Creation of gate04.aglt2.org, the SL6 gatekeeper
Core dump style... Not bothering for now to make this pretty, just recording the actions taken
2 cd /etc/yum.repos.d
3 cat > rocks-local.repo
4 yum --enablerepo=rocks-6.1 install condor
5 yum --enablerepo=Rocks-6.1 install condor
6 rpm -qa|grep condor
7 cat ../yum.conf
8 yum --enablerepo=Rocks-6.1 gpgcheck=0 install condor
9 yum --help
10 yum --enablerepo=Rocks-6.1 nogpgcheck install condor
11 yum --enablerepo=Rocks-6.1 --nogpgcheck install condor
12 chkconfig --list|grep condor
13 grep ball /etc/passwd
14 grep ccar /etc/passwd
15 df -h
16 rpm -qa|grep cvmfs
17 grep enabled umatlas*
18 chkconfig --list|grep func
19 cat /var/cfengine/policy_path.dat
20 who
21 cf-agent -K
22 df -h
23 ll /etc/yum.repos.d
68 chkconfig --list|grep condor
69 service condor start
72 cd /etc/cron.d
73 ll
74 rm rsync-certificates.cron
75 ll /etc/grid-security
76 df -h
77 chkconfig --list|grep afs
78 service afs start
79 chkconfig afs on
80 less /etc/sysconfig/afs
81 df -h
82 grep -e apache -e condor -e gratia -e tomcat /etc/passwd
83 ll /etc/grid-security
84 ll /etc/grid-security/http
85 less /etc/sysconfig/iptables
86 rpm -qa|grep epel
87 yum install yum-priorities
88 vi /etc/yum.conf
89 rpm -Uvh http://repo.grid.iu.edu/osg-el6-release-latest.rpm
90 vi /etc/yum.repos.d/osg-el6.repo
91 yum install osg-ca-certs
92 yum --enablerepo=osg install osg-ca-certs
93 ll /etc/grid-security/
94 ls -alrt /etc/grid-security/certificates/|tail -10
95 chkconfig --list|grep osg
96 vi /etc/yum.repos.d/osg-el6.repo
97 yum --enablerepo=osg install osg-ce-condor
GO TO OSG_CE_NOW_INSTALLED
Dependencies Resolved
================================================================================
Package Arch Version Repository Size
================================================================================
Installing:
osg-ce-condor x86_64 3.0.0-30.osg.el6 osg 5.0 k
Installing for dependencies:
CGSI-gSOAP x86_64 1.3.4.2-3.osg.el6 osg 33 k
ant x86_64 1.7.1-13.el6 sl 2.5 M
antlr x86_64 2.7.7-6.5.el6 sl 633 k
apache-tomcat-apis noarch 0.1-1.el6 sl 163 k
apr-util-ldap x86_64 1.3.9-3.el6_0.1 sl 15 k
axis noarch 1.2.1-7.3.el6_3 sl 1.5 M
bcel x86_64 5.2-7.2.el6 sl 1.4 M
bestman2-client noarch 2.3.0-9.osg.el6 osg 32 k
bestman2-client-libs noarch 2.3.0-9.osg.el6 osg 868 k
bestman2-common-libs noarch 2.3.0-9.osg.el6 osg 1.6 M
bouncycastle noarch 1.46-1.el6 epel 2.3 M
bwctl-client x86_64 1.4-7.osg.el6 osg 81 k
cdparanoia-libs x86_64 10.2-5.1.el6 sl 47 k
classpathx-jaf x86_64 1.0-15.4.el6 sl 99 k
classpathx-mail noarch 1.1.1-9.4.el6 sl 478 k
cog-jglobus-axis noarch 1.8.0-2.osg.el6 osg 28 k
cups x86_64 1:1.4.2-50.el6_4.4 sl-security 2.3 M
dcache-srmclient noarch 1.9.5.23-6.osg.el6 osg 7.1 M
dcap x86_64 2.47.5-3.osg.el6 osg 23 k
dcap-libs x86_64 2.47.5-3.osg.el6 osg 78 k
dcap-tunnel-gsi x86_64 2.47.5-3.osg.el6 osg 13 k
ecj x86_64 1:3.4.2-6.el6 sl 2.8 M
edg-gridftp-client x86_64 1.2.9.2-3.osg.el6 osg 41 k
