Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Note

Setting up your own gateway to the grid is beyond the scope of this write-up. It involves installing and configuring the Virtual Data Toolkit (VDT) , installing a host certificate for the gateway machine, etc. For an administrative guide see the Fermi Grid web page.

...

Setup and Configuration

Kerberos

...

Fermilab uses Kerberos for external authentication. This section assumes that you have a Fermilab Kerberos principal. Follow these instructions if you need an account at Fermilab and are authorized to obtain one.

...

Now you should be able to connect to the ilcsim node.

No Format
ssh ilcsim

...

Running from an External Site

...

If you want to use a grid-enabled node outside Fermilab, you may only need to add a single configuration file containing submit jobs from a node other than ILCSIM, the ilc VOMS server information needs to be explicitly provided.

The following should be put into a file that we will call , ilc-fermilab-voms.

No Format
"ilc" "fermigrid2.fnal.gov" "15023" "/DC=org/DC=doegrids/OU=Services/CN=host/fermigrid2.fnal.gov" "ilc"

Now a valid grid certificate can be obtained by referencing this configuration when running voms-proxy-initfile.

No Format
voms-proxy-init ilc:/ilc -userconf ./ilc-fermilab-voms
Warning

The file above command will fail if ilc-fermilab-voms must be is not owned by your account. The command will fail if this file has some other owner.

Provided that your local node is configured correctly, this should allow you to start a grid session on an external node outside Fermilab.

Info

Simple commands such as globus-job-run should work "out of the box" from an external site. In order to actually submit jobs to the Fermilab batch system, you will need to run have a local copy of Condor, including the job scheduler running. Talk to your site administrator about setting up this software, which can be configured as part of the VDT.

...