- Download userkey.pem and usercert.pem from http://uabgrid.uab.edu (click on Other Tools -> Manage Certificates)
- Save these two files to given resource in ~/.globus directory and change userkey.pem permissions to read only.
- As root, save the 56498486.signing_policy and UAB-root.crt
to /etc/grid-security/certificates directory on given resource.
Those files can be obtained with the following set of commands:
cd /etc/grid-security/certificates
wget http://webapp.lab.ac.uab.edu/UAB-root.crt
wget https://www.pki.virginia.edu/nmi-bridge/certs/56498486.signing_policy
ln -s UAB-root.crt 56498486.0 - As root, add an entry to grid-mapfile - this entry can be obtained by executing grid-proxy-info by particular user (after the previous steps have been completed) and then copy the issuer line into grid-mapfile (e.g.: /C=US/ST=Alabama/L=Birmingham/O=University of Alabama at Birmingham/OU=UABgrid/CN=afgane/emailAddress=afgane@uab.edu)
Tuesday, November 28, 2006
Trusting UAB CA on a UABGrid resource
There are four (4) things that need to be changed on every resource to get the UAB CA certificate where given resource can be used for job submission and as a job submission source (NOTE: all the steps except step 3 need to be done for every user on every resource):
Subscribe to:
Post Comments (Atom)
No comments:
Post a Comment