edg-mkgridmap noarch 4.0.0-5.osg.el6 osg 21 k
emi-trustmanager noarch 3.0.3-3.osg.el6 osg 248 k
emi-trustmanager-axis noarch 1.0.1-1.1.osg.el6 osg 26 k
fetch-crl noarch 3.0.8-1.el6 epel 45 k
foomatic x86_64 4.0.4-1.el6_1.1 sl 250 k
foomatic-db noarch 4.0-7.20091126.el6 sl 979 k
foomatic-db-filesystem noarch 4.0-7.20091126.el6 sl 3.4 k
foomatic-db-ppds noarch 4.0-7.20091126.el6 sl 19 M
geronimo-specs noarch 1.0-3.5.M2.el6 sl 110 k
geronimo-specs-compat noarch 1.0-3.5.M2.el6 sl 6.2 k
gfal x86_64 1.11.14-12.osg.el6 osg 552 k
ghostscript x86_64 8.70-14.el6_3.1 sl 4.4 M
ghostscript-fonts noarch 5.50-23.1.el6 sl 749 k
gip noarch 1.3.8-2.osg.el6 osg 295 k
glite-ce-monitor noarch 1.13.1-18.osg.el6 osg 13 M
glite-ce-osg-ce-plugin noarch 1.13.1-4.osg.el6 osg 19 k
glite-data-delegation-api-c x86_64 2.0.0.7-6.osg.el6 osg 32 k
glite-data-delegation-cli x86_64 2.0.1.3-6.osg.el6 osg 17 k
glite-data-util-c x86_64 1.2.3-4.osg.el6 osg 13 k
glite-fts-client x86_64 3.7.4-7.osg.el6 osg 240 k
glite-security-trustmanager x86_64 2.5.5-6.1.osg.el6 osg 54 k
glite-security-util-java x86_64 2.8.0-3.1.osg.el6 osg 251 k
glite-service-discovery-api-c x86_64 2.2.3-3.osg.el6 osg 12 k
globus-authz x86_64 2.1-4.osg.el6 osg 14 k
globus-authz-callout-error x86_64 2.1-4.osg.el6 osg 10 k
globus-callout x86_64 2.1-4.osg.el6 osg 16 k
globus-common x86_64 14.5-2.2.osg.el6 osg 113 k
globus-common-progs x86_64 14.5-2.2.osg.el6 osg 29 k
globus-ftp-client x86_64 7.2-4.osg.el6 osg 93 k
globus-ftp-control x86_64 4.2-6.osg.el6 osg 67 k
globus-gass-cache x86_64 8.1-4.osg.el6 osg 25 k
globus-gass-cache-program x86_64 5.0-5.osg.el6 osg 25 k
globus-gass-copy x86_64 8.2-4.osg.el6 osg 34 k
globus-gass-copy-progs x86_64 8.2-4.osg.el6 osg 35 k
globus-gass-server-ez x86_64 4.1-4.osg.el6 osg 15 k
globus-gass-transfer x86_64 7.1-4.osg.el6 osg 40 k
globus-gatekeeper x86_64 9.6-1.9.osg.el6 osg 42 k
globus-gfork x86_64 3.1-4.osg.el6 osg 18 k
globus-gram-client x86_64 12.3-3.osg.el6 osg 18 k
globus-gram-client-tools x86_64 10.0-7.osg.el6 osg 45 k
globus-gram-job-manager x86_64 13.45-1.3.osg.el6 osg 167 k
globus-gram-job-manager-callout-error
x86_64 2.1-4.osg.el6 osg 7.1 k
globus-gram-job-manager-condor noarch 1.0-13.4.osg.el6 osg 21 k
globus-gram-job-manager-fork x86_64 1.0-8.osg.el6 osg 11 k
globus-gram-job-manager-fork-setup-poll
noarch 1.0-8.osg.el6 osg 4.6 k
globus-gram-job-manager-scripts noarch 4.1-3.1.osg.el6 osg 24 k
globus-gram-protocol x86_64 11.2-3.1.osg.el6 osg 37 k
globus-gridftp-server x86_64 6.14-4.osg.el6 osg 157 k
globus-gridftp-server-control x86_64 2.3-1.1.osg.el6 osg 69 k
globus-gridftp-server-progs x86_64 6.14-4.osg.el6 osg 50 k
globus-gridmap-callout-error x86_64 1.2-2.osg.el6 osg 7.2 k
globus-gsi-callback x86_64 4.4-1.osg.el6 osg 37 k
globus-gsi-cert-utils x86_64 8.1-4.1.osg.el6 osg 18 k
globus-gsi-cert-utils-progs x86_64 8.1-4.1.osg.el6 osg 25 k
globus-gsi-credential x86_64 5.1-4.osg.el6 osg 32 k
