VDT Packages use for Gftp Server VDT Install
Contents
Introduction
This docment outlines the commands to install a VDT suitable for use on a Dcache gftp server. Contents include the CA infrastructure and the VOMS Client infrastructure.
Globus Package
pacman -pretend-platform linux-rhel-4 -get http://vdt.cs.wisc.edu/vdt_161_cache:Globus
Batch
VDTSETUP_AGREE_TO_LICENSES=y
export VDTSETUP_AGREE_TO_LICENSES
VDTSETUP_ENABLE_ROTATE=y
export VDTSETUP_ENABLE_ROTATE
VDTSETUP_INSTALL_CERTS=r
export VDTSETUP_INSTALL_CERTS
VDTSETUP_EDG_CRL_UPDATE=y
export VDTSETUP_EDG_CRL_UPDATE
VDTSETUP_ENABLE_GATEKEEPER=n
export VDTSETUP_ENABLE_GATEKEEPER
VDTSETUP_ENABLE_GRIDFTP=n
export VDTSETUP_ENABLE_GRIDFTP
VDTSETUP_ENABLE_GRIS=n
export VDTSETUP_ENABLE_GRIS
VDTSETUP_GRIS_AUTH=
export VDTSETUP_GRIS_AUTH
Interactive
...
VDT 1.6.1 installs a variety of software, each with its own license.
In order to continue, you must agree to the licenses.
You can view the licenses online at:
http://vdt.cs.wisc.edu/licenses/1.6.1
After the installation has completed, you will also be able to
view the licenses in the "licenses" directory.
Do you agree to the licenses? [y/n] y
Several services provided by the VDT create unbounded log files. If you wish, we can rotate those file on a daily basis.
Would you like to setup daily rotation of VDT log files?
Possible answers:
y: Yes, I want the service to run automatically (once enabled)
n: No, I do NOT want the service to run automatically
Note: Services are enabled with vdt-control; see 'post-install/README'.
y
The VDT typically installs public certificates and signing policy files
for the well-known public CA's. This is necessary in order for you to
perform GSI authentication with any remote Grid services (that have
service/host certificates signed by these CA's).
For more information please refer to the VDT documentation:
http://vdt.cs.wisc.edu/setup_ca.html
Where would you like to install CA files?
Choices:
r (root) - install into /etc/grid-security/certificates
(existing CA files will be preserved)
l (local) - install into $VDT_LOCATION/globus/share/certificates
n (no) - do not install
r
Do you want to run a cron job that will update the CA certificate
revocation lists automatically? This will use the fetch-crl program
that comes with the VDT. The cron job will run at a random time
between midnight and 6:00am. We select a random time to avoid having
all VDT installations fetching CRLs at the same time.
Do you want to update the CA certification revocation lists (CRLs) automatically? [y/n] y
If you would like, we can configure the Globus Gatekeeper to run automatically
as a daemon invoked via inted/xinetd.
Configuring the Globus Gatekeeper daemon requires changes to
- /etc/services
- /etc/xinetd.d (or /etc/inetd.conf)
Would you like to enable Globus Gatekeeper daemon to run automatically?
Possible answers:
y: Yes, I want the service to run automatically (once enabled)
n: No, I do NOT want the service to run automatically
Note: Services are enabled with vdt-control; see 'post-install/README'.
n
If you would like, we can configure the Globus GridFTP to run automatically
as a daemon invoked via inted/xinetd.
Configuring the Globus GridFTP daemon requires changes to
- /etc/services
- /etc/xinetd.d (or /etc/inetd.conf)
Would you like to enable Globus GridFTP daemon to run automatically?
Possible answers:
y: Yes, I want the service to run automatically (once enabled)
n: No, I do NOT want the service to run automatically
Note: Services are enabled with vdt-control; see 'post-install/README'.
n
If you would like, we can configure the Globus GRIS (MDS) to start
automatically at boot time
Configuring the Globus GRIS daemon requires changes to
- /etc/services
- /etc/init.d (or /etc/rc.d/init.d)
Would you like to enable Globus GRIS daemon to run automatically?
Possible answers:
y: Yes, I want the service to run automatically (once enabled)
n: No, I do NOT want the service to run automatically
Note: Services are enabled with vdt-control; see 'post-install/README'.
n
...
VOMS Client
pacman -pretend-platform linux-rhel-4 -get http://vdt.cs.wisc.edu/vdt_161_cache:VOMS-Client
Batch
Interactive
Script For the Above
#!/bin/sh
VDTSETUP_AGREE_TO_LICENSES=y
export VDTSETUP_AGREE_TO_LICENSES
VDTSETUP_ENABLE_ROTATE=y
export VDTSETUP_ENABLE_ROTATE
VDTSETUP_INSTALL_CERTS=r
export VDTSETUP_INSTALL_CERTS
VDTSETUP_EDG_CRL_UPDATE=y
export VDTSETUP_EDG_CRL_UPDATE
VDTSETUP_ENABLE_GATEKEEPER=n
export VDTSETUP_ENABLE_GATEKEEPER
VDTSETUP_ENABLE_GRIDFTP=n
export VDTSETUP_ENABLE_GRIDFTP
VDTSETUP_ENABLE_GRIS=n
export VDTSETUP_ENABLE_GRIS
VDTSETUP_GRIS_AUTH=
export VDTSETUP_GRIS_AUTH
pacman -trust-all-caches -pretend-platform linux-rhel-4 -get http://vdt.cs.wisc.edu/vdt_161_cache:Globus
pacman -pretend-platform linux-rhel-4 -get http://vdt.cs.wisc.edu/vdt_161_cache:VOMS-Client
Creating a Certificate
source setup.sh
./vdt/setup/setup-cert-request
q
./globus/bin/grid-cert-request -host hostname.t2.ucsd.edu
Authors
--
TerrenceMartin - 16 Apr 2007