middleware:Unicore/64/server

From Dgiref
Jump to: navigation, search
Please open a NGI-DE ticket if you experience any Installation or Configuration problem.

Contents

UNICORE server v.6.4

Prepare

Software
  • Scientific Linux version 5.6 64 bit
  • Sun Java Runtime Environment version >= 1.6.0
  • Perl version >= 5.8.8
  • Torque Client
  • UMD repo

Optimizing the configuration:


Use minimal operating system installation without firewall. To verify installed packages use the command

  • rpm -qa | grep package_name

Install the following additional packages:

  • yum -y install wget yum rpm make gcc gcc-c++ tar sed zlib openssl

After the installation is complete, turn off any unnecessary services (like gpm, sendmail, cups, haldaemon, messagebus, pcmcia, anacron, atd) with the following command:

  • chkconfig <SERVICE> off

Configure the following settings for the server:

Users
  • A userid to start and administer the above services (not root!)
  • A userid to execute status queries to the local resource management system (qstat) (not root!)
Others
  • NFS-Export of users home directories
  • Register your Resource with GRRS: Web Form.
Firewall configuration

The UNICORE Gateway is the entry to a site, it authenticates the users and forwards all client requests to the corresponding local service. The Gateway's port (8080 by default) needs to be accessible from the Internet. Therefore is must be open in the firewall for incoming https connections.

The unicorex service registers with the central UNICORE Registry with Port 9110. unicorex must be able to make a connection to this system on the given port, so that the firewall should allow that outgoing connection (how to open port in firewall).

Install

  • Install Unicore components unicore-unicorex, unicore-xuudb, unicore-gateway, unicore-tsi from UMD
  • Install Unicore ucc client from UMD

Configure

  • Truststore configuration
  • Gateway configure
    • Customization of connections.properties
    • Customization of gateway.properties
    • Customization of security.properties
  • Unicorex configure
    • Don't change jmxremote.password, logging.properties, security_policy.xml, ucc.logging.properties, xacml.config, xnjs.xml,
    • Change an user name in simpleuudb
    • Adapt of site-info.glue for site configurations
    • Configure uas.config
    • Configure wsrflite.xml
    • Configure xnjs_legacy.xml
    • Configure simpleidb
    • Change registry server in uas.config
    • Adapt wsrflite.xml
  • xuudb configure
    • Customization xuudb_client.conf
    • Customization acl list /etc/unicore/xuudb/xuudb.acl
  • tsi files tsi.properties and xuudb_server.conf customization
  • Convert grid-mapfile to xuudb_in
config file usage dynamically reloaded
uas.config General properties, startup behaviour,registry, file transfer properties yes
wsrflite.xml Services to be deployed, SSL settings, Web server settings yes
simpleidb Backend, installed applications, resources yes
xnjs.xml Back end properties no
xnjs_legacy.xml Back end properties preconfigured for the Perl TSI no
logging.properties logging levels, logfiles and their properties yes
security_policy.xml Access control policy for securing the web services via xacml.config (do 'touch xacml.config' to trigger)
xacml.config Configure the access control component yes
Note-icon.png
  
For details use Unicorex manual
Note-icon.png
  
Registry server is not a part of Referece Installation. For configuration see Registry manual

Proceed

  • Start unicore-gateway unicore-tsi unicore-unicorex unicore-xuudb
  • Import users to xuudb
  • Change owner of log files
  • Make unicore-gateway unicore-tsi unicore-unicorex unicore-xuudb as a services for OS and add put to autoboot system. So will be started during boot.

Initial test

  • Check state of process from server side
  • Submit job from client side:
    • Grid user auth
    • Prepare preferences for client
    • Prepare test job
    • Test ucc connect
    • Test run job

Update

For update just use yum update for unicore packages. The update will be automatically use rpm repo

Personal tools