GT4 Admin Guide
   Next

GT4 Admin Guide

February 2005

Table of Contents

1. Introduction
2. Before you begin
3. Software Prerequisites
3.1. Required software
3.2. Optional software
3.3. Platform Notes
3.3.1. Apple MacOS X
3.3.2. Debian
3.3.3. Fedora Core
3.3.4. FreeBSD
3.3.5. HP/UX
3.3.6. IBM AIX
3.3.7. Red Hat
3.3.8. Sun Solaris
3.3.9. SuSE Linux
3.3.10. Windows
4. Installing GT 3.9.5
5. Basic Security Configuration
5.1. Set environment variables
5.2. Obtain host certificates
5.2.1. Request a certificate from an existing CA
5.2.2. SimpleCA
5.2.3. Low-trust certificate
5.3. Make the host credentials accessible by the container
5.4. Add authorization
5.5. Verify Basic Security
6. Security Overview
6.1. Configuration
6.2. Configuring Globus to Trust a Particular Certificate Authority
6.3. Configuring Globus to Create Appropriate Certificate Requests
6.4. Requesting Service Certificates
6.5. Host Certificates and Client-side Authorization
6.6. Specifying Identity Mapping Information
6.7. GSI File Permissions Requirements
6.8. Troubleshooting
7. GridFTP Configuration
7.1. Introduction
7.2. Deploying the GridFTP Server
7.3. Running in daemon mode
7.4. Running under inetd or xinetd
7.5. Remote data-nodes and striped operation
7.6. Testing
7.7. Security Considerations
7.8. Troubleshooting
8. Webservices container
8.1. Starting the container
8.2. Service configuration overview
8.3. Container configuration
8.4. Configuration Profiles
9. RFT Configuration
9.1. Introduction
9.2. Configuring
9.2.1. Required configuration: configuring the PostgreSQL database
9.3. Security Considerations
9.4. Troubleshooting
10. WS GRAM Configuration
10.1. Introduction
10.2. Local Prerequisites
10.2.1. Host credentials
10.2.2. GRAM service account
10.2.3. Gridmap authorization of user account
10.2.4. Functioning sudo
10.2.5. Local scheduler
10.2.6. RFT Dependency
10.3. Configuring
10.3.1. Configuration settings
10.3.2. Setting up service credentials
10.3.3. Enabling Local Scheduler Adapter
10.3.4. Configuring sudo
10.3.5. Extra steps for non-default installation
10.3.5.1. Non-default service credentials
10.3.5.2. Alternate location for host credentials
10.3.5.3. User proxy
10.3.5.4. Non-default GridFTP server
10.3.5.5. Non-default container port
10.3.5.6. Non-default gridmap
10.3.5.7. Non-default job resource limit
10.4. Testing
10.5. Security Considerations
10.6. Troubleshooting
11. Configuring GSI-OpenSSH
11.1. Introduction
11.2. Building and Installing
11.3. Configuring
11.4. Configuration settings
11.5. System clocks
11.6. Deploying
11.7. Testing
12. Configuring MyProxy
12.1. Introduction
12.2. Configuring
12.3. Configuration settings
12.4. Configuring a MyProxy server installation
12.5. Deploying
12.6. Testing
12.7. Security Considerations
13. Configuring CAS
13.1. Introduction
13.2. Configuring
13.3. Deploying
13.3.1. Obtaining credentials for the CAS server
13.3.2. Database installation and configuration
13.3.3. Installing the database
13.3.4. Initializing the CAS database
13.4. Testing
13.5. Testing the backend database module
13.6. Testing CAS service module
13.7. Example of CAS Server Administration
13.7.1. 1. Adding a user group
13.7.2. 2. Adding a trust anchor
13.7.3. 3. Adding users
13.7.4. 4. Adding users to a user group
13.7.5. 4. Adding a new FTP server
13.7.6. 4. Creating an object group
13.7.7. 5. Adding members to an object group
13.7.8. 6. Adding service types
13.7.9. 7. Adding action mappings
13.7.10. 8. Granting permissions
13.8. Security Considerations
A. Installing SimpleCA
A.1. Create users
A.2. Run the setup script
A.2.1. 2.1 Configure the subject name
A.2.2. Configure the CA's email
A.2.3. Configure the expiration date
A.2.4. Enter a passphrase
A.2.5. Confirm generated certificate
A.2.6. Complete setup of GSI
A.3. Host certificates
A.3.1. 3.1 Request a host certificate
A.3.2. Sign the host certificate
A.4. User certificates
A.4.1. Request a user certificate
A.4.2. Sign the user certificate
A.5. Verify the SimpleCA certificate installation
A.6. Configure SimpleCA for multiple machines
   Next
   Chapter 1. Introduction