Changes between Version 5 and Version 6 of GIR3.2_LAMP


Ignore:
Timestamp:
11/16/11 16:27:10 (12 years ago)
Author:
lnevers@bbn.com
Comment:

--

Legend:

Unmodified
Added
Removed
Modified

  • GIR3.2_LAMP

    v5 v6  
    262262
    263263}}}
     264
     2653. Get the certificate:
     266{{{
     267$ ./lamp-getcertificate.py -n lnevers-lamp-slice1
     268Got my SA credential, looking up lnevers-lamp-slice1
     269Asking for slice credential for lnevers-lamp-slice1
     270Got the slice credential
     271Asking for my lamp certificate
     272Paste the following certificate *as is* into a file called lampcert.pem
     273Upload the certificate to all LAMP enabled nodes at /usr/local/etc/protogeni/ssl/lampcert.pem
     274-----BEGIN RSA PRIVATE KEY-----
     275
     276.. many lines of output not show here....
     277-----END CERTIFICATE-----
     278}}}
     279
     2805. Determined which node to which to upload the LAMP certificate, and then upload certificate to /usr/local/etc/protogeni/ssl/lampcert.pem on each node.
     281{{{
     282$ grep "login" lnevers-lamp-slice1-manifest.xml
     283       <services>      <login authentication="ssh-keys" hostname="pc151.emulab.net" port="22" username="lnevers"/>    </services>  </node> 
     284       <services>      <login authentication="ssh-keys" hostname="pc157.emulab.net" port="22" username="lnevers"/>    </services>  </node> 
     285       <services>      <login authentication="ssh-keys" hostname="pc150.emulab.net" port="22" username="lnevers"/>    </services>  </node> 
     286
     287$ for node in pc151.emulab.net pc157.emulab.net pc150.emulab.net; do scp lampcert.pem lnevers@$node:.; ssh lnevers@$node "sudo mv lampcert.pem /usr/local/etc/protogeni/ssl/lampcert.pem"; ssh lnevers@$node "sudo chown root.perfsonar /usr/local/etc/protogeni/ssl/lampcert.pem"; ssh lnevers@$node "sudo chmod 440 /usr/local/etc/protogeni/ssl/lampcert.pem"; ssh lnevers@$node "sudo /etc/init.d/psconfig restart"; done
     288lampcert.pem                                                                                                                                                             100% 4226     4.1KB/s   00:00   
     289/etc/init.d/psconfig stop: perfSONAR pSConfig Service stopped
     290waiting...
     291/opt/perfsonar_ps/perfSONAR_PS-pSConfig/bin/daemon.pl --ssl-enable --config=/usr/local/etc/perfSONAR/pSConfig.conf --pidfile=psconfig.pid --piddir=/var/run --logger=/usr/local/etc/perfSONAR/pSConfig_logger.conf --user=perfsonar --group=perfsonar
     292/etc/init.d/psconfig start: perfSONAR pSConfig Service started
     293lampcert.pem                                                                                                                                                             100% 4226     4.1KB/s   00:00   
     294/etc/init.d/psconfig stop: perfSONAR pSConfig Service stopped
     295waiting...
     296/opt/perfsonar_ps/perfSONAR_PS-pSConfig/bin/daemon.pl --ssl-enable --config=/usr/local/etc/perfSONAR/pSConfig.conf --pidfile=psconfig.pid --piddir=/var/run --logger=/usr/local/etc/perfSONAR/pSConfig_logger.conf --user=perfsonar --group=perfsonar
     297/etc/init.d/psconfig start: perfSONAR pSConfig Service started
     298lampcert.pem                                                                                                                                                             100% 4226     4.1KB/s   00:00   
     299/etc/init.d/psconfig stop: perfSONAR pSConfig Service stopped
     300waiting...
     301/opt/perfsonar_ps/perfSONAR_PS-pSConfig/bin/daemon.pl --ssl-enable --config=/usr/local/etc/perfSONAR/pSConfig.conf --pidfile=psconfig.pid --piddir=/var/run --logger=/usr/local/etc/perfSONAR/pSConfig_logger.conf --user=perfsonar --group=perfsonar
     302/etc/init.d/psconfig start: perfSONAR pSConfig Service started
     303}}}