ComputingDocumentation: Difference between revisions

From LZ Computing
Jump to navigation Jump to search
No edit summary
(Fix instructions about importing certificate)
 
(18 intermediate revisions by 4 users not shown)
Line 2: Line 2:


* Depending upon the university, research institution or location you have to choose the certification authority
* Depending upon the university, research institution or location you have to choose the certification authority
* For USA and other parts of Noth/South America, Open Science Grid ([https://oim.grid.iu.edu/oim/certificate <span style="color:#0645AD;">OSG</span>]) is the certification authority
* For USA and other parts of Noth/South America, go to CILogon ([https://cilogon.org/ <span style="color:#0645AD;">CILogon</span>]) and choose "University of Wisconsin-Madison" as the provider.
* For UK, the equivalent is [http://www.gridpp.ac.uk/deployment/users/certificate.html <span style="color:#0645AD;">GridPP</span>]
* For UK, the equivalent is [https://portal.ca.grid-support.ac.uk/caportal/ <span style="color:#0645AD;">GridPP</span>]
* Follow instructions given [https://twiki.grid.iu.edu/bin/view/Documentation/CertificateGetWeb <span style="color:#0645AD;">here</span>] in order to obtain your OSG user certificate
* Get your certificate from the appropriate certification authority site above, and then follow steps 3-5 on this page [http://www.hep.wisc.edu/cms/comp/accountSetup.html#grid_cert <span style="color:#0645AD;">here</span>]


== How to register your Grid Certificate in the LZ VO ==
== How to register your Grid Certificate in the LZ VO ==
Line 11: Line 11:
register your certificate with LZ VO in order to use its resources
register your certificate with LZ VO in order to use its resources
* Using a web browser go to the [https://voms.hep.wisc.edu:8443/voms/lz <span style="color:#0645AD;">LZ VOMS server</span>]
* Using a web browser go to the [https://voms.hep.wisc.edu:8443/voms/lz <span style="color:#0645AD;">LZ VOMS server</span>]
==> If your browser does not trust the voms.hep.wisc.edu https certificate, follow these instructions [ [[InstallCACert]] ] to import the CA certificate into your browser.
==> Use your grid certificate (signature) to authenticate
==> Use your grid certificate (signature) to authenticate
* Fill in the form with all the information and click submit
* Fill in the form with all the information and click submit
Line 16: Line 17:
* A VO representative will approve your ticket only after your confirmation
* A VO representative will approve your ticket only after your confirmation


== Accessing Wisconsin storage ==
== Accessing LZ Storage at Wisconsin ==


# ssh to the login server
# ssh to the LZ login server at Wisconsin if you have an account there
# we can provide you an account if you need one, send mail to [mailto:help@hep.wisc.edu here]
ssh <login name>@login.hep.wisc.edu
# or your machine with access to grid tools
ssh <login name>@lzlogin.hep.wisc.edu
# create voms-proxy
# create voms-proxy
Line 33: Line 36:
gsido cp <some file> /hdfs/lz/user/<login name>
gsido cp <some file> /hdfs/lz/user/<login name>


# copy using OSG copy clients and storage elements
# Copy files using Grid computing copy clients and storage elements
lcg-cp /tmp/tmpfile -bvvD srmv2 srm://cmssrm2.hep.wisc.edu:8443/srm/v2/server?SFN=/hdfs/lz/user/tapas/tt
lcg-cp /tmp/tmpfile -bvvD srmv2 srm://cmssrm2.hep.wisc.edu:8443/srm/v2/server?SFN=/hdfs/lz/user/tapas/tt
gfal-copy -v file:///tmp/tmpfile srm://cmssrm2.hep.wisc.edu:8443/srm/v2/server?SFN=/hdfs/lz/user/tapas/
gfal-copy -v file:///tmp/tmpfile srm://cmssrm2.hep.wisc.edu:8443/srm/v2/server?SFN=/hdfs/lz/user/tapas/


== Accessing LZ CVMFS repository ==

# If any of your machines have /cvmfs mounted, then give this a try :
ls /cvmfs/lz.opensciencegrid.org

# Currently, this repository can be written from a machine (lzsoft.hep.wisc.edu) hosted at Wisconsin
In order to have write privileges please contact us.


