Installing a Globus Client

Purpose - To Provide Users with a Mechanism for Accessing the APAC Grid Infrastructure.

Technology - VDT 1.6.x, Globus Toolkit 4.0.3, Commodity Grid (CoG) Kit

Summary You may launch Grid Jobs from a number of platforms.

1. A web based portal
2. From a command line on a server, typically provided by an APAC Partner
3. A (eg Java) application installed on your workstation
4. From a command line on a workstation (Linux, Mac, Solaris or Windows)

Linux Installation on Intel Architecture using VDT 1.6.x (CentOS 4.x/5.x, Fedora Core 6)

This procedure is the most appropropriate to use where VOMS client tools (voms-proxy-init etc.) are required.

• Ensure that your machine has the capabilities shown for a guest in XenInstall with networking, user authentication and user directory mounts in accordance with local conventions
• Apply for and install a host certificate (and key) for the machine as shown at: http://www.vpac.org/twiki/bin/view/APACgrid/HostCertRequestAPAC
• Login as root, set http_proxy if appropriate, then perform the following operations:
• yum install Gbuild
• /usr/local/sbin/BuildClientVdt161.sh .. and answer 'y' to the cache question
• Create: /etc/grid-security/grid-mapfile or edit and execute: /etc/cron.hourly/01-gridmap-local.cron as appropriate
• Submit some test jobs as shown at: http://www.vpac.org/twiki/bin/view/APACgrid/TestSuite

If You Are Using Ubuntu 7.04

• Setup networking etc. as above, and optionally install host certificate
  • A host certificate is not required if you are simply running jobs. But you will be able to retrieve anonymous Myproxy certificates only - the default now with GRIX.
• Acquire the most current versions of the Gbuild and Gclient RPM's from the APAC repository
• As root, do: apt-get install rpm xinetd then: rpm -ivh --nodeps Gbuild.. Gclient..
• /usr/local/sbin/BuildUbuClient.sh .. and answer 'y' to the cache question
  • This modifies /etc/profile to load /opt/vdt/setup.sh
• Create: /etc/grid-security/grid-mapfile or edit and execute: /etc/cron.daily/01-gridmap-local.cron as appropriate
  • This and xinetd are probably not required. Daniel 5/6/07
  • On my workstation, I have removed the 01-gridmap-local.cron

If You Need To Re-Install The VDT Components

• Login as root and do: vdt-control --force --off
• Also: rpm -e Gclient
• Then: mv /opt/vdt /opt/vdt.`date +%s`
• You can then set http_proxy if appropriate and re-run: BuildNg1Vdt161.sh or: BuildUbuClient.sh as outlined above

Linux/Solaris Installation Using GT4.0.3

• Download from http://www.globus.org/toolkit/downloads/4.0.3 a binary appropriate for your operating system (e.g. gt4.0.3-x86_rhas_4-installer.tar.gz) and untar it into a temporary directory
• Change into that directory, then perform (as root) the following steps:
• mkdir /usr/local/globus-4.0.3; ln -s /usr/local/globus-4.0.3 /usr/local/globus
• ./configure --disable-rls --disable-tests --disable-wstests --prefix=/usr/local/globus-4.0.3
• If the architecture cannot be ascertained automatically and/or there are multiple compilers, you may need to append to the above something like: --with-flavor=gcc32dbg CC=gcc
• make gridftp install
• make globus_gram_client_tools install
• make wsgram install
• make myproxy install
• Install the APACGrid CA Bundle and apply for a host certificate as shown at: http://www.vpac.org/twiki/bin/view/APACgrid/CaInterface
• Copy from your local submit host (e.g.: grid.vpac.org) the files: 01-gridmap-local.cron and 05-get-crl.cron in directory: /etc/cron.hourly and execute them
• Also copy the files: /etc/profile.d/globus.sh and /etc/xinetd.d/gsiftp and do: service xinetd restart (or equivalent)
• An installation like this will provide users with the capability to return processed files to the workstation

Upgrading to MyProxy 3.7

MyProxy 3.7 provides a greater level of resiliency than version 3.6 through its ability to query several MyProxy servers in turn until a successful result is returned. You can upgrade as follows:

• On a VDT 1.6.x machine: vdt-uninstall MyProxy
• Ensure that you have g++ available (e.g. yum install gcc-c++)
• If you are using a Fedora/!CentOS x86_64 machine, do: yum install glibc-devel.i386 glibc-devel.x86_64
• If you are using a Fedora/!CentOS i386 machine, do: yum install glibc-devel
• Make a directory like: /tmp/m and download into it myproxy-3.7.tar.gz from http://grid.ncsa.uiuc.edu/myproxy/download.html
• Change to that directory, then: gpt-build myproxy-3.7.tar.gz gcc32dbgpthr

Windows/Linux/Solaris Installation Using cog-jglobus 1.4

• You will need to have a current (e.g. 1.5.0 or later) version of Java installed
• From http://wiki.cogkit.org download cog-jglobus-1.4-bin.tar.gz
• As an Admin or root user, unpack into directory: C:\COG or /opt/cog
• Set COG_INSTALL_PATH to one of the above, and ensure that $COG_INSTALL_PATH/bin is in a user's PATH
• As a non-priveleged user, ensure that your personal certificates are in your .globus subdirectory, and your CA certificates are in a certificates subdirectory thereunder
• Execute $COG_INSTALL_PATH/bin/setup{.bat}
• An installation like this will provide a user with tools like myproxy-init, globusrun, etc.

-- GrahamJenkins - 24 May 2007