| | 1 | The guide describes the procedure of installation and configuration of the gridmap-file-generator tool (PLGrid only). |
| | 2 | |
| | 3 | * Create the ''qcg-dev'' group - this group is allowed to read the configuration and log files. |
| | 4 | {{{ |
| | 5 | #!div style="font-size: 90%" |
| | 6 | {{{#!default |
| | 7 | groupadd -r qcg-dev |
| | 8 | }}} |
| | 9 | }}} |
| | 10 | |
| | 11 | * Install qcg grid-mapfile generator |
| | 12 | {{{ |
| | 13 | #!div style="font-size: 90%" |
| | 14 | {{{#!default |
| | 15 | yum install qcg-gridmapfilegenerator |
| | 16 | }}} |
| | 17 | }}} |
| | 18 | |
| | 19 | * Configure gridmapfilegenerator - remember to change |
| | 20 | * url property to your local ldap replica |
| | 21 | * search base |
| | 22 | * filter expression |
| | 23 | * security context |
| | 24 | {{{ |
| | 25 | #!div style="font-size: 90%" |
| | 26 | {{{#!default |
| | 27 | vim /opt/plgrid/qcg/etc/qcg-comp/plggridmapfilegenerator.conf |
| | 28 | }}} |
| | 29 | }}} |
| | 30 | |
| | 31 | * Run the gridmapfile generator in order to generate gridmapfile now |
| | 32 | {{{ |
| | 33 | #!div style="font-size: 90%" |
| | 34 | {{{#!default |
| | 35 | /opt/plgrid/qcg/sbin/qcg-gridmapfilegenerator.sh |
| | 36 | }}} |
| | 37 | }}} |
| | 38 | |
| | 39 | After installing and running this tool one can find three files: |
| | 40 | * /etc/grid-security/grid-mapfile.local - here you can put list of DNs and local unix account names that will be merged with data acquired from the local LDAP server |
| | 41 | * /etc/grid-security/grid-mapfile.deny - here you can put list od DN's (only DNs!) that you want to deny access to the GridFTP server |
| | 42 | * /etc/grid-security/grid-mapfile - the final gridmap file generated using the above two files and information available in local LDAP server. Do not edit this file as it is generated automatically! |
| | 43 | |
| | 44 | This gridmapfile generator script is run every 10 minutes. Moreover its issues `su - $USERNAME -c 'true' > /dev/null` for every new user that do not have yet home directory (thus triggering pam_mkhomedir if installed). |