globus-gsi-openssl-error x86_64 2.1-4.osg.el6 osg 15 k
globus-gsi-proxy-core x86_64 6.1-4.osg.el6 osg 32 k
globus-gsi-proxy-ssl x86_64 4.1-4.osg.el6 osg 16 k
globus-gsi-sysconfig x86_64 5.1-4.osg.el6 osg 27 k
globus-gss-assist x86_64 8.1-4.osg.el6 osg 31 k
globus-gssapi-error x86_64 4.1-4.osg.el6 osg 14 k
globus-gssapi-gsi x86_64 10.7-2.osg.el6 osg 56 k
globus-io x86_64 9.2-3.osg.el6 osg 39 k
globus-openssl-module x86_64 3.1-4.osg.el6 osg 15 k
globus-proxy-utils x86_64 5.0-5.osg.el6 osg 42 k
globus-rsl x86_64 9.1-4.osg.el6 osg 23 k
globus-scheduler-event-generator x86_64 4.4-1.osg.el6 osg 10 k
globus-usage x86_64 3.1-4.osg.el6 osg 16 k
globus-xio x86_64 3.2-4.1.osg.el6 osg 159 k
globus-xio-gsi-driver x86_64 2.1-4.osg.el6 osg 34 k
globus-xio-pipe-driver x86_64 2.1-4.osg.el6 osg 16 k
globus-xio-popen-driver x86_64 2.2-3.osg.el6 osg 20 k
gratia-probe-common noarch 1.13.3-1.osg.el6 osg 113 k
gratia-probe-condor noarch 1.13.3-1.osg.el6 osg 16 k
gratia-probe-gram noarch 1.13.3-1.osg.el6 osg 8.9 k
gratia-probe-gridftp-transfer noarch 1.13.3-1.osg.el6 osg 26 k
gridsite-libs x86_64 1.7.15-4.osg.el6.3 osg 38 k
gsi-openssh x86_64 5.6-1.1.osg.el6 osg 250 k
gsi-openssh-clients x86_64 5.6-1.1.osg.el6 osg 264 k
gsoap x86_64 2.7.16-3.el6 epel 198 k
gstreamer x86_64 0.10.29-1.el6 sl 763 k
gstreamer-plugins-base x86_64 0.10.29-2.el6 sl 939 k
gstreamer-tools x86_64 0.10.29-1.el6 sl 22 k
gums noarch 1.3.18.009-15.2.osg.el6
osg 23 M
gums-client noarch 1.3.18.009-15.2.osg.el6
osg 17 k
httpd x86_64 2.2.15-28.sl6 sl-security 820 k
httpd-tools x86_64 2.2.15-28.sl6 sl-security 72 k
iperf x86_64 2.0.5-3.el6 epel 52 k
iso-codes noarch 3.16-2.el6 sl 2.4 M
jakarta-commons-beanutils x86_64 1.7.0-12.5.el6 sl 327 k
jakarta-commons-cli x86_64 1.1-5.el6 epel 73 k
jakarta-commons-codec x86_64 1.3-11.7.el6 sl 95 k
jakarta-commons-collections noarch 3.2.1-3.4.el6 sl 522 k
jakarta-commons-daemon x86_64 1:1.0.1-8.9.el6 sl 44 k
jakarta-commons-dbcp noarch 1.2.1-13.8.el6 sl 115 k
jakarta-commons-digester noarch 1.7-10.6.el6 sl 175 k
jakarta-commons-discovery noarch 1:0.4-5.4.el6 sl 72 k
jakarta-commons-httpclient x86_64 1:3.1-0.7.el6_3 sl 586 k
jakarta-commons-lang noarch 2.4-1.1.el6 sl 251 k
jakarta-commons-logging noarch 1.0.4-10.el6 sl 51 k
jakarta-commons-pool x86_64 1.3-12.7.el6 sl 121 k
java-1.5.0-gcj x86_64 1.5.0.0-29.1.el6 sl6x 138 k
java-1.6.0-sun-compat x86_64 1:1.6.0.45-1.osg.el6 osg 60 k
java_cup x86_64 1:0.10k-5.el6 sl6x 196 k
jdk x86_64 2000:1.6.0_45-fcs.1.osg.el6
osg 49 M
jglobus noarch 2.0.5-3.osg.el6 osg 536 k
joda-time noarch 1.5.2-7.tzdata2008d.osg.el6
osg 438 k
jpackage-utils noarch 1.7.5-3.12.el6 sl 58 k
lcas-lcmaps-gt4-interface x86_64 0.2.6-1.1.osg.el6 osg 24 k
lcg-info noarch 1.12.2-1.osg.el6 osg 13 k
lcg-infosites noarch 3.1.0-1.osg.el6 osg 10 k
lcg-utils x86_64 1.11.14-12.osg.el6 osg 208 k
lcgdm-libs x86_64 1.8.1.2-6.osg.el6 osg 87 k
lcmaps x86_64 1.5.7-1.4.osg.el6 osg 80 k
lcmaps-plugins-basic x86_64 1.5.1-2.1.osg.el6 osg 39 k
