Grid hints

Fra mn/fys/epf
Hopp til: navigasjon, søk

Voms-proxy-init on our (ATLAS, Linux) desktops

  • somewhere in your linux setup file (e.g. ~/.envir for a UiO desktop): export ATLAS_LOCAL_ROOT_BASE=/cvmfs/atlas.cern.ch/repo/ATLASLocalRootBase alias setupATLAS="source ${ATLAS_LOCAL_ROOT_BASE}/user/atlasLocalSetup.sh"
  • setupATLAS
  • lsetup rucio
  • voms-proxy-init should now be available

Making LSC files for VOMS servers

  • Create the LSC file: (example)
[read@scalar dulcinea]$ openssl s_client -CApath /etc/grid-security/certificates  -prexit -connect lcg-voms.cern.ch:8443 2>/dev/null | grep "issuer\|subject" |sed -e s/^[^=]*=// > lcg-voms.cern.ch.lsc

[read@scalar dulcinea]$ cat lcg-voms.cern.ch.lsc 
/DC=ch/DC=cern/OU=computers/CN=lcg-voms.cern.ch
/DC=ch/DC=cern/CN=CERN Trusted Certification Authority
  • Move the LSC file to /etc/grid-security/vomsdir/<VO>/<vomsServer>.lsc, e.g.
    /etc/grid-security/vomsdir/atlas/lcg-voms.cern.ch

Obtaining a grid certificate

We used to apply for certificates from the NorduGrid Certificate Authority (CA), but this can be a patience-testing activity. Instead, all registered CERN users have the possibility to apply for a grid certificate from the CERN CA.