Installation of globus 1.1.4 (on ouhep1): Download globus-1.1.4, globus-1.1.3-giis-update, SSLeay-0.9.0b, and OpenLDAP-1.2.7-globus tar.gz files from http://www.globus.org/toolkit/download/ As root: Untar all of them into with # cd # tar zxvf *.tar.gz Install SSLeay: Make sure perl is in /usr/local/bin/, or edit ./Configure script to point to correct perl location. # cd SSLeay-0.9.0b # ./Configure linux-elf # make # make test # make install Install OpenLDAP: # cd ../OpenLDAP-1.2.7-globus # ./configure --prefix=/usr/local/OpenLDAP-1.2.7-globus --enable-slapd \ --enable-shell --disable-ldbm --without-threads # make depend # make # cd tests # make Problems: ln: ./data: cannot overwrite directory make: [all-local] Error 1 (ignored) Initiating LDAP tests... >>>>> Executing all LDAP tests... >>>>> Test Directory: . >>>>> Backend: ldbm >>>>> Starting test001-ldif2ldbm ... running defines.sh . ldbm Datadir is ./data Cleaning up in ./test-db... Running ldif2ldbm to build slapd database... ./scripts/test001-ldif2ldbm: ../servers/slapd/tools/ldif2ldbm: No such file or directory ldif2ldbm failed! >>>>> ./scripts/test001-ldif2ldbm failed (exit 126) make: *** [all-local] Error 126 Install anyway: # cd .. # make install Now, install globus: Create user and group globus, and create /usr/local/globus and /opt/globus and give ownership to globus. Also, need to give user globus access/ownership to /globus. Then, as user globus: First, apply patch: # cd ../globus # cp -p ../1.1.3-giis-patch/grid-info-site-backend.in \ InformationServices/mds/services Then fix globus_gass_cache error with globus-job-get-output: Problem is that there's a bug in globus that tries to execute $bindir/globus-sh-exec with argument $bindir/globus-gass-cache in $bindir/globus-job-get-output ($bindir = /usr/local/globus/services/i686-pc-linux-gnu/bin/). Check http://www-unix.globus.org/mail_archive/discuss/msg00413.html for details. # cd /globus/FileAccess/gass/programs/ # emacs configure.in : add ' globus_gass_cache' at the end of the SUBDIRS list and comment out the 'test' section. then # autoconf # cd ../../../ Now patch modules: # patch -p 1 < ../modules-patch.txt Next: io-read-patch; patch doesn't work, so just edit Miscellaneous/io/library/globus_io_securesocket.c by hand, according to io-read-patch.txt. Then globus install: # ./globus-install domainname: nhn.ou.edu ldap: /usr/local/OpenLDAP-1.2.7-globus globus: /usr/local/globus parallel build: yes (keep all other defaults) Then add MDS (GIIS/GRIS) and globus-condor interface stuff: In /usr/local/globus/etc/grid-info-hosts.conf, add: ouhep2.nhn.ou.edu /usr/local/globus/services/i686-pc-linux-gnu/bin \ ouhep1.nhn.ou.edu - This should configure the GIIS/GRIS servers during setup and deployment. (not sure this is necessary, and it doesn't seem to help querying ouhep2) In /usr/local/globus/etc/globus-services.conf, add: ouhep1.nhn.ou.edu jobmanager-condor stderr_log,local_cred - \ ${libexecdir}/globus-jobmanager globus-jobmanager \ -conf ${sysconfdir}/globus-jobmanager-condor.conf -type condor \ -rdn jobmanager-condor -machine-type unknown This will configure the condor interface during deployment. Then setup: # export GLOBUS_INSTALL_PATH=/usr/local/globus # /usr/local/globus/sbin/globus-setup M D S : S E T U P P R O C E D U R E This script will ask some questions about site specific information. The answers to these questions will help to setup your local MDS infrastructure. Pressing RETURN in response to such a question will enable the default. This script will overwrite the file: /usr/local/globus/etc/grid-info.conf Do you wish to continue (y/n) [y] : ======================================================================== (1) Hostname for site's organization server: [ ouhep1.nhn.ou.edu ] (2) Port number for site's organization server: [ ] (3) DN for the organization: [ dc=nhn, dc=ou, dc=edu, o=Grid ] (4) Save settings (5) Quit ======================================================================== (h)elp ======================================================================== 2 Enter the "port number" for your site's MDS server [ ] : 2136 ======================================================================== (1) Hostname