GLite - EGEE Middleware1 GLite -EGEE middleware....

download GLite - EGEE Middleware1 GLite -EGEE middleware. €°‚¸‡µ¸¹ ƒ€ ¾»Œ·¾²°‚µ» “°»°‚¸¾½¾²

of 64

  • date post

    03-Jan-2016
  • Category

    Documents

  • view

    213
  • download

    0

Embed Size (px)

Transcript of GLite - EGEE Middleware1 GLite -EGEE middleware....

  • GLite -EGEE middleware. .

    ,

    GLite - EGEE Middleware

  • EGEE is a project funded by the European Union under contract IST-2003-508833

    www.eu-egee.org

  • Privacy

    Integrity

    Authentication

    Authorisation

    GLite - EGEE Middleware

  • :http://service-grid-ca.web.cern.ch/service-grid-ca/help/user_req.html

    :lxpub01:~ > grid-cert-request

    GLite - EGEE Middleware

  • A certificate request and private key is being created You will be asked to enter a PEM pass phrase. This pass phrase is akin to your account password, and is used to protect your key file.If you forget your pass phrase, you will need toobtain a new certificate.

    Using configuration from /etc/grid-security/globus-user-ssl.confGenerating a 1024 bit RSA private key......++++++writing new private key to '/afs/jinr.ru/user/g/gvv/.globus/userkey.pem'Enter PEM pass phrase:Verifying password - Enter PEM pass phrase:-----You are about to be asked to enter information that will be incorporatedinto your certificate request.What you are about to enter is what is called a Distinguished Name or a DN.There are quite a few fields but you can leave some blankFor some fields there will be a default value,If you enter '.', the field will be left blank.-----Country Name (2 letter code), do not change! [RU]:Level 0 Organization, do not change! [DataGrid]:Your institution domain name (e.g. jinr.ru) [jinr.ru]:Your full name (e.g. Ivan Petrov) []:

    GLite - EGEE Middleware

  • A private key and a certificate request has been generated with the subject:

    /C=RU/O=DataGrid/OU=jinr.ru/CN=Galaktionov Victor

    If the CN=Galaktionov Victor is not appropriate, rerun thisscript with the -force -cn "Common Name" options.

    Your private key is stored in /afs/jinr.ru/user/g/gvv/.globus/userkey.pemYour request is stored in /afs/jinr.ru/user/g/gvv/.globus/usercert_request.pem

    Please e-mail the request to the Russian DataGrid CA danila@jinr.ruYou may use a command similar to the following:

    cat /afs/jinr.ru/user/g/gvv/.globus/usercert_request.pem | mail danila@jinr.ru

    Only use the above if this machine can send AND receive e-mail. if not, pleasemail using some other method.

    Your certificate will be mailed to you within two working days.If you receive no response, contact Russian DataGrid CA at danila@jinr.ru

    GLite - EGEE Middleware

  • :

    HOME- .globus 3 : usercert.pem usercert_request.pem userkey.pem usercert.pem userkey.pem userreq.pem

    !!! 400 userkey.pem

    GLite - EGEE Middleware

  • , . usercert_request.pem userreq.pem

    : ( ) usercert.pem c 644 .globus

    GLite - EGEE Middleware

  • 1.

    : : http://lcg-registrar.cern.ch/load_certificates.html

    openssl pkcs12 -export -inkey userkey.pem \ -in usercert.pem \ -out my_cert.p12 -name "My certificate

    userkey.pem ( 400) usercert.pem my_cert.p12 PKCS12."My certificate" .

    GLite - EGEE Middleware

  • - : .

    - WEB- VO https://lxb2023.cern.ch:8443/edg-voms-admin/EGEE/index.html

    - VO

    GLite - EGEE Middleware

  • JRA1: Middlewarehttp://egee-jra1.web.cern.ch/egee-jra1/

    gLight: Lightweight Middleware for Grid Computing http://glite.web.cern.ch/glite/

    Presentationshttp://egee-jra1.web.cern.ch/egee-jra1/Presentations/All.html

    Prototype testbedhttp://egee-jra1.web.cern.ch/egee-jra1/Prototype/testbed.htm

    GLite - EGEE Middleware

  • I. GLite

    /.globus VO EGEE (voms)

    AFS ssh vgalakti@lxplus.cern.ch GLite UI source /afs/cern.ch/project/egee/jra1/prototype/ui/glite-env.sh source /afs/cern.ch/project/egee/jra1/prototype/ui/glite-env.csh

    GLite - EGEE Middleware

  • GLITE_LOCATION=/afs/cern.ch/project/egee/jra1/prototype/ui/opt/gliteGLOBUS_LOCATION=/afs/cern.ch/project/egee/jra1/prototype/ui/opt/globusGLOBUS_PATH=/afs/cern.ch/project/egee/jra1/prototype/ui/opt/globus

    GLite - EGEE Middleware

  • II. proxy-.Grid proxy: grid-proxy-init.Voms proxy: voms-proxy-init

    : proxy-, X509_USER_PROXY

    GLite - EGEE Middleware

  • Voms proxy VOMS proxy voms-proxy-init $HOME/.glite/vomses "EGEE" "kuiken.nikhef.nl" "15001 "/O=dutchgrid/O=hosts/OU=nikhef.nl/CN=kuiken.nikhef.nl" "EGEE" "22" , , :EGEE Victor Galaktionov 7912 "/C=CH/O=CERN/OU=GRID/CN=Victor Galaktionov 7912 EGEE "22"

