VDT Packages use for Gftp Server VDT Install

Contents

Introduction

This docment outlines the commands to install a VDT suitable for use on a Dcache gftp server. Contents include the CA infrastructure and the VOMS Client infrastructure.

Globus Package

pacman -pretend-platform linux-rhel-4 -get http://vdt.cs.wisc.edu/vdt_161_cache:Globus

Batch

VDTSETUP_AGREE_TO_LICENSES=y
export VDTSETUP_AGREE_TO_LICENSES
VDTSETUP_ENABLE_ROTATE=y
export VDTSETUP_ENABLE_ROTATE
VDTSETUP_INSTALL_CERTS=r
export VDTSETUP_INSTALL_CERTS
VDTSETUP_EDG_CRL_UPDATE=y
export VDTSETUP_EDG_CRL_UPDATE
VDTSETUP_ENABLE_GATEKEEPER=n
export VDTSETUP_ENABLE_GATEKEEPER
VDTSETUP_ENABLE_GRIDFTP=n
export VDTSETUP_ENABLE_GRIDFTP
VDTSETUP_ENABLE_GRIS=n
export VDTSETUP_ENABLE_GRIS
VDTSETUP_GRIS_AUTH=
export VDTSETUP_GRIS_AUTH

Interactive

...
VDT 1.6.1 installs a variety of software, each with its own license.
In order to continue, you must agree to the licenses.
You can view the licenses online at:

     http://vdt.cs.wisc.edu/licenses/1.6.1

After the installation has completed, you will also be able to
view the licenses in the "licenses" directory.

Do you agree to the licenses? [y/n] y

Several services provided by the VDT create unbounded log files.  If you wish, we can rotate those file on a daily basis.

Would you like to setup daily rotation of VDT log files?

Possible answers:
    y: Yes, I want the service to run automatically (once enabled)
    n: No, I do NOT want the service to run automatically

Note: Services are enabled with vdt-control; see 'post-install/README'.

y

The VDT typically installs public certificates and signing policy files
for the well-known public CA's. This is necessary in order for you to
perform GSI authentication with any remote Grid services (that have
service/host certificates signed by these CA's).

For more information please refer to the VDT documentation:
http://vdt.cs.wisc.edu/setup_ca.html

Where would you like to install CA files?

Choices:
        r (root)  - install into /etc/grid-security/certificates
                   (existing CA files will be preserved)
        l (local) - install into $VDT_LOCATION/globus/share/certificates
        n (no)    - do not install
r

Do you want to run a cron job that will update the CA certificate
revocation lists automatically? This will use the fetch-crl program
that comes with the VDT. The cron job will run at a random time
between midnight and 6:00am. We select a random time to avoid having
all VDT installations fetching CRLs at the same time.

Do you want to update the CA certification revocation lists (CRLs) automatically? [y/n] y

If you would like, we can configure the Globus Gatekeeper to run automatically
as a daemon invoked via inted/xinetd.

Configuring the Globus Gatekeeper daemon requires changes to
- /etc/services
- /etc/xinetd.d (or /etc/inetd.conf)

Would you like to enable Globus Gatekeeper daemon to run automatically?

Possible answers:
    y: Yes, I want the service to run automatically (once enabled)
    n: No, I do NOT want the service to run automatically

Note: Services are enabled with vdt-control; see 'post-install/README'.

n

If you would like, we can configure the Globus GridFTP to run automatically
as a daemon invoked via inted/xinetd.

Configuring the Globus GridFTP daemon requires changes to
- /etc/services
- /etc/xinetd.d (or /etc/inetd.conf)

Would you like to enable Globus GridFTP daemon to run automatically?

Possible answers:
    y: Yes, I want the service to run automatically (once enabled)
    n: No, I do NOT want the service to run automatically

Note: Services are enabled with vdt-control; see 'post-install/README'.

n

If you would like, we can configure the Globus GRIS (MDS) to start
automatically at boot time

Configuring the Globus GRIS daemon requires changes to
- /etc/services
- /etc/init.d (or /etc/rc.d/init.d)

Would you like to enable Globus GRIS daemon to run automatically?

Possible answers:
    y: Yes, I want the service to run automatically (once enabled)
    n: No, I do NOT want the service to run automatically

Note: Services are enabled with vdt-control; see 'post-install/README'.

n
...

VOMS Client

pacman -pretend-platform linux-rhel-4 -get http://vdt.cs.wisc.edu/vdt_161_cache:VOMS-Client

Batch

Interactive

Script For the Above

#!/bin/sh 

VDTSETUP_AGREE_TO_LICENSES=y
export VDTSETUP_AGREE_TO_LICENSES
VDTSETUP_ENABLE_ROTATE=y
export VDTSETUP_ENABLE_ROTATE
VDTSETUP_INSTALL_CERTS=r
export VDTSETUP_INSTALL_CERTS
VDTSETUP_EDG_CRL_UPDATE=y
export VDTSETUP_EDG_CRL_UPDATE
VDTSETUP_ENABLE_GATEKEEPER=n
export VDTSETUP_ENABLE_GATEKEEPER
VDTSETUP_ENABLE_GRIDFTP=n
export VDTSETUP_ENABLE_GRIDFTP
VDTSETUP_ENABLE_GRIS=n
export VDTSETUP_ENABLE_GRIS
VDTSETUP_GRIS_AUTH=
export VDTSETUP_GRIS_AUTH

pacman -trust-all-caches  -pretend-platform linux-rhel-4 -get http://vdt.cs.wisc.edu/vdt_161_cache:Globus
pacman -pretend-platform linux-rhel-4 -get http://vdt.cs.wisc.edu/vdt_161_cache:VOMS-Client

Creating a Certificate

source setup.sh
 ./vdt/setup/setup-cert-request
q

./globus/bin/grid-cert-request -host hostname.t2.ucsd.edu  

Authors

-- TerrenceMartin - 16 Apr 2007