Tags:
create new tag
view all tags

MyProxy的安装说明

MyProxy 的可以按照 gLite 3.1通用文档进行安装,过程比较简单,首先是按照操作系统、配置YUM、JAVA、ntp等。
  1. 安装
    cd /etc/yum.repos.d/
    wget http://grid-deployment.web.cern.ch/grid-deployment/yaim/repos/glite-PX.repo
    yum update
    yum install glite-PX
  2. 配置
    首先注意site-info.def中关于myproxy的选项,主要是GRID_TRUSTED_BROKERS,需要把允许更新证书的RB、FTS服务器加入进去,
    格式如:
    GRID_TRUSTED_BROKERS="
    '/C=CN/O=HEP/O=IHEP/OU=CC/CN=host/bg003.ihep.ac.cn'
    '/C=CN/O=HEP/O=IHEP/OU=CC/CN=host/bg008.ihep.ac.cn'
    "
    其次,使用yaim进行配置:
    /opt/glite/yaim/bin/yaim -c -s /etc/yaim/site-infodef.def -n glite-PX
  3. 手动修改
    在配置完成以后,需要手动修改/etc/rc.d/init.d/myproxy-generate-config.pl文件,在其中找到如下行:
    $config .= "authorized_renewers \"$_\"\n";
    紧接着增加一行:
    $config .= "authorized_retrievers \"$_\"\n";
    手动修改完成以后,重启myproxy服务
    service myproxy restart
    重启之后,可以看到myproxy的配置文件/etc/myproxy-server.config里面会生成相应的信息,其中包含:
    authorized_renewers "/C=CN/O=HEP/O=IHEP/OU=CC/CN=host/bg003.ihep.ac.cn"
    authorized_retrievers "/C=CN/O=HEP/O=IHEP/OU=CC/CN=host/bg003.ihep.ac.cn"
    authorized_renewers "/C=CN/O=HEP/O=IHEP/OU=CC/CN=host/bg008.ihep.ac.cn"
    authorized_retrievers "/C=CN/O=HEP/O=IHEP/OU=CC/CN=host/bg008.ihep.ac.cn"
    值得说明的是,该文件每次重新启动时都会被覆盖,因此直接修改此文件无法解决某些授权问题。
  4. 问题
    FTS在访问MyProxy时可能会出现如下错误:
    /C=CN/O=HEP/O=IHEP/OU=CC/CN=host/bg008.ihep.ac.cn" not authorized by server's trusted_retrievers policy "/C=CN/O=HEP/O=IHEP/OU=CC/CN=host/bg008.ihep.ac.cn" not authorized by server's authorized_retrievers policy
    此时需要按照第三步进行手动修改。
    MyProxy的日志(log)文件与系统日志在一块,即/var/log/messages


Edit | Attach | Watch | Print version | History: r2 < r1 | Backlinks | Raw View | Raw edit | More topic actions
Topic revision: r2 - 2008-03-31 - ChengYaodong
 
This site is powered by the TWiki collaboration platform Powered by PerlCopyright © 2008-2019 by the contributing authors. All material on this collaboration platform is the property of the contributing authors.
Ideas, requests, problems regarding TWiki? Send feedback