    GLite - EGEE Middleware

  • VOMS proxyvoms-proxy-initvoms-proxy-infovoms-proxy-destroy[lxplus011] ~/.glite > voms-proxy-init -help voms-proxy-init: Options -help, -usage Displays usage -version Displays version -debug Enables extra debug output -q Quiet mode, minimal output -verify Verifies certificate to make proxy for -pwstdin Allows passphrase from stdin -limited Creates a limited proxy -hours H Proxy is valid for H hours (default:12) -bits B Number of bits in key {512|1024|2048|4096} -cert Non-standard location of user certificate -key Non-standard location of user key -certdir Non-standard location of trusted cert dir -out Non-standard location of new proxy cert -voms Specify voms server. :command is optional. -order Specify ordering of attributes. -target Targets the AC against a specific hostname. -vomslife Try to get a VOMS pseudocert valid for H hours. -include Include the contents of the specified file. -conf Read options from . -confile Non-standard location of voms server addresses. -userconf Non-standard location of user-defined voms server addresses. -globus Globus version. -noregen Doesn't regenerate a new proxy for the connection. -separate Saves the informations returned by the server on file . -ignorewarn Ignore warnings. -failonwarn Treat warnings as errors.

    GLite - EGEE Middleware

  • cat /afs/cern.ch/project/egee/jra1/prototype/ui/opt/glite/etc/vomses"test" "gridit-wn-010.cnaf.infn.it" "50001" "/C=IT/O=INFN/OU=Host/L=CNAF/CN=gridit-wn-010.cnaf.infn.it "testVO" "22""EGEE" "kuiken.nikhef.nl" "15001" "/O=dutchgrid/O=hosts/OU=nikhef.nl/CN=kuiken.nikhef.nl "EGEE" "22"

    GLite - EGEE Middleware

  • 1

    lxplus011] ~/.glite > voms-proxy-initInvalid configuration filename: /afs/cern.ch/project/egee/jra1/prototype/ui/opt/glite/etc/vomsesYour identity: /C=CH/O=CERN/OU=GRID/CN=Victor Galaktionov 7912Enter GRID pass phrase for this identity:Creating temporary proxy .............................. DoneCreating proxy ...................................................... DoneYour proxy is valid until Thu Mar 17 02:15:46 2005

    GLite - EGEE Middleware

  • lxplus013] ~/INFN > voms-proxy-infosubject : /C=CH/O=CERN/OU=GRID/CN=Victor Galaktionov 7912/CN=proxyissuer : /C=CH/O=CERN/OU=GRID/CN=Victor Galaktionov 7912identity : /C=CH/O=CERN/OU=GRID/CN=Victor Galaktionov 7912type : proxystrength : 512 bitspath : /tmp/x509up_u19747timeleft : 11:55:35

    GLite - EGEE Middleware

  • 2.

    lxplus071] ~ > gliteui[lxplus071] ~ > cat ~/.glite/vomses"EGEE" "kuiken.nikhef.nl" "15001" "/O=dutchgrid/O=hosts/OU=nikhef.nl/CN=kuiken.nikhef.nl" "EGEE" "22"

    [lxplus071] ~ > voms-proxy-init -confile .glite/vomsesYour identity: /C=CH/O=CERN/OU=GRID/CN=Victor Galaktionov 7912Enter GRID pass phrase for this identity:Creating temporary proxy ....................................................... DoneCreating proxy ........................................... DoneYour proxy is valid until Fri Mar 18 01:48:26 2005

    [lxplus071] ~ > voms-proxy-infosubject : /C=CH/O=CERN/OU=GRID/CN=Victor Galaktionov 7912/CN=proxyissuer : /C=CH/O=CERN/OU=GRID/CN=Victor Galaktionov 7912identity : /C=CH/O=CERN/OU=GRID/CN=Victor Galaktionov 7912type : proxystrength : 512 bitspath : /tmp/x509up_u19747timeleft : 11:59:50

    GLite - EGEE Middleware

  • 3

    [lxplus058] ~ > gliteui[lxplus058] ~ > cat ~/.glite/vomses"EGEE""Victor Galaktionov""7912" "/C=CH/O=CERN/OU=GRID/CN=Victor Galaktionov 7912"EGEE""22"

    [lxplus058] ~ > voms-proxy-init -confile .glite/vomsesYour identity: /C=CH/O=CERN/OU=GRID/CN=Victor Galaktionov 7912Enter GRID pass phrase for this identity:Creating temporary proxy .................................... DoneCreating proxy .................................... DoneYour proxy is valid until Fri Mar 18 01:37:00 2005

    GLite - EGEE Middleware

  • [lxplus058] ~ > voms-proxy-infosubject : /C=CH/O=CERN/OU=GRID/CN=Victor Galaktionov 7912/CN=proxyissuer : /C=CH/O=CERN/OU=GRID/CN=Victor Galaktionov 7912identity : /C=CH/O=CERN/OU=GRID/CN=Victor Galaktionov 7912type : proxystrength : 512 bitspath : /tmp/x509up_u19747timeleft : 11:59:49

    GLite - EGEE Middleware

  • [lxplus011] ~/.glite > voms-proxy-init -confile vomses -voms EGEEYour identity: /C=CH/O=CERN/OU=GRID/CN=Victor Galaktionov 7912Enter GRID pass phrase for this identity:Creating temporary proxy .................................................... DoneTrying for old (1.1.x) serverTrying for old (1.1.x) server

    GLite - EGEE Middleware

  • III. Workload Management System, WMS

    GLite - EGEE Middleware

  • Job Management

    http://egee-jra1-wm.mi.infn.it/egee-jra1-wm/