Installing a gLite User Interface

How to install a gLite User Interface on the SL3 and Debian platforms.

Information

In addition to this document, the following documentation, "How to install a TAR UI", may also be helpful:

https://uimon.cern.ch/twiki/bin/view/LCG/TarUIInstall

The minimum disk space required to install a UI is 850 MB.

gLite User Interface Installation

A directory needs to be created for the installation of the gLite UI middleware. This directory will be referred to as <INSTALL_ROOT>. In what follows, <INSTALL_ROOT> is to be substituted with the appropriate directory that was created.

$ mkdir <INSTALL_ROOT>

In order to install a gLite UI, you need first to have YAIM installed on your system. In order to check if YAIM is installed, please issue the following command:

$ rpm -qa | grep yaim

If the output of the previous command is a null string, then you need to install YAIM. Here, the installation instructions to install YAIM in user space (i.e. no root privileges) are provided.

The latest release of YAIM can be checked on the following page:

http://www.cern.ch/grid-deployment/gis/yaim/.

wget is used to get the latest release:

$ cd <INSTALL_ROOT>
$ wget http://www.cern.ch/grid-deployment/gis/yaim/glite-yaim-x.x.x-x.noarch.rpm

The rpm file needs to be converted into a cpio archive. It is locally unpacked and the rpm and the cpio are subsequently removed as follows:

$ cd <INSTALL_ROOT>
$ rpm2cpio glite-yaim-x.x.x-x.noarch.rpm > glite-yaim-x.x.x-x.noarch.cpio
$ cpio -id --verbose --no-absolute-filenames < glite-yaim-x.x.x-x.noarch.cpio
$ rm glite-yaim-x.x.x-x.noarch.rpm glite-yaim-x.x.x-x.noarch.cpio
$ cd opt; mv glite ..; cd <INSTALL_ROOT>; rm -fr opt

where x.x.x-x is the latest YAIM release. YAIM will be installed in <INSTALL_ROOT>/glite.

Files belonging to the user's VO hosts must be identified. In particular, the MyProxy server host, the WMS, the BDII, the R-GMA MonBox, the Registry, and the LFC. For LHC experiments this info is found on the EIS experiments pages:

The MyProxy server to use is:

myproxy.cern.ch

In the directory <INSTALL_ROOT> the file site-info.def needs to be created with the following content:

#
# This is the site-info.def file for my gLite User Interface
#
INSTALL_ROOT=<INSTALL_ROOT>
#
PX_HOST=myproxy.cern.ch
WMS_HOST=my-wms.cern.ch
BDII_HOST=lxb2017.cern.ch
MON_HOST=my-mon.cern.ch
REG_HOST=my-reg.cern.ch
VOS="cms dteam"
#
USERS_CONF=$INSTALL_ROOT/glite/yaim/examples/users.conf
SITE_EMAIL=devnull@freesurf.ch
#
VO_CMS_VOMS_SERVERS="'vomss://lcg-voms.cern.ch:8443/voms/cms?/cms/' 'vomss://voms.cern.ch:8443/voms/cms?/cms/'"
      VO_CMS_VOMSES="'cms lcg-voms.cern.ch 15002 /C=CH/O=CERN/OU=GRID/CN=host/lcg-voms.cern.ch cms'\
      'cms voms.cern.ch 15002 /C=CH/O=CERN/OU=GRID/CN=host/voms.cern.ch cms'"

      VO_DTEAM_VOMS_SERVERS="'vomss://lcg-voms.cern.ch:8443/voms/dteam?/dteam/' 'vomss://voms.cern.ch:8443/voms/dteam?/dteam/'"
      VO_DTEAM_VOMSES="'dteam lcg-voms.cern.ch 15004 /C=CH/O=CERN/OU=GRID/CN=host/lcg-voms.cern.ch dteam'\
      'dteam voms.cern.ch 15004 /C=CH/O=CERN/OU=GRID/CN=host/voms.cern.ch dteam'"
#

If any other VO is to be used, the example file needs to be consulted at: <INSTALL_ROOT>/opt/glite/aim/examples/site-info.def. The info is in the variable VO_<MYVO>_VOMS_SERVERS. If the user has a private Java installation and/or a specific DPM or LFC server host needs to be specified, the following definitions may be added to site-info.def:

JAVA_LOCATION=/home/my/java
DPM_HOST=my-dpm.cern.ch
LFC_HOST=my-lfc.cern.ch

where /home/my/java, my-dpm.cern.ch and my-lfc.cern.ch should be changed with your values.

The latest relocatable middleware and the dependency file can be downloaded from

http://grid-deployment.web.cern.ch/grid-deployment/download/relocatable/

and installed in <INSTALL_ROOT>:

$ cd <INSTALL_ROOT>
$ wget http://grid-deployment.web.cern.ch/grid-deployment/download/relocatable/glite-UI_WN-userdeps-x.x.x.tar.gz
$ wget http://grid-deployment.web.cern.ch/grid-deployment/download/relocatable/glite-UI_WN-x.x.x.tar.gz
$ tar -zxvf glite-UI_WN-userdeps-x.x.x.tar.gz
$ tar -zxvf glite-UI_WN-x.x.x.tar.gz
$ rm glite-*.tar.gz

The gLite UI is configured as follows:

$ cd <INSTALL_ROOT>
$ ./glite/yaim/scripts/configure_node ./site-info.def TAR_UI

The procedure above installs the CA files and CRLs in the directory <INSTALL_ROOT>/etc/grid-security/certificates. It also installs a cron job to keep the CRLs up to date. However, it is up to the user to install newer versions of the CA files when they are announced. New versions of the CA files can be installed by executing the following command:

$ <INSTALL_ROOT>/glite/yaim/scripts/run_function site-info.def install_certs_userland

The user's certificates all need to be installed in the directory .globus under the user's home directory. Furthermore, a directory called vomses needs to be in the directory .glite under the user's home directory. If this is not the case, the following code needs to be executed:

% cd ~/.glite
% ln -s ../.edg/vomses .

Lastly, a proxy needs to be created:

% voms-proxy-init -voms <myVO>

Now the UI is ready for use.