ComputingDocumentation: Difference between revisions

Jump to navigation Jump to search
Fix instructions about importing certificate
No edit summary
(Fix instructions about importing certificate)
 
(33 intermediate revisions by 4 users not shown)
== How to get a Grid User Certificate ==
 
* Depending upon the university, research institution or location you have to choose the certification authority
* For USUSA and other parts of Noth/South America, Opengo Scienceto GridCILogon ([https://oimcilogon.grid.iu.edu/oimorg/certificate <span style="color:#0645AD;">OSGCILogon</span>]) isand thechoose certification"University authorityof Wisconsin-Madison" as the provider.
* For UK, the equivalent is [httphttps://wwwportal.gridppca.grid-support.ac.uk/deploymentcaportal/users/certificate.html <span style="color:#0645AD;">GridPP</span>]
* Get your certificate from the appropriate certification authority site above, and then follow steps 3-5 on this page [http://www.hep.wisc.edu/cms/comp/accountSetup.html#grid_cert <span style="color:#0645AD;">here</span>]
 
== How to register your Grid Certificate in the LZ VO ==
 
* If you already have a grid user certificate, then you would like to \
register your certificate with LZ VO in order to use its resources
* Using a web browser go to the [https://voms.hep.wisc.edu:8443/voms/lz <span style="color:#0645AD;">LZ VOMS server</span>]
==> If your browser does not trust the voms.hep.wisc.edu https certificate, follow these instructions [ [[InstallCACert]] ] to import the CA certificate into your browser.
*==> Use your grid certificate (signature) to authenticate
* Fill in the form with all the information and click submit
* You should receive an email that tells you to confirm the submission
* A VO representative will approve your ticket only after your confirmation
 
== Accessing LZ Storage at Wisconsin ==
== How to get a Grid User Certificate ==
 
# ssh to the LZ login server at Wisconsin if you have an account there
# we can provide you an account if you need one, send mail to [mailto:help@hep.wisc.edu here]
# or your machine with access to grid tools
ssh <login name>@lzlogin.hep.wisc.edu
# create voms-proxy
voms-proxy-init --voms=lz ## it will prompt password for you to type
 
# This will tell you that you are grid user with LZ VO
gsido whoami (should return something like lz00x)
 
# Create your user directory in
gsido mkdir -p /hdfs/lz/user/<login name>
 
# Copy files from local directory to the storage area
gsido cp <some file> /hdfs/lz/user/<login name>
 
# Copy files using Grid computing copy clients and storage elements
lcg-cp /tmp/tmpfile -bvvD srmv2 srm://cmssrm2.hep.wisc.edu:8443/srm/v2/server?SFN=/hdfs/lz/user/tapas/tt
gfal-copy -v file:///tmp/tmpfile srm://cmssrm2.hep.wisc.edu:8443/srm/v2/server?SFN=/hdfs/lz/user/tapas/
 
== Accessing LZ CVMFS repository ==
 
# If any of your machines have /cvmfs mounted, then give this a try :
ls /cvmfs/lz.opensciencegrid.org
 
# Currently, this repository can be written from a machine (lzsoft.hep.wisc.edu) hosted at Wisconsin
In order to have write privileges please contact us.
 
== Firefox-39.0 Error while accessing VOMS server ==
* When trying to access voms server web page using Firefox-39.0 one may get the following error message :
SSL received a weak ephemeral Diffie-Hellman key in Server Key Exchange handshake message.
(Error code: ssl_error_weak_server_ephemeral_dh_key)
 
* The workaround is to do the following:
1) In FireFox, enter "about:config" in the URL field and press enter.
2) Accept the "This might void your warranty!" warning
3) In the search field at the top, enter "security.ssl3.dhe_rsa_aes"
4) Double click each result (128 and 256) to toggle the Value to "false"
 
 
== Getting Gitlab access ==
 
Begin by creating a Gitlab account, the details are in the [https://docs.google.com/presentation/d/1DOgM2hlBaTrMgyxoRPcqRaVp7wXi1FdD9YhTDxk9Cmo/edit#slide=id.g2781c5cc35_0_129 LZ primer]
* Depending upon the university, research institution or location you have to choose the certification authority
Follow the directions here to create an ssh key: https://lz-git.ua.edu/help/ssh/README
* For US and other parts Noth/South America Open Science Grid ([https://oim.grid.iu.edu/oim/certificate <span style="color:#0645AD;">OSG</span>]) is the certification authority
Copy your ssh key here: https://lz-git.ua.edu/profile/keys to associate your computing account with your git account.
* For UK, the equivalent is [http://www.gridpp.ac.uk/deployment/users/certificate.html <span style="color:#0645AD;">GridPP</span>]
* Follow instructions given on those pages to obtain your grid user certificate
 
== HELP CONTACTS ==

Navigation menu