170 likes | 187 Views
Tier3 User Desktop linux installation and Managing maintaining AFS clients. Sabah Salih HEPP The University of Manchester UK. Tier0 Tier1 Tier2. physicist. Nobel prize. Experiment A- Accelerators R&D B- Atlas C- Babar D- D0 E- Grid R&D F- Other R&D such FP420 G-Theory.
E N D
Tier3 User Desktop linux installation and Managing maintaining AFS clients Sabah Salih HEPP The University of Manchester UK Sabah.salih@manchester.ac.uk
Tier0 Tier1 Tier2 physicist Nobel prize Sabah.salih@manchester.ac.uk
Experiment A- Accelerators R&D B- Atlas C-Babar D- D0 E- Grid R&D F- Other R&D such FP420 G-Theory Sabah.salih@manchester.ac.uk
User Desktop 1- Core Software 2- Extra scientific Software 3- Extra none scientific Software 4- Collaborative tools 5- Grid software 6- CERN Extra 6- Security Sabah.salih@manchester.ac.uk
Core Software Network Servers curl sndconfig Editors gv gaim Kernel Development transfig gnomemeeting System Tools xfig mozilla-mail Administration Tools joe mozilla-chat Developer Suite lm_sensors mozilla Development Tools perl-suidperl X Window System anaconda Authoring and Publishing anaconda-runtime Printing Support pine Graphics xemacs OpenAFS Client xmms-mp3 Games and Entertainment xmms-devel Text-based Internet xmms-skins Packages added to Scientific Linux mpg321 Office/Productivity gimp-perl YUM gnome-audio-extra APT gnome-spell Engineering and Scientific java-1.4.2-sun-compat GNOME Desktop Environment jpackage-utils KDE Desktop Environment lynx Sabah.salih@manchester.ac.uk
Extra scientific Software Axodrw Jaxodraw openmotif Xv lesstif Acroread xmgrace Mozilla-acroread CLHEP Cernlib ROOT Mathematica Tetex Tetex-extra Mounttero for usb automount Kile Bbftp-cliewnt Sabah.salih@manchester.ac.uk
Extra none scientific Software Xcdroast RealPlayer Ogle Xine Mplayer DVD RW K3B Sabah.salih@manchester.ac.uk
Grid Software We install our Desktop as User Interface Edg-gridftp-client Gssklog-client Sabah.salih@manchester.ac.uk
lcgenv.sh > /etc/profile.d > > 1- One install in pc52 > > #!/bin/sh > if test "x${LCG_ENV_SET+x}" = x; then > export LCG_GFAL_INFOSYS=lcgbdii02.gridpp.rl.ac.uk:2170 > export MYPROXY_SERVER=lcgrbp01.gridpp.rl.ac.uk > export PATH=${PATH}:/opt/d-cache/bin > export LD_LIBRARY_PATH=${LD_LIBRARY_PATH}:/opt/d-cache/dcap/lib > export SRM_PATH=/opt/d-cache/srm > export VO_ATLAS_SW_DIR=/nfs/atlas > export VO_ATLAS_DEFAULT_SE=bohr0013.tier2.hep.man.ac.uk > export VO_ALICE_SW_DIR=/nfs/alice > export VO_ALICE_DEFAULT_SE=bohr0013.tier2.hep.man.ac.uk > export VO_LHCB_SW_DIR=/nfs/lhcb > export VO_LHCB_DEFAULT_SE=bohr0013.tier2.hep.man.ac.uk > export VO_CMS_SW_DIR=/nfs/cms > export VO_CMS_DEFAULT_SE=bohr0013.tier2.hep.man.ac.uk > export VO_DTEAM_SW_DIR=/nfs/dteam > export VO_DTEAM_DEFAULT_SE=bohr0013.tier2.hep.man.ac.uk > export VO_BABAR_SW_DIR=/nfs/babar > export VO_BABAR_DEFAULT_SE=bohr0013.tier2.hep.man.ac.uk > export VO_DZERO_SW_DIR=/nfs/dzero > export VO_DZERO_DEFAULT_SE=bohr0013.tier2.hep.man.ac.uk > fi Sabah.salih@manchester.ac.uk
2- One install in pc91 #!/bin/sh if test "x${LCG_ENV_SET+x}" = x; then export LCG_GFAL_INFOSYS=lcgbdii02.gridpp.rl.ac.uk:2170 export MYPROXY_SERVER=lcgrbp01.gridpp.rl.ac.uk export PATH=${PATH}:/opt/d-cache/srm/bin:/opt/d-cache/dcap/bin export LD_LIBRARY_PATH=${LD_LIBRARY_PATH}:/opt/d-cache/dcap/lib export SRM_PATH=/opt/d-cache/srm export VO_ATLAS_DEFAULT_SE=bohr0013.tier2.hep.man.ac.uk export VO_ALICE_DEFAULT_SE=bohr0013.tier2.hep.man.ac.uk export VO_LHCB_DEFAULT_SE=bohr0013.tier2.hep.man.ac.uk export VO_CMS_DEFAULT_SE=bohr0013.tier2.hep.man.ac.uk export VO_DTEAM_DEFAULT_SE=bohr0013.tier2.hep.man.ac.uk export VO_BABAR_DEFAULT_SE=bohr0013.tier2.hep.man.ac.uk export VO_DZERO_DEFAULT_SE=bohr0013.tier2.hep.man.ac.uk export DPNS_HOST=bohr0013 export DPM_HOST=bohr0013 if [ -z "$PYTHONPATH" ]; then export PYTHONPATH="/opt/lcg/lib/python" else export PYTHONPATH="${PYTHONPATH}:/opt/lcg/lib/python" fi if [ -z "$PERLLIB" ]; then export PERLLIB="/opt/lcg/lib/perl" else export PERLLIB="${PERLLIB}:/opt/lcg/lib/perl" fi fi Sabah.salih@manchester.ac.uk