lcmaps-plugins-gums-client x86_64 0.0.2-4.osg.el6 osg 3.3 k
lcmaps-plugins-saz-client x86_64 0.3.4-1.2.osg.el6 osg 36 k
lcmaps-plugins-scas-client x86_64 0.3.4-1.2.osg.el6 osg 38 k
lcmaps-plugins-verify-proxy x86_64 1.5.4-1.1.osg.el6 osg 32 k
lcms-libs x86_64 1.19-1.el6 sl 99 k
lfc x86_64 1.8.1.2-6.osg.el6 osg 64 k
lfc-libs x86_64 1.8.1.2-6.osg.el6 osg 38 k
lfc-python x86_64 1.8.1.2-6.osg.el6 osg 242 k
libart_lgpl x86_64 2.3.20-5.1.el6 sl 64 k
libgcj x86_64 4.4.7-3.el6 sl 19 M
libgudev1 x86_64 147-2.46.el6 sl 59 k
libmng x86_64 1.0.10-4.1.el6 sl 164 k
libogg x86_64 2:1.1.4-2.1.el6 sl 20 k
liboil x86_64 0.3.16-4.1.el6 sl 120 k
libtheora x86_64 1:1.1.0-2.el6 sl 128 k
libtool-ltdl x86_64 2.2.6-15.5.el6 sl 43 k
libvisual x86_64 0.4.0-9.1.el6 sl 134 k
libvorbis x86_64 1:1.2.3-4.el6_2.1 sl 167 k
libxslt x86_64 1.1.26-2.el6_3.1 sl 451 k
log4j x86_64 1.2.14-6.4.el6 sl 678 k
mesa-dri-drivers x86_64 9.0-0.8.el6_4.3 sl-security 4.1 M
mesa-dri-filesystem x86_64 9.0-0.8.el6_4.3 sl-security 44 k
mesa-dri1-drivers x86_64 7.11-8.el6 sl 3.8 M
mesa-libGL x86_64 9.0-0.8.el6_4.3 sl-security 161 k
mesa-libGLU x86_64 9.0-0.8.el6_4.3 sl-security 225 k
mx4j noarch 1:3.0.1-9.13.el6 sl 1.1 M
myproxy x86_64 5.5-3.1.osg.el6 osg 72 k
myproxy-libs x86_64 5.5-3.1.osg.el6 osg 107 k
mysql-connector-java noarch 1:5.1.17-6.el6 sl 1.4 M
ndt-client x86_64 3.6.5-2.osg.el6 osg 41 k
netlogger noarch 4.2.0-8.osg.el6 osg 550 k
openjpeg-libs x86_64 1.3-9.el6_3 sl 58 k
openldap-clients x86_64 2.4.23-31.el6 sl 164 k
osg-ce x86_64 3.0.0-30.osg.el6 osg 6.0 k
osg-cert-scripts noarch 2.7.2-1.osg.el6 osg 46 k
osg-cleanup noarch 1.7.1-1.osg.el6 osg 12 k
osg-client noarch 3.0.0-19.osg.el6 osg 4.3 k
osg-configure noarch 1.0.30-1.osg.el6 osg 117 k
osg-configure-ce noarch 1.0.30-1.osg.el6 osg 13 k
osg-configure-cemon noarch 1.0.30-1.osg.el6 osg 11 k
osg-configure-condor noarch 1.0.30-1.osg.el6 osg 11 k
osg-configure-gip noarch 1.0.30-1.osg.el6 osg 13 k
osg-configure-gratia noarch 1.0.30-1.osg.el6 osg 11 k
osg-configure-managedfork noarch 1.0.30-1.osg.el6 osg 11 k
osg-configure-misc noarch 1.0.30-1.osg.el6 osg 11 k
osg-configure-network noarch 1.0.30-1.osg.el6 osg 11 k
osg-configure-squid noarch 1.0.30-1.osg.el6 osg 10 k
osg-info-services noarch 0.10-2.osg.el6 osg 12 k
osg-site-verify noarch 3.0.0-1.osg.el6 osg 25 k
osg-site-web-page noarch 0.15-3.osg.el6 osg 18 k
osg-system-profiler noarch 1.0.11-2.osg.el6 osg 6.5 k
osg-version noarch 3.1.18-1.osg.el6 osg 4.3 k
osg-vo-map noarch 0.0.1-1.osg.el6 osg 7.6 k
osg-wn-client noarch 3.0.0-18.osg.el6 osg 5.6 k
owamp-client x86_64 3.2rc4-2.osg.el6 osg 132 k
pax x86_64 3.4-10.1.el6 sl 68 k
perl-Authen-SASL noarch 2.13-2.el6 sl 50 k
perl-CGI x86_64 3.51-130.el6_4 sl-security 207 k
perl-Convert-ASN1 noarch 0.22-1.el6 sl 42 k
perl-ExtUtils-MakeMaker x86_64 6.55-130.el6_4 sl-security 291 k
perl-ExtUtils-ParseXS x86_64 1:2.2003.0-130.el6_4 sl-security 43 k
perl-GSSAPI x86_64 0.26-6.el6 sl 63 k
