Changes between Initial Version and Version 1 of GENIUserWorkspace/ConfigCredentials

Timestamp:

07/03/12 19:54:35 (12 years ago)

Author:

Jeanne Ohren

Comment:

--

GENIUserWorkspace/ConfigCredentials

@@ +1 @@
+
+== Configuring Credentials ==
+
+You will need three sets of credentials (two optional) when using the user workspace:
+
+1. A GENI certificate.
+   This is the SSL certificate (with .pem extension)
+   that you download from one of the slice authorities (e.g. emulab.net
+   or pgeni.gpolab.bbn.com)
+
+   You can use a certificate with or without a passphrase.
+
+2. (Optional) An iRODS account.
+   This is only needed if you want to access an iRODS server from the
+   user workspace.
+   You must have the following information in an irods configuration file.
+
+{{{
+    irodsHost
+    irodsPort
+    irodsDefResource
+    irodsHome
+    irodsCwd
+    irodsUserName
+    irodsZone
+}}}
+
+   Make sure you remember the password for your iRODS account.  You will
+   need this when you run credconfig.sh below.
+
+
+3. (Optional)  A Java Keystore file created from your GENI certificate.
+   '''This is only needed if you want to use Flukes.'''
+   See https://geni-orca.renci.org/trac/wiki/flukes/#Userauthorization
+   for instructions on how to generate the keystore file.
+
+   Make sure you remember the alias and password that you used when
+   creating the keystore file.  You will need this when you run Flukes.
+
+Transfer these files to a location in your home directory.  You can do this with ftp, scp, or [wiki:GENIUserWorkspace#UsingSharedFolders shared folders].
+
+With these 1-3 files, you can configure your credentials with the credconfig.sh tool.
+
+{{{
+   $ credconfig.sh -g <path-to-geni-credential> -i <path-to-irods-config> -f <path-to-jks-file>
+}}}
+
+
+The -g parameter is required and the -i and -f parameters are optional.
+
+Example:
+
+{{{
+   $ credconfig.sh -g /home/geniuser/gpo_ctcert.pem -f /home/geniuser/pgeni.jks -i /home/geniuser/irods.config
+}}}
+
+A pair of SSH keys will be generated for you using the private key from your GENI certificate.