== Firefox-39.0 Error while accessing VOMS server ==
== Firefox-39.0 Error while accessing VOMS server ==
* When trying to access voms server web page using Firefox-39.0 one may get the following error message :
* When trying to access voms server web page using Firefox-39.0 one may get the following error message :
"SSL received a weak ephemeral Diffie-Hellman key in Server Key Exchange handshake message. (Error code: ssl_error_weak_server_ephemeral_dh_key)
SSL received a weak ephemeral Diffie-Hellman key in Server Key Exchange handshake message.
(Error code: ssl_error_weak_server_ephemeral_dh_key)


* The workaround is to do the following:
* The workaround is to do the following:
Line 47: Line 58:
3) In the search field at the top, enter "security.ssl3.dhe_rsa_aes"
3) In the search field at the top, enter "security.ssl3.dhe_rsa_aes"
4) Double click each result (128 and 256) to toggle the Value to "false"
4) Double click each result (128 and 256) to toggle the Value to "false"


== Getting Gitlab access ==

Begin by creating a Gitlab account, the details are in the [https://docs.google.com/presentation/d/1DOgM2hlBaTrMgyxoRPcqRaVp7wXi1FdD9YhTDxk9Cmo/edit#slide=id.g2781c5cc35_0_129 LZ primer]
Follow the directions here to create an ssh key: https://lz-git.ua.edu/help/ssh/README
Copy your ssh key here: https://lz-git.ua.edu/profile/keys to associate your computing account with your git account.


== HELP CONTACTS ==
== HELP CONTACTS ==

Latest revision as of 23:45, 14 January 2020

How to get a Grid User Certificate

* Depending upon the university, research institution or location you have to choose the certification authority
* For USA and other parts of Noth/South America, go to CILogon (CILogon) and choose "University of Wisconsin-Madison" as the provider.
* For UK, the equivalent is GridPP
* Get your certificate from the appropriate certification authority site above, and then follow steps 3-5 on this page here

How to register your Grid Certificate in the LZ VO

* If you already have a grid user certificate, then you would like to \
   register your certificate with LZ VO in order to use its resources
* Using a web browser go to the LZ VOMS server 
  ==> If your browser does not trust the voms.hep.wisc.edu https certificate, follow these instructions [ InstallCACert ] to import the CA certificate into your browser.
  ==> Use your grid certificate (signature) to authenticate
* Fill in the form with all the information and click submit
* You should receive an email that tells you to confirm the submission
* A VO representative will approve your ticket only after your confirmation

Accessing LZ Storage at Wisconsin

# ssh to the LZ login server at Wisconsin if you have an account there
# we can provide you an account if you need one, send mail to here
# or your machine with access to grid tools
 ssh <login name>@lzlogin.hep.wisc.edu

# create voms-proxy
 voms-proxy-init --voms=lz  ## it will prompt password for you to type
# This will tell you that you are grid user with LZ VO
 gsido whoami  (should return something like lz00x)
# Create your user directory in
 gsido mkdir -p /hdfs/lz/user/<login name>
# Copy files from local directory to the storage area
 gsido cp <some file> /hdfs/lz/user/<login name>
# Copy files using Grid computing copy clients and storage elements
 lcg-cp /tmp/tmpfile -bvvD srmv2 srm://cmssrm2.hep.wisc.edu:8443/srm/v2/server?SFN=/hdfs/lz/user/tapas/tt
 gfal-copy -v file:///tmp/tmpfile srm://cmssrm2.hep.wisc.edu:8443/srm/v2/server?SFN=/hdfs/lz/user/tapas/

Accessing LZ CVMFS repository

# If any of your machines have /cvmfs mounted, then give this a try  :
   ls /cvmfs/lz.opensciencegrid.org 
# Currently, this repository can be written from a machine (lzsoft.hep.wisc.edu) hosted at Wisconsin
  In order to have write privileges please contact us.

Firefox-39.0 Error while accessing VOMS server

* When trying to access voms server web page using Firefox-39.0 one may get the following error message :
            SSL received a weak ephemeral Diffie-Hellman key in Server Key Exchange handshake message. 
             (Error code: ssl_error_weak_server_ephemeral_dh_key)
* The workaround is to do the following:
 1) In FireFox, enter "about:config" in the URL field and press enter. 
 2) Accept the "This might void your warranty!" warning
 3) In the search field at the top, enter "security.ssl3.dhe_rsa_aes" 
 4) Double click each result (128 and 256) to toggle the Value to "false"


Getting Gitlab access

Begin by creating a Gitlab account, the details are in the LZ primer Follow the directions here to create an ssh key: https://lz-git.ua.edu/help/ssh/README Copy your ssh key here: https://lz-git.ua.edu/profile/keys to associate your computing account with your git account.

HELP CONTACTS