GT 4.1.1 DRS: System Administrator's Guide

1. Introduction

This guide contains advanced configuration information for system administrators working with the Data Replication Service (DRS). It provides references to information on procedures typically performed by system administrators, including installing, configuring, deploying, and testing the installation.

[Important]Important

This information is in addition to the basic Globus Toolkit prerequisite, overview, installation, security configuration instructions in the GT 4.1.1 System Administrator's Guide. Read through this guide before continuing!

2. Building and installing

DRS is distributed with the Globus Toolkit 4.1.1 and is available in both the binary bundles and the source bundle. For most purposes, the binary bundle provides the simplest means of installing the DRS and its requirements. There are three typical ways to access and install the DRS:

[Important]Important

Before proceding with installation of DRS, please familiarize yourself with the installation procedures for RLS (see GT 4.1.1 RLS) and RFT (see Reliable File Transfer (RFT) Service).

2.1. Installing DRS using Globus Toolkit Binary Bundle

Follow instructions provided by GT 4.1.1 System Administrator's Guide and Installing GT 4.1.1 in order to install the DRS from one of the available binary bundles of the Globus Toolkit.

Once you have unpackaged the binary bundle, the following commands may be used to install DRS:

% ./configure --prefix=$GLOBUS_LOCATION --enable-rls --enable-drs
% make
% make install
        

2.2. Installing DRS using Globus Toolkit Source Bundle

DRS is not installed as part of the default source install. In order to install DRS, you will need to ensure that RLS is also installed as part of the build by reviewing its installation procedures. Along with RLS configure settings (e.g., ODBC related settings) the --enable-drs flag is required as part of the configuration step.

The following commands will install the DRS (optionally you may use the "drs" make target to build only DRS and its requirements:

% ./configure --prefix=/path/to/install --with-iodbc-includes=/path/to/iodbc/include --with-iodbc-libs=/path/to/iodbc/lib --enable-rls --enable-drs
% make [drs]
% make install
        

2.3. Installing DRS using Globus CVS

Additionally, you may access the DRS from the Globus Toolkit CVS repository. You may deploy the 4.0.x DRS on top of an existing GT 4.0.x installation using the globus_4_0_branch tag. You may deploy the 4.1.x DRS on top of an existing GT 4.1.x installation using trunk.

The following example instructions will only work given the presence of an existing GT installation with all DRS dependencies. The best way to establish such an environment is to first follow the basic installation instructions and subsequently use the following instructions to obtain the latest updates from the CVS branch. Note the use of the globus_4_0_branch tag depends on whether you are interested in updates from the maintenance branch or the development trunk.

% setenv GLOBUS_LOCATION /path/to/existing/gt4xx/install/
% setenv CVSROOT :pserver:anonymous@cvs.globus.org:/home/globdev/CVS/globus-packages
% cvs co -r globus_4_0_branch ws-replica/
% cd ws-replica/replicator/
% ant deploy
        

To learn more about general instructions regarding GT CVS access, see Remote CVS Access.

3. Configuring

This information is in addition to the basic configuration instructions in the GT 4.1.1 System Administrator's Guide. Aside from the basic configuration of GT 4.1.1, please review the following instructions:

3.1. Configuration overview

The DRS requires certain JNDI settings to be properly configured. The installed JNDI configuration file may be found at $GLOBUS_LOCATION/etc/globus_wsrf_replicator/jndi-config.xml. To view the default configuration file (shipped with the GT 4.1.1 release) from the Globus CVS repository click here.

3.2. Syntax of the interface

The settings are structured as name-value pairs. For example:

    <parameter>
      <name>defaultIndexUrl</name>
      <value>rls://127.0.0.1:39281</value>
    </parameter>
    

The following settings must be properly configured:

  • proxyfileDir: the directory that you would like the DRS to temporarily store user proxies. No setting is necessary. This value may be empty.
  • requestfileDir: the directory that you would like the DRS to temporarily store request files. No setting is necessary. This value may be empty.
  • defaultIndexUrl: the connection URL for your installation of RLS running as a RLI service.
  • defaultRegistrationUrl: the connection URL for your installation of RLS running as a LRC service.
  • defaultReliableTransferUrl: the connection URL for your installation of the RFT ReliableFileTransferFactoryService.
  • proxyfileChangePermsCmd: the platform-dependent command to change file permissions to user-only read-write permissions.
  • The rest of the parameter/value pairs may retain the given default values.

4. Deploying

No further information is necessary.

5. Testing

This service does not provide a set of tests yet.

6. Security considerations

6.1. Service configuration files

The service configuration files such as the JNDI configuration file,jndi-config.xml, and the Web service deployment descriptor, server-config.wsdd, located in the $GLOBUS_LOCATION/etc/globus_wsrf_replicator directory, contain sensitive information such as database username and password. It is important to ensure that these files are readable only by the system administrator that is responsible for the container. During deployment, the permissions on these files are adjusted automatically, however, you should verify the permissions to ensure that they have been correctly set for your specific platform.

6.2. Delegated proxy credential files

Creating a Replicator requires that the user supply a delegated credential to the DRS during the initial creation request. The service retrieves the delegated credential from the Delegation Service and stores it on the file system. As part of the DRS configuration (see installation and configuration instructions), the user selects a directory to use for storage of delegated credentials. The default setting is for the DRS to store the file in the system's designated temporary directory (e.g., /tmp on many platforms). The service sets the permissions on the temporary file such that it can only be accessed by the user account used to run the container.

7. Troubleshooting

Generating verbose log output is a critical aid in troubleshooting of the DRS and is useful when communicating problems to Globus support lists. To increase logging detail, add the following line to the $GLOBUS_LOCATION/container-log4j.properties file.

 ...
 log4j.category.org.globus.replica=DEBUG
 ...