1.3.27.tar.gz
• gt tar xvfz mod_ssl-2.8.12-1.3.27.tar.gz
• gt tar xvfz openssl-0.9.7a.tar.gz
• gt cd apache-1.3.27
• gt ./configure --prefix/usr/local/apache

13
Install apache server

• gt cd ../openssl-0.9.7a
• gt sh config -fPIC
• gt make
• gt make test

14
Install apache server

• gt cd ../mod_ssl-2.8.12-1.3.27
• gt ./configure --with-apache../apache_1.3.27

15
Install apache server

• gt cd ../apache_1.3.27
• gt SSL_BASE../openssl-0.9.7a ./configure
• --enable-modulessl
• --prefix/usr/local/apache
• --enable-sharedssl
• --enable-ruleSHARED_CORE
• gt make
• gt make certificate
• gt make install

16
Configure apache

• Create a new user and group for the web server
• gt useradd gp_user
• gt groupadd gp_portals
• Edit the apache config file, changing web user
  and group to those you just created
• gt cd /usr/local/apache/conf
• gt vi httpd.conf
• User gp_user
• Group gp_portals

17
Start apache

• gt /usr/local/apache/bin/apachectl startssl

18
Install Perl modules

• Not included with base Redhat install, but
  necessary for GridPort Toolkit
• BundleExpect
• NetLDAP
• BundleTest (may not be necessary)
• gt perl -MCPAN -e install Bundleexpect
• gt perl -MCPAN -e install NetLDAP
• gt perl -MCPAN -e install BundleTest

19
Installing SRB

• Get latest SRB 2.x distribution from
  http//www.sdsc.edu/DICE/SRB/
• Follow the instructions to obtain a password to
  decrypt the downloaded package, then
• gt cd SRB_2.2.0
• gt ./configure

20
Installing SRB

• gt cd mk
• Edit mk.config
• Search for GSI_AUTH1, and uncomment it
• Set globus2LibDir to /usr/local/globus/lib
• Set sslLibDir to /usr/lib
• Set installDir to the parent of the directory you
  are currently in

21
Installing SRB

• If you havent already
• gt setenv GLOBUS_INSTALL_PATH /usr/local/globus
• gt setenv LD_LIBRARY_PATH /usr/local/globus/lib
• (but dont overwrite LD_LIBRARY_PATH if its
  already set -- append to it instead)

22
Installing SRB

• gt cd ..
• gt make clean
• gt make
• gt cd utilities/bin
• Copy all binary executables to a directory such
  as /usr/local/srb/bin, and remember where they
  are for Gridport installation

23
What next?

• You are ready to install the Gridport toolkit and
  create a portal!