for site's organization server: [ ouhep1.nhn.ou.edu ] (2) Port number for site's organization server: [ 2136 ] (3) DN for the organization: [ dc=nhn, dc=ou, dc=edu, o=Grid ] (4) Save settings (5) Quit ======================================================================== (h)elp ======================================================================== 4 ======================================================================== (1) Hostname for site's organization server: [ ouhep1.nhn.ou.edu ] (2) Port number for site's organization server: [ 2136 ] (3) DN for the organization: [ dc=nhn, dc=ou, dc=edu, o=Grid ] (4) Save settings (5) Quit ======================================================================== (h)elp ======================================================================== 5 G S I : C O N F I G U R A T I O N P R O C E D U R E Before you use the Grid Security Infrastructure, you should first define the DN (distinguished name) that should be used for your organization's X509 certificates. If you do not define a DN, a default DN will be assigned to you. This script will ask some questions about site specific information. This information is used to configure the Grid Security Infrastructure for your site. For some questions, a default response is given in []. Pressing RETURN in response to such a question will enable the default. This script will overwrite the file -- /usr/local/globus/etc/grid-security.conf Do you wish to continue (y/n) [y] : ======================================================================== (1) Base DN for user certificates [ ou=nhn.ou.edu, o=Globus, o=Grid ] (2) Base DN for host certificates [ o=Globus, o=Grid ] ======================================================================== (q) save, configure the GSI and Quit (c) Cancel (exit without saving or configuring) (h) Help ======================================================================== q The setup is complete. -----------------end of globus-setup----------- Then deployment: # /usr/local/globus/sbin/globus-local-deploy /opt/globus register: yes Then performed tasks suggested in /opt/globus/tmp/globus-root-instructions IMPORTANT: put local userid next to DN in /opt/globus/etc/grid-mapfile ! For example: "/O=Grid/O=Globus/OU=nhn.ou.edu/CN=Horst Severini" hs Now, modify several condor config files: In /opt/globus/etc/globus-jobmanager-condor.conf: Remove # Edit the following two lines to complete # the configuration of your condor jobmanager (not strictly necessary, but you'll get lots of warnings in the log file if you don't, since whichever script uses this file doesn't recognize #'s and complains that it will ignore those lines, one word at a time!) and change -condor-arch -condor-os to -condor-arch INTEL -condor-os LINUX Warning: case sensitive! And now, and this is not written anywhere - at least I didn't find it - if condor wasn't already installed at the time of the globus installation, in /opt/globus/etc/i686-pc-linux-gnu/globus-sh-commands.sh, set the following condor commands: GLOBUS_SH_CONDOR_Q="/usr/local/bin/condor_q" GLOBUS_SH_CONDOR_RM="/usr/local/bin/condor_rm" GLOBUS_SH_CONDOR_STATUS="/usr/local/bin/condor_status" GLOBUS_SH_CONDOR_SUBMIT="/usr/local/bin/condor_submit" And need to fix an I/O bug in /opt/globus/libexec/globus-script-condor-submit; comment out the following lines (which are commented out here): # if [ "${condor_universe}" = "vanilla" ] ; then # echo "Initialdir = /var/tmp" # echo "Input = /dev/null" # echo "Output = /dev/null" # echo "Error = /dev/null" # else eval echo "Initialdir = ${grami_directory}" eval echo "Input = ${grami_stdin}" eval echo "Output = ${grami_stdout}" eval echo "Error = ${grami_stderr}" # fi Also, add export GLOBUS_INSTALL_PATH=/usr/local/globus and source . ${GLOBUS_INSTALL_PATH}/etc/globus-user-setup.sh (which will add path=$path:/usr/local/globus/tools/i686-pc-linux-gnu/bin) to standard login scripts (/etc/profile.d/globus.[c]sh) To request personal certificate, as user hs: # export GLOBUS_INSTALL_PATH=/usr/local/globus # /usr/local/globus/tools/i686-pc-linux-gnu/bin/grid-cert-request Then save received email as ~/.globus/usercert.pem