perl-IO-Socket-SSL noarch 1.31-2.el6 sl 68 k
perl-LDAP noarch 1:0.40-1.el6 sl 353 k
perl-Net-LibIDN x86_64 0.12-3.el6 sl 34 k
perl-TermReadKey x86_64 2.30-13.el6 sl 30 k
perl-Test-Harness x86_64 3.17-130.el6_4 sl-security 229 k
perl-Test-Simple x86_64 0.92-130.el6_4 sl-security 110 k
perl-Text-Iconv x86_64 1.7-6.el6 sl 21 k
perl-TimeDate noarch 1:1.16-11.1.el6 sl 33 k
perl-XML-DOM noarch 1.44-7.el6 sl 135 k
perl-XML-Filter-BufferText noarch 1.01-8.el6 sl 8.5 k
perl-XML-RegExp noarch 0.03-7.el6 sl 8.8 k
perl-XML-SAX-Writer noarch 0.50-8.el6 sl 23 k
perl-devel x86_64 4:5.10.1-130.el6_4 sl-security 420 k
phonon-backend-gstreamer x86_64 1:4.6.2-26.el6_4 sl-security 126 k
poppler x86_64 0.12.4-3.el6_0.1 sl 556 k
poppler-data noarch 0.4.0-1.el6 sl 2.2 M
poppler-utils x86_64 0.12.4-3.el6_0.1 sl 72 k
portreserve x86_64 0.0.4-9.el6 sl 22 k
qt x86_64 1:4.6.2-26.el6_4 sl-security 3.9 M
qt-sqlite x86_64 1:4.6.2-26.el6_4 sl-security 50 k
qt-x11 x86_64 1:4.6.2-26.el6_4 sl-security 12 M
qt3 x86_64 3.3.8b-30.el6 sl 3.5 M
redhat-lsb x86_64 4.0-7.el6 sl 10 k
redhat-lsb-compat x86_64 4.0-7.el6 sl 9.3 k
redhat-lsb-core x86_64 4.0-7.el6 sl 24 k
redhat-lsb-graphics x86_64 4.0-7.el6 sl 12 k
redhat-lsb-printing x86_64 4.0-7.el6 sl 10 k
regexp x86_64 1.5-4.4.el6 sl 104 k
sinjdoc x86_64 0.5-9.1.el6 sl 704 k
slf4j noarch 1.5.8-8.el6 sl 130 k
tomcat6 noarch 6.0.24-55.el6_4 sl-security 88 k
tomcat6-el-2.1-api noarch 6.0.24-55.el6_4 sl-security 44 k
tomcat6-jsp-2.1-api noarch 6.0.24-55.el6_4 sl-security 81 k
tomcat6-lib noarch 6.0.24-55.el6_4 sl-security 2.8 M
tomcat6-servlet-2.5-api noarch 6.0.24-55.el6_4 sl-security 95 k
uberftp x86_64 2.6-4.osg.el6 osg 80 k
urw-fonts noarch 2.4-10.el6 sl 3.0 M
vo-client noarch 44-1.osg.el6 osg 19 k
vo-client-edgmkgridmap noarch 44-1.osg.el6 osg 6.4 k
voms x86_64 2.0.8-1.5.osg.el6 osg 145 k
voms-api-java noarch 2.0.8-1.4.osg.el6 osg 153 k
voms-clients x86_64 2.0.8-1.5.osg.el6 osg 113 k
wsdl4j noarch 1.5.2-7.8.el6 sl 156 k
xacml x86_64 1.1.1-1.2.osg.el6 osg 389 k
xalan-j2 noarch 2.7.0-9.8.el6 sl 1.8 M
xerces-j2 x86_64 2.7.1-12.6.el6_0 sl 2.9 M
xml-common noarch 0.6.3-32.el6 sl 8.4 k
xml-commons-apis x86_64 1.3.04-3.6.el6 sl 438 k
xml-commons-resolver x86_64 1.1-4.18.el6 sl 144 k
xorg-x11-font-utils x86_64 1:7.2-11.el6 sl 74 k
Transaction Summary
================================================================================
Install 251 Package(s)
Total download size: 221 M
Installed size: 533 M
===================== OSG_CE_NOW_INSTALLED ======================
99 yum --enablerepo=osg install globus-gram-job-manager-managedfork
Installing:
globus-gram-job-manager-managedfork noarch 0.2-1.osg.el6 osg 4.0 k
Transaction Summary
================================================================================
Install 1 Package(s)
Total download size: 4.0 k
Installed size: 157
100 yum --enablerepo=osg install osg-ca-certs-updater
Installing:
osg-ca-certs-updater noarch 0.5-1.osg.el6 osg 11 k
