Globus 4.0.0 Instalation

From Research Computing

Table of contents

Under Construction

Developer: Stoytcho Stoev (http://www.cs.gc.cuny.edu/~sstoev)

Download and install the GPT package from www.globus.org

This requires PERL 5 or greater. The instructions from www.globus.org require no additional comment.

Unzip and untar the file:

% tar xfz gpt-*.tar.gz 

This will create a directory named "gpt-version/". cd into the directory:

% cd gpt-*

Set up the environment variables. The variable GLOBUS_LOCATION should point to the location where the package is installed. You may set this variable in /etc/profile or in .bashrc in globus directory. In our case $GLOBUS_HOME is holds the path to the home directory of the user/account associated with administering GLOBUS :

GLOBUS_LOCATION=$GLOBUS_HOME/gt4
GPT_LOCATION=$GLOBUS_HOME/gt4

If you are upgrading from previous package then the best option is to use

env

to see the variables that are associated with the old version and to change them respectivly


Run build_gpt. This will install GPT into $GPT_LOCATION.

% ./build_gpt

Install the globus server binaries for linux.

[root@wildebeest gt4]# $GPT_LOCATION/sbin/gpt-install \ 
globus-all-server-2.4.0-i686-pc-linux-gnu-bin.tar.gz

Install the globus client binaries for linux

[root@wildebeest gt4]# $GPT_LOCATION/sbin/gpt-install \
globus-all-client-4.0.0-i686-pc-linux-gnu-bin.tar.gz

Run the postinstall command

[root@wildebeest gt4]# $GPT_LOCATION/sbin/gpt-postinstall

Run the simple ca setup to create the simple CA

If the simple CA has been set up on another host and you have received a package file from your local grid CA of the form:

Install the CA setup tarball

# $GPT_LOCATION/sbin/gpt-build -install-only globus_simple_ca_844eb767_setup-0.12.tar.gz

Run the postinstall

[root@wildebeest gt4]# $GPT_LOCATION/sbin/gpt-postinstall

Run the ca setup distribution package with the default option

/opt/gt4/setup/globus_simple_ca_844eb767_setup/setup-gsi -default

Install the SGE job manager and job reporter modules

$GPT_LOCATION/sbin/gpt-build globus_gram_job_manager_setup_sge-0.9.tar.gz
$GPT_LOCATION/sbin/gpt-postinstall
$GPT_LOCATION/sbin/gpt-build globus_gram_reporter_setup_sge-0.8.tar.gz
$GPT_LOCATION/sbin/gpt-postinstall

Generate and sign host, LDAP and user certificates

a. generate the host certificate

cd /etc/grid-security
grid-cert-request -service host –host monad.gc.cuny.edu

b. sign the certificate

$GLOBUS_LOCATION/bin/grid-ca-sign –in hostcert_request.pem –out hostcert.pem

c. generate the LDAP certificate

grid-cert-request -service ldap –host monad.gc.cuny.edu

This creates the LDAP certificate request in /etc/grid-security/ldap.

d. Sign the certificate

cd /etc/grid-security
grid-cert-request -service host –host monad.gc.cuny.edu
$GLOBUS_LOCATION/bin/grid-ca-sign –in ldapcert_request.pem –out ldapcert.pem

e. User certificates are generated and signed following the procedure in the IBM Grid Toolbox system administration guide.

User setup will be documented elsewhere.

Add services to /etc/services

# Local services
 
gsigatekeeper 2119/tcp # Globus Gatekeeper
gsiftp 2811/tcp # Globus GridFTP

Add configurations files to /etc/xinetd.d and restart xinetd

a. Create a file /etc/xinetd.d/globus-gatekeeper with the following contents:


service gsigatekeeper
{
socket_type = stream
protocol = tcp
wait = no
user = root
env = LD_LIBRARY_PATH=/opt/gt4/lib
server = /opt/gt4/sbin/globus-gatekeeper
server_args = -conf /opt/gt4/etc/globus-gatekeeper.conf
disable = no
env = GLOBUS_TCP_PORT_RANGE=40000,40500
}


b. Create a file /etc/xinetd.d/globus-gatekeeper with the following contents:


service gsiftp
{
instances = 1000
socket_type = stream
wait = no
user = root
env = LD_LIBRARY_PATH=/opt/gt4/lib
server = /opt/gt4/sbin/in.ftpd
server_args = -l -a -G /opt/gt4
log_on_success += DURATION USERID
log_on_failure += USERID
nice = 10
disable = no
env = GLOBUS_TCP_PORT_RANGE=40000,40500
}