Globus
From Nuclear Physics Group Documentation Pages
Globus is a toolkit for transferring data. Detail are found on their website: Globus Toolkit
Configuration on Taro
Software is installed from RPM, but configuration is still to be done.
Add a user
Example of how to add a user to the globus system.
su - -s /bin/sh myproxy -sh-3.2$ whoami myproxy -sh-3.2$ -sh-3.2$ PATH=$PATH:/usr/sbin -sh-3.2$ myproxy-admin-adduser -c "Maurik Holtrop" -l maurik ... Certificate subject is: /O=Grid/OU=GlobusTest/OU=simpleCA-taro.unh.edu/OU=local/CN=Maurik Holtrop -sh-3.2$exit root@taro:~>grid-mapfile-add-entry -dn "/O=Grid/OU=GlobusTest/OU=simpleCA-taro.unh.edu/OU=local/CN=Maurik Holtrop" -ln maurik Modifying /etc/grid-security/grid-mapfile ... /etc/grid-security/grid-mapfile does not exist... Attempting to create /etc/grid-security/grid-mapfile New entry: "/O=Grid/OU=GlobusTest/OU=simpleCA-taro.unh.edu/OU=local/CN=Maurik Holtrop" maurik (1) entry added root@taro:~>
Add an iptable exception
iptables -I INPUT 8 -p tcp --dport 7512 -j ACCEPT iptables -I INPUT 8 -p tcp --dport 2811 -j ACCEPT
Installation steps
Steps performed on 2015/02/15
- Update the globus toolkit from website instructions, starting with the downloaded rpm.
- Follow steps in:Quick Start
- Note: The myproxy etc have duplicates as shown by: "yum --showduplicates list myproxy | expand", this causes library version conflicts.
- Install the gt6 version with: "yum install myproxy-6.1.8-1.el5+gt6 myproxy-server-6.1.8-1.el5+gt6 myproxy-admin-6.1.8-1.el5+gt6"
- Install the simple certificates: globus-simple-ca globus-gsi-cert-utils-progs
- Now /usr/local/globus-5.0.5/bin/grid-cert-diagnostics shows a proper cert.
Specific steps performed:
rpm --install globus-toolkit-repo-latest.noarch.rpm yum install globus-gridftp globus-gram5 globus-gsi yum install myproxy-6.1.8-1.el5+gt6 myproxy-server-6.1.8-1.el5+gt6 myproxy-admin-6.1.8-1.el5+gt6 install -o myproxy -m 644 /etc/grid-security/hostcert.pem /etc/grid-security/myproxy/hostcert.pem install -o myproxy -m 600 /etc/grid-security/hostkey.pem /etc/grid-security/myproxy/hostkey.pem emacs -nw /etc/myproxy-server.config # Uncomment sample policy #1 usermod -a -G simpleca myproxy service myproxy-server start su - -s /bin/sh myproxy
