Tuesday, November 28, 2006

Trusting UAB CA on a UABGrid resource

There are four (4) things that need to be changed on every resource to get the UAB CA certificate where given resource can be used for job submission and as a job submission source (NOTE: all the steps except step 3 need to be done for every user on every resource):
  1. Download userkey.pem and usercert.pem from http://uabgrid.uab.edu (click on Other Tools -> Manage Certificates)
  2. Save these two files to given resource in ~/.globus directory and change userkey.pem permissions to read only.
  3. As root, save the 56498486.signing_policy and UAB-root.crt
    to /etc/grid-security/certificates directory on given resource.
    Those files can be obtained with the following set of commands:
    cd /etc/grid-security/certificates
    wget http://webapp.lab.ac.uab.edu/UAB-root.crt
    wget https://www.pki.virginia.edu/nmi-bridge/certs/56498486.signing_policy
    ln -s UAB-root.crt 56498486.0
  4. As root, add an entry to grid-mapfile - this entry can be obtained by executing grid-proxy-info by particular user (after the previous steps have been completed) and then copy the issuer line into grid-mapfile (e.g.: /C=US/ST=Alabama/L=Birmingham/O=University of Alabama at Birmingham/OU=UABgrid/CN=afgane/emailAddress=afgane@uab.edu)

No comments: