QCG Broker Client Installation

THE INSTALLATION PROCEDURE HAS BEEN TESTED WITH SCIENTIFIC LINUX 5.5, WHICH IS THE RECOMMENDED VERSION.

Requirements

• Packages requirements. All packages required by QCG-Broker client will be automatically instaled by YUM during the installation of qcg-broker-client package.
  • Java (>= 1.5)
    

    For SL5.x

    yum install java-1.6.0-sun-compat.x86_64
    

  • Apache Ant (>= 1.6) ("Optional tasks for ant" are required. For SL5.x the ant-nodeps.x86_64 package must be installed)

    For SL5.x

    yum install ant.x86_64 ant-nodeps.x86_64
    

  • xml-commons-apis - installation of this package is not mandatory, but is recommended to avoid confusing information about not important errors.

    For SL5.x

    yum install xml-commons.x86_64 xml-commons-apis.x86_64
    

• trusted CA certificates To enable secure communication between client and QCG-Broker service set of trusted CA certificates must be copied either into /etc/grid-security/certificates directory or configured for every user.

For the PL-Grid project: Install Polish Grid and PL-Grid Simpla-CA certificates:

wget https://dist.eugridpma.info/distribution/igtf/current/accredited/RPMS/ca_PolishGrid-1.40-1.noarch.rpm
wget http://software.plgrid.pl/packages/general/ca_PLGRID-SimpleCA-1.0-2.noarch.rpm
wget https://dist.eugridpma.info/distribution/util/fetch-crl/fetch-crl-2.8.5-1.noarch.rpm

rpm -i ca_PolishGrid-1.40-1.noarch.rpm 
rpm -i ca_PLGRID-SimpleCA-1.0-2.noarch.rpm 

#install certificate revocation list fetching utility 
rpm -i fetch-crl-2.8.5-1.noarch.rpm

#get fresh CRLs now
/usr/sbin/fetch-crl 

#install cron job for it
cat > /etc/cron.daily/fetch-crl.cron << EOF
#!/bin/sh 
/usr/sbin/fetch-crl
EOF

chmod a+x /etc/cron.daily/fetch-crl.cron

• User's credential To secure the communication and authenticate the user to the service the X509 proxy certificate is needded. Client expects the access either to proxy certificate file or to pair of user certificate and private key files in "pem" format.

If the user has the certificate in p12 format, the certificate has to be first converted to pem format files.

  openssl pkcs12 -nocerts -in cert.p12 -out userkey.pem
  openssl pkcs12 -clcerts -nokeys -in cert.p12 -out usercert.pem

Installation

The package is designed for Scientific Linux 5.x (recommended and tested version is 5.5). The installation process requires root privileges.

• Install PL-Grid or/and QCG repositories:
  • Official PL-Grid repository

    rpm -Uvh http://software.plgrid.pl/packages/repos/plgrid-repos-2010-2.noarch.rpm
    

  • QosCosGrid testing repository

    cat > /etc/yum.repos.d/qcg.repo << EOF
    [qcg]
    name=QosCosGrid YUM repository
    baseurl=http://fury.man.poznan.pl/qcg-packages/sl/x86_64/
    enabled=1
    gpgcheck=0
    EOF
    

• install QCG-Broker client using YUM Package Manager:

  yum install qcg-broker-client
  

• setup deployment configuration - all configuration variables are placed in /opt/plgrid/qcg/share/qcg-broker-client/client-deploy.prop file
  • client.deploy.dir - directory where the QCG-Broker client was installed (/opt/plgrid/qcg/share/qcg-broker-client). Please do not modify this property.
  • client.service.host - QCG-Broker service hostname
  • client.service.port - QCG-Broker service port
  • client.service.dn - QCG-Broker credential DN

    vim /opt/plgrid/qcg/qcg-broker/client/etc/qcg-broker-client.conf
    

• configure QCG-Broker command-line client

  ./config.sh
  

Usage

For the description how to use the QCG-Broker client please see the QCG-Broker User Guide.