Configuring a CE to support the desktopgrid VO

These are the steps necessary to configure a CE to support the VO named desktopgrid.vo.edges-grid.eu. This is for you if you are a gLite administrator who wants to support this VO to allow jobs bridged from desktop grids via the DG ⇒ EGEE bridge to run on your resources.

  1. Configure the EDGeS YUM repository and install the VOMS certificate:
    cd /etc/yum.repos.d/
    wget http://intraweb.edges-grid.eu/public/grid_deployment/edges.repo
    yum install edges-vomscerts
    
    Note: This step is optional if you use a recent gLite version with lsc files and you specify VOMS_CA_DN in the VO config.
  2. Add pool accounts and mappings to users.conf and groups.conf:
    • users.conf:
      27000:desktopgsgm:27000:desktopg:desktopgrid.vo.edges-grid.eu:sgm:
      27001:desktopg001:27000:desktopg:desktopgrid.vo.edges-grid.eu::
      27002:desktopg002:27000:desktopg:desktopgrid.vo.edges-grid.eu::
      27003:desktopg003:27000:desktopg:desktopgrid.vo.edges-grid.eu::
      27004:desktopg004:27000:desktopg:desktopgrid.vo.edges-grid.eu::
      27005:desktopg005:27000:desktopg:desktopgrid.vo.edges-grid.eu::
      27006:desktopg006:27000:desktopg:desktopgrid.vo.edges-grid.eu::
      27007:desktopg007:27000:desktopg:desktopgrid.vo.edges-grid.eu::
      27008:desktopg008:27000:desktopg:desktopgrid.vo.edges-grid.eu::
      27009:desktopg009:27000:desktopg:desktopgrid.vo.edges-grid.eu::
      27010:desktopg010:27000:desktopg:desktopgrid.vo.edges-grid.eu::
      27011:desktopg011:27000:desktopg:desktopgrid.vo.edges-grid.eu::
      27012:desktopg012:27000:desktopg:desktopgrid.vo.edges-grid.eu::
      27013:desktopg013:27000:desktopg:desktopgrid.vo.edges-grid.eu::
      27014:desktopg014:27000:desktopg:desktopgrid.vo.edges-grid.eu::
      27015:desktopg015:27000:desktopg:desktopgrid.vo.edges-grid.eu::
      27016:desktopg016:27000:desktopg:desktopgrid.vo.edges-grid.eu::
      27017:desktopg017:27000:desktopg:desktopgrid.vo.edges-grid.eu::
      27018:desktopg018:27000:desktopg:desktopgrid.vo.edges-grid.eu::
      27019:desktopg019:27000:desktopg:desktopgrid.vo.edges-grid.eu::
      27020:desktopg020:27000:desktopg:desktopgrid.vo.edges-grid.eu::
      27021:desktopg021:27000:desktopg:desktopgrid.vo.edges-grid.eu::
      27022:desktopg022:27000:desktopg:desktopgrid.vo.edges-grid.eu::
      27023:desktopg023:27000:desktopg:desktopgrid.vo.edges-grid.eu::
      27024:desktopg024:27000:desktopg:desktopgrid.vo.edges-grid.eu::
      27025:desktopg025:27000:desktopg:desktopgrid.vo.edges-grid.eu::
      
    • groups.conf
      "/desktopgrid.vo.edges-grid.eu/ROLE=SGMAdmin":::sgm:
      "/desktopgrid.vo.edges-grid.eu"::::
      
  3. Add VO configuration to vo.d named desktopgrid.vo.edges-grid.eu:
    SW_DIR=$VO_SW_DIR/desktopgrid.vo.edges-grid.eu
    DEFAULT_SE=$SE_HOST
    STORAGE_DIR=$CLASSIC_STORAGE_DIR/desktopgrid.vo.edges-grid.eu
    VOMS_SERVERS="vomss://voms.grid.edges-grid.eu:8443/voms/desktopgrid.vo.edges-grid.eu?/desktopgrid.vo.edges-grid.eu"
    VOMSES="'desktopgrid.vo.edges-grid.eu voms.grid.edges-grid.eu 15000 /C=HU/O=NIIF CA/OU=GRID/OU=MTA SZTAKI/CN=voms.grid.edges-grid.eu desktopgrid.vo.edges-grid.eu'"
    VOMS_CA_DN="'/C=HU/O=NIIF/OU=Certificate Authorities/CN=NIIF Root CA'"
    
    Note: Everything after an = sign should be on a single long line. No line breaks are allowed between the quotes.

  4. Add or change the following lines in site-info.def as needed:
    VOS="desktopgrid.vo.edges-grid.eu"
    QUEUES="desktopg"
    DESKTOPG_GROUP_ENABLE="desktopgrid.vo.edges-grid.eu"
    
  5. Run yaim to reconfigure your CE
  6. If you're behind a firewall you should allow 193.224.187.128/25 to access your services.
  7. Finally, send the following information to the VO manager (edges-vomsadm _at_ mail.edges-grid.eu):
    • SITE_NAME (as set in your site-info.def, the site name you are publishing in BDII)
    • The URL of your site BDII (something like ldap://host:port/mds-vo-name=<SITE_NAME>,o=grid)
    • The IP addresses of your CE and all WNs (this can be an address range or a NAT address) where outbound connections from your site may come (this is needed because the EDGeS services are firewalled)


The VO config and example users.conf, groups.conf are also available here.