Transaction Summary
================================================================================
Install 1 Package(s)
Total download size: 11 k
Installed size: 19 k
Is this ok [y/N]: y
86 yum --enablerepo=osg install osg-ca-certs-updater
87 cat /etc/cron.d/osg-ca-certs-updater
88 service osg-ca-certs-updater-cron start
89 chkconfig osg-ca-certs-updater-cron on
Edit /etc/cron.d/fetch-crl, changing 42 */6 to 50 * for run time
94 chkconfig fetch-crl-cron on
95 service fetch-crl-cron start
[root@umrocksi ~]# pts createuser -name 194.14.231.37 -id 990030
User 194.14.231.37 has id 990030
[root@umrocksi ~]# pts createuser -name 10.10.2.37 -id 990031
User 10.10.2.37 has id 990031
[root@umrocksi ~]# pts delete -nameorid 194.14.231.37
[root@umrocksi ~]# pts createuser -name 192.41.231.37 -id 990030
User 192.41.231.37 has id 990030
[root@umrocksi ~]# pts adduser -user 192.41.231.37 -group usatlas:umtestbed
You have mail in /var/spool/mail/root
[root@umrocksi ~]# pts adduser -user 10.10.2.37 -group usatlas:umtestbed
[root@gate04 certificates]# ln -s DigiCertGridCA-1-Classic.crl_url 82c2b224.crl_url
[root@gate04 certificates]# ln -s DigiCertGridCA-1-Classic.info 82c2b224.info
[root@gate04 certificates]# ln -s DigiCertGridRootCA-Root.info 74a04bb6.info
[root@gate04 certificates]# ln -s DigiCertGridRootCA-Root.crl_url 74a04bb6.crl_url
in 30-gratia.ini, set
resource = AGLT2_SL6
Edit all /etc/osg/config.d/*.ini to be like gate01 except for this.
Add rsv and cndcron accounts to passwd and group files:
[gate01:config.d]# grep -e rsv -e cndr /etc/passwd
rsv:x:305:306:RSV monitoring:/var/rsv:/bin/sh
cndrcron:x:306:307:Condor-cron service:/var/lib/condor-cron:/sbin/nologin
[gate01:config.d]# grep -e rsv -e cndr /etc/group
rsv:x:306:
cndrcron:x:307:
[root@gate04 log]# yum --enablerepo=osg install rsv
================================================================================
Package Arch Version Repository
Size
================================================================================
Installing:
rsv noarch 3.7.7-1.osg.el6 osg 2.6 k
Installing for dependencies:
condor-cron noarch 1.0.8-1.osg.el6 osg 9.8 k
gratia-probe-metric noarch 1.13.3-1.osg.el6 osg 14 k
osg-configure-rsv noarch 1.0.30-1.osg.el6 osg 13 k
rsv-consumers noarch 3.7.7-1.osg.el6 osg 22 k
rsv-core noarch 3.7.7-1.osg.el6 osg 76 k
rsv-metrics noarch 3.7.7-2.osg.el6 osg 102 k
sharutils x86_64 4.7-6.1.el6 sl 186 k
Transaction Summary
================================================================================
Install 8 Package(s)
Total download size: 425 k
Installed size: 1.2 M
[root@umfs02 ~]# cd /data08/OSG
[root@umfs02 OSG]# mkdir APPSL6
[root@umfs02 OSG]# chmod 1777 APPSL6
[root@umfs02 OSG]# cd APPSL6
[root@umfs02 APPSL6]# mkdir etc
[root@umfs02 APPSL6]# chmod 777 etc
Copied in /var/rsv user directory, added crontab entry, and initialized the proxy.
NOTE: crond.cf must be modified to take more than dCache argument!