due the fallowing file /etc/profile.d/z_edg-profile.sh the path get change from this [root@pc47 root]# echo $PATH /opt/lcg/bin:/opt/lcg/sbin:/usr/kerberos/sbin:/usr/kerberos/bin:/opt/globus/bin: /opt/globus/sbin:/opt/edg/bin:/usr/local/bin:/opt/edg/sbin:/usr/local/sbin: /usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin:/usr/X11R6/bin:/cern/patchy/4.15/bin: /cern/pro/bin:/opt/glite/bin:/opt/glite/externals/bin:/opt/gpt/sbin: /usr/site/manchesterSL3/bin:/usr/lib/jre/bin:/opt/d-cache/srm/bin: /opt/d-cache/dcap/bin:/usr/site/mathematica/5.0/Executables:/root/bin to this [root@pc47 root]# echo $PATH /usr/java/j2sdk1.4.2_08/bin:/opt/lcg/bin:/opt/lcg/sbin:/usr/kerberos/sbin: /usr/kerberos/bin:/opt/globus/bin:/opt/globus/sbin:/opt/edg/bin:/usr/local/bin: /opt/edg/sbin:/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin: /usr/X11R6/bin:/cern/patchy/4.15/bin:/cern/pro/bin:/opt/glite/bin: /opt/glite/externals/bin:/opt/gpt/sbin:/usr/site/manchesterSL3/bin: /usr/lib/jre/bin:/opt/d-cache/srm/bin:/opt/d-cache/dcap/bin: /usr/site/mathematica/5.0/Executables:/opt/edg/bin:/opt/edg/sbin:/opt/edg/bin:/opt/edg/sbin:/root/bin and the default kinit will become /usr/java/j2sdk1.4.2_08/bin/kinit not /usr/kerberos/bin/kinit and when you type your passwd you see it in txt. Sabah.salih@manchester.ac.uk
CERN Extra afs_tools edg-caf-perl Arc edg-ccm arc-server edg-pan Automake17 edg-spma Bonobo f2c bonobo-devel flash-plugin CASTOR-client fsplit CASTOR-client-compat gal CASTOR-client-compat gtkhtml ccdb-tools heimdal cern-compat-locallinks krb4-workstation cern-config-printers lcm CERN-dummy-afs-provides mc CERN-nbtools mxconns CERN-texstyles ncftp Createrepo python2.3 Dmapi dmapi-devel Sabah.salih@manchester.ac.uk
Managing maintaining AFS clients Moving volumes from on server to another sh-2.05a$ vos mov adriana afs4 vicepc afs1 vicepc If you run afsservers you needthis for login Install the following rpms Openafs kpasswd echo 'auth sufficient /lib/security/pam_afs.so try_first_pass ignore_root' \ > /etc/pam.d/system-auth In “/usr/vice/etc” one need to update the following files CellServDB Casheinfo ThisCell Update krb5.conf Sabah.salih@manchester.ac.uk
[logging] default = FILE:/var/log/krb5libs.log kdc = FILE:/var/log/krb5kdc.log admin_server = FILE:/var/log/kadmind.log [libdefaults] ticket_lifetime = 24000 default_realm = FNAL.GOV dns_lookup_realm = false dns_lookup_kdc = false [realms] FNAL.GOV = { kdc = krb-fnal-1.fnal.gov:88 kdc = krb-fnal-2.fnal.gov:88 kdc = krb-fnal-3.fnal.gov:88 kdc = krb-fnal-4.fnal.gov:88 kdc = krb-fnal-5.fnal.gov:88 admin_server = krb-fnal-admin.fnal.gov default_domain=fnal.gov } Sabah.salih@manchester.ac.uk
PILOT.FNAL.GOV = { kdc = krb-pilot-1.fnal.gov:88 kdc = krb-pilot-2.fnal.gov:88 admin_server = krb-pilot-admin.fnal.gov default_domain=fnal.gov } [domain_realm] .fnal.gov = FNAL.GOV [kdc] profile = /var/kerberos/krb5kdc/kdc.conf [appdefaults] pam = { debug = false ticket_lifetime = 36000 renew_lifetime = 36000 forwardable = true krb4_convert = false } Sabah.salih@manchester.ac.uk
Collaborative tools 1- mail “exmh, pine, thunderbird” 1- H323 ? 3- VRVS 4- Phone “skype” 6- Access Grid ? Sabah.salih@manchester.ac.uk
Security hosts.allow hosts deny Sabah.salih@manchester.ac.uk