Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

  1. Change /etc/init.d/st.gwLCLSARCH1 on lcls-daemon10 to use CMDPATH=/afs/slac/g/lcls/tools/gateway/script/st.gwLCLSARCH1_64
  2. Restart gateway:

    Code Block
    languagebash
    themeMidnight
    [laci@lcls-prod01]$ /etc/init.d/st.gwLCLSARCH1 restart
  3. Verify that the following PV patterns are archived in the LCLS Archiver according to the permissions below:

    Code Block
    languagebash
    themeMidnight
    [laci@lcls-prod01]$ cat $TOOLS/gateway/config/gwLCLSARCH1.dat
    ...
    # deny everything, allow the patterns 
    # For every allow pattern here, we should have a deny pattern in gwLCLSARCH0.dat; otherwise we'll get duplicate PVs
    EVALUATION ORDER DENY, ALLOW
    .* DENY
    ^[A-Za-z0-9]+:UND1:.*    ALLOW
    ^[A-Za-z0-9]+:LTU1:.*    ALLOW
    ^[A-Za-z0-9]+:LTU0:.*    ALLOW
    ^[A-Za-z0-9]+:DMP1:.*    ALLOW
    ^[A-Za-z0-9]+:IN20:.*    ALLOW
    ^[A-Za-z0-9]+:BSY0:.*    ALLOW
    ^[A-Za-z0-9]+:BSYA:.*    ALLOW
    GWLCLSARCH1:.*         ALLOW

gwLCLSARCH2:

Note
titleArchiver Gateways

Archiver Gateways should be stopped and restarted one at a time to independently verify that ACLs are working properly.

  1. Change /etc/init.d/st.gwLCLSARCH2 on lcls-prod01 to use CMDPATH=/afs/slac/g/lcls/tools/gateway/script/st.gwLCLSARCH2_64
  2. Restart gateway:

    Code Block
    languagebash
    themeMidnight
    [laci@lcls-prod01]$ /etc/init.d/st.gwLCLSARCH2 restart
  3. Verify that the following PV patterns are archived in the LCLS Archiver according to the permissions below:

    Code Block
    languagebash
    themeMidnight
    [laci@lcls-prod01]$ cat $TOOLS/gateway/config/gwLCLSARCH2.dat
    ...
    # deny everything, allow the patterns 
    # For every allow pattern here, we should have a deny pattern in gwLCLSARCH0.dat; otherwise we'll get duplicate PVs
    EVALUATION ORDER DENY, ALLOW
    .* DENY
    ^[A-Za-z0-9]+:MCC0:.*    ALLOW
    ^[A-Za-z0-9]+:SYS0:.*    ALLOW
    ^[A-Za-z0-9]+:LR20:.*    ALLOW
    ^[A-Za-z0-9]+:NEH:.*     ALLOW
    ^[A-Za-z0-9]+:NEH1:.*    ALLOW
    ^[A-Za-z0-9]+:FEH:.*     ALLOW
    ^[A-Za-z0-9]+:FEH1:.*    ALLOW
    ^[A-Za-z0-9]+:FEE1:.*    ALLOW
    ^[A-Za-z0-9]+:ALH0:.*    ALLOW 
    ^[A-Za-z0-9]+:ACR0:.*    ALLOW 
    ^[A-Za-z0-9]+:GBL0:.*    ALLOW 
    ^[A-Za-z0-9]+:R02:.*     ALLOW 
    ^[A-Za-z0-9]+:XRT1:.*    ALLOW 
    GWLCLSARCH2:.*         ALLOW

gwLCLSARCH3:

Note
titleArchiver Gateways

Archiver Gateways should be stopped and restarted one at a time to independently verify that ACLs are working properly.

  1. Change /etc/init.d/st.gwLCLSARCH3 on lcls-daemon10 to use CMDPATH=/afs/slac/g/lcls/tools/gateway/script/st.gwLCLSARCH3_64
  2. Restart gateway:

    Code Block
    languagebash
    themeMidnight
    [laci@lcls-daemon10prod01]$ /etc/init.d/st.gwLCLSARCH3 restart
  3. Verify that LCLS PVs can be seen from LCLS2IOC subnet clients.

...

  1. Code Block
    languagebash
    themeMidnight
    [laci@lcls-prod01]$ cat $TOOLS/gateway/config/gwLCLSARCH3.dat
    ...
    # deny everything, allow the patterns 
    # For every allow pattern here, we should have a deny pattern in gwLCLSARCH0.dat; otherwise we'll get duplicate PVs
    EVALUATION ORDER DENY, ALLOW
    .* DENY
    ^[A-Za-z0-9]+:SYS2:.*    ALLOW
    ^[A-Za-z0-9]+:CLTH:.*    ALLOW
    ^[A-Za-z0-9]+:GUNB:.*    ALLOW
    ^[A-Za-z0-9]+:LGUN:.*    ALLOW
    ^[A-Za-z0-9]+:ALH2:.*    ALLOW
    GWLCLSARCH3:.*         ALLOW

gwLCLSII4LCLS:

  1. Change /etc/init.d/st.gwLCLS4LCLSII on lcls-daemon10 to use CMDPATH=/usr/local/lcls/tools/gateway/script/st.gwLCLSII4LCLS_64
  2. Restart gateway:

    Code Block
    languagebash
    themeMidnight
    [laci@lcls2-daemon10]$ /etc/init.d/st.gwLCLS24LCLS restart
  3. Verify that the following PV patterns are archived in the LCLS Archiver according to the permissions below:

    Code Block
    languagebash
    themeMidnight
    [laci@lcls-prod01]$ cat $TOOLS/gateway/config/gwLCLSARCH3.dat
    ...
    # deny everything, allow the patterns 
    # For every allow pattern here, we should have a deny pattern in gwLCLSARCH0.dat; otherwise we'll get duplicate PVs
    EVALUATION ORDER DENY, ALLOW
    .* DENY
    ^[A-Za-z0-9]+:SYS2:.*    ALLOW
    ^[A-Za-z0-9]+:CLTH:.*    ALLOW
    ^[A-Za-z0-9]+:GUNB:.*    ALLOW
    ^[A-Za-z0-9]+:LGUN:.*    ALLOW
    ^[A-Za-z0-9]+:ALH2:.*    ALLOW
    GWLCLSARCH3:.*         ALLOW

...