Set following cron intervals
/etc/rsv/metrics/org.osg.general.osg-version.conf
cron-interval = 1,21,41 * * * *
/etc/rsv/metrics/org.osg.srm.srmcp-readwrite.conf
cron-interval = 13,28,43,58 * * * *
/etc/rsv/metrics/org.osg.srm.srmclient-copy.conf (this one not needed)
cron-interval = 13,28,43,58 * * * *
osg-configure -c
[root@gate04 config.d]# chkconfig condor-cron on
[root@gate04 config.d]# chkconfig rsv on
[root@gate04 config.d]# touch /etc/grid-security/grid-mapfile
[root@gate04 config.d]# chkconfig gums-client-cron on
[root@gate04 config.d]# service gums-client-cron start
[root@gate04 config.d]# chkconfig globus-gatekeeper on
[root@gate04 config.d]# service globus-gatekeeper start
[root@gate04 config.d]# chkconfig gratia-probes-cron on
[root@gate04 config.d]# chkconfig osg-cleanup-cron on
[root@gate04 config.d]# service gratia-probes-cron start
[root@gate04 config.d]# service osg-cleanup-cron start
DID NOT DO THIS /sbin/service globus-gridftp-server start
[root@gate04 config.d]# chkconfig tomcat6 on
[root@gate04 config.d]# service tomcat6 start
DOES THIS MEAN HTTP SHOULD NOT BE RUNNING? SEEMS OK
[gate01:grid-security]# service condor-cron start
[gate01:grid-security]# service rsv start
[root@gate04 config.d]# rsv-control --run --all-enabled
Edit /etc/rsv/rsv.conf to change condor-G to False, and set timeout 720
980 time globusrun -a -r gate01.aglt2.org
981 time globusrun -a -r gate04.aglt2.org
982 time globus-job-run gate04.aglt2.org:2119/jobmanager-condor /bin/hostname
983 time globus-job-run gate04.aglt2.org:2119/jobmanager-fork /bin/hostname
Edited all changes into condor.pm and note that it worked to bl-11-1
[root@gate04 httpd]# chkconfig httpd on
rebooted for clean startup
[root@gate04 httpd]# chkconfig globus-gridftp-server on
/dev/sdb 4.4T 2.0T 2.4T 46% /data08
[root@umfs02 OSG]# du -s -x -h APP/atlas_app
965G APP/atlas_app
copying to APPSL6/atlas_app in umfs02 screen
Looking at differences between gate01 and gate04 /etc/osg/config.d content. New stuff has been added, mostly commented out. Specific setting changes are shown below. For anything else, take the gate01 settings and transfer them to gate04.
- 01-squid.ini
- 10-misc.ini
- cleanup_users_list = usatlas1 usatlas3 osg sbgrid hcc glow engage
- 10-storage.ini
- app_dir = /atlas/data08/OSG/APPSL6
- worker_node_temp = /tmp
- 15-managedfork.ini
- 20-condor.ini
- Take the default condor_location and condor_config
- job_contact = gate04.aglt2.org/jobmanager-condor
- util_contact = gate04.aglt2.org/jobmanager
- 30-cemon.ini
- 30-gip.ini
- gsiftp_host = gate04.aglt2.org
- Subcluster stuff. Just take as is
- version = 2.2.12 (under SE, the dcache version)
- 30-gratia.ini
- 30-rsv.ini
- ce_hosts = gate04.aglt2.org,gate02.grid.umich.edu
- ;gridftp_hosts = UNAVAILABLE
- 40-localsettings.ini
- ATLAS_LOCAL_AREA = /atlas/data08/OSG/APPSL6/atlas_app/local
- 40-network.ini
- 40-siteinfo.ini
- host_name = gate04.aglt2.org
- resource = AGLT2_SL6
- resource_group = AGLT2_SL6
On gate02, there is no 30-rsv.ini file
Things to check for transfer to gate04
- GUMS checks, ie, the following from the root crontab
- */10 * * * * /etc/grid-security/gums_servers.sh NOT YET RUNNING, MAY NEVER RUN
- 5 10 * * * /usr/bin/perl /root/clean_gram_tmp.pl > /tmp/clean_gram_tmp_pl.log
- */5 * * * * perl /opt/GUMS_test/gums_test.pl;perl /afs/atlas.umich.edu/OSG_certificates/gums_test/ch_gums_server.pl
- Monit conf files
Things to check for transfer to gate02
- stuff from root crontab
- 0 10 * * * /usr/bin/find /tmp -xdev -atime +3 -exec rm -f {} \; NOT TRANSFERRED
- 1 10 * * * /usr/bin/perl /root/tools/clean_gram_tmp.pl
- 20 * * * * /var/www/html/dcache/updatemonitorhtml.sh
- */5 * * * * /usr/bin/perl /root/spacetoken_stats/get_spacetokens_stats.pl
- Monit conf files
NOTE: The gums server from the 10-misc.ini in /etc/osg/config.d is written into /etc/gums/gums-client.properties
Also seems to be in /etc/lcmaps.db
So, it would seem, the cleanest way to change the gums server is to change 10-misc.ini, except that gets over-written by CF3. Therefore, just sed the above files directly if the GUMS server has to change.
On head01 we have this file: /root/dcache-local-scripts/ch_gums_server.pl which, as with all the other, similar scripts, tries to use /etc/grid-security/prima-authz.conf, and that file no longer exists. THIS FILE IS IDENTICAL TO THE ONE RUN OUT OF THE AFS "OSG_certificates" SUBDIRECTORY ON GATE01. However, it DOES write (head01) to /opt/d-cache/etc/dcachesrm-gplazma.policy, now moved to /etc/dcache/dcachesrm-gplazma.policy, and then restarts the dcache gPlazma-head01Domain service. We can re-use this, but need to see if the /etc/dcache file is under CF3 control (likely).
There is nothing now on any pool server, or on head02, that is concerned with GUMS.
Gate02
The gate02 install
Updating the OSG install
On 9/24/2013 the process of updating the OSG install on the gate keepers began. First up was gate03.
The new OSG suite of rpms requires java-1.7.0-openjdk (and the devel rpm), which is not installed. OSG Twiki
instructions detail how to place the rpms on a machine. We have not yet placed these rpms in the umatlas repo, so the following procedure was used to update the machine. To guard against crashing newly started jobs, pilots were stopped during the upgrade process. Also, as condor.pm came from some rpm that might get updated, those files were checked before and after the update. Alternatively, cf-agent can be run immediately afterwards to make sure the AGLT2 version of this file is in place.
[ball@gate04:~]$ curl --cert /tmp/x509up_u`id -u` --cacert /tmp/x509up_u`id -u` \
--capath /etc/grid-security/certificates \
'https://panda.cern.ch:25943/server/controller/query?tpmes=setoffline&queue=AGLT2_TEST-condor'
Changed status of queue nickname='AGLT2_TEST-condor', siteid='AGLT2_TEST' from online to offline
811 locate condor.pm|xargs -n 1 ls -l
-rw-r--r-- 1 root root 40113 Jul 24 16:00 /usr/lib/perl5/vendor_perl/5.8.8/Globus/GRAM/JobManager/condor.pm
-rw-r--r-- 1 root root 40113 Jul 25 09:00 /usr/share/perl5/vendor_perl/Globus/GRAM/JobManager/condor.pm
-rw-r--r-- 1 root root 32846 Nov 20 2012 /usr/share/perl5/vendor_perl/Globus/GRAM/JobManager/condor.pm.orig
813 yum localinstall java-1.7.0-openjdk-1.7.0.25-2.3.10.3.el6_4.x86_64.rpm \
java-1.7.0-openjdk-devel-1.7.0.25-2.3.10.3.el6_4.x86_64.rpm
814 rm -f /usr/bin/java /usr/bin/javac /usr/bin/javadoc /usr/bin/jar
816 yum reinstall java-1.7.0-openjdk-1.7.0.25-2.3.10.3.el6_4.x86_64.rpm \
java-1.7.0-openjdk-devel-1.7.0.25-2.3.10.3.el6_4.x86_64.rpm
# The java 1.7.0 version of available binaries was selected in each of these two instances
817 alternatives --config java
818 alternatives --config javac
819 rpm -q tomcat6
# No actual changes were made in these 2 files, as JAVA_HOME was never explicitly set
820 vi /etc/sysconfig/tomcat6
821 vi /etc/tomcat6/tomcat6.conf
824 service tomcat6 restart
# Now, update OSG
825 yum --enablerepo=osg update
830 osg-version
OSG 3.1.24
# Final check on condor.pm determined there were no changes. Ran cf-agent anyway
834 locate condor.pm|xargs -n 1 ls -l
835 cf-agent -K
[ball@gate04:~]$ curl --cert /tmp/x509up_u`id -u` --cacert /tmp/x509up_u`id -u` \
--capath /etc/grid-security/certificates \
'https://panda.cern.ch:25943/server/controller/query?tpmes=setonline&queue=AGLT2_TEST-condor'
Changed status of queue nickname='AGLT2_TEST-condor', siteid='AGLT2_TEST' from offline to online
All of gate03, gate02 and gate04 are now updated (9/26/13) this way.
--
BobBall - 01 Jul 2013