Configure dCache for the testsuite

Temporary Section key-dump for dCache book

• for section Pool Configuration in install.xml: id="in-poolConfig"

Make directories for the pools

mkdir -p /pools/0
mkdir -p /pools/1

Install grid-certificates

wget http://grid-deployment.web.cern.ch/grid-deployment/glite/repos/3.2/lcg-CA.repo
mv lcg-CA.repo /etc/yum.repos.d/
yum update
yum install lcg-CA lcg-vomscerts

Create file /etc/grid-security/grid-vorolemap

"*" "/desy" dteam001
"*" "/dteam/Role=lcgadmin" dteam002

"*" "/desy/Role=production" dteam002
"*" "/dteam" dteam001

Create file /etc/grid-security/storage-authzdb

version 2.1

authorize dteam001 read-write 18118 2688 / / /
authorize dteam002 read-write 18118 2689 / / /

Create directories dteam/g2 and dteam/s2 for testing

mkdir -p /pnfs/desy.de/data/dteam/g2
chown 18118:dteam /pnfs/desy.de/data/dteam/g2
mkdir -p /pnfs/desy.de/data/dteam/s2
chown 18118:dteam /pnfs/desy.de/data/dteam/s2

Edit /opt/d-cache/etc/dcachesrm-gplazma.policy ("Switches: gplazmalite-vorole-mapping='ON')

/opt/d-cache/config/PoolManager.conf

   -psu create linkGroup ALL-LinkGroup

   -psu set linkGroup custodialAllowed ALL-LinkGroup true

   -psu set linkGroup replicaAllowed ALL-LinkGroup true

   -psu set linkGroup nearlineAllowed ALL-LinkGroup true

   -psu set linkGroup outputAllowed ALL-LinkGroup true

   -psu set linkGroup onlineAllowed ALL-LinkGroup true

   -psu set linkGroup attribute ALL-LinkGroup VO=dteam001

   -psu set linkGroup attribute ALL-LinkGroup VO=cms001

   -psu set linkGroup attribute ALL-LinkGroup HSM=osm

   -psu addto linkGroup ALL-LinkGroup default-link

/opt/d-cache/etc/LinkGroupAuthorization.conf

LinkGroup ALL-LinkGroup
/dteam/Role=*
dteam001/Role=*
cms001/Role=*
/desy

Keys needed to use the AdminInterface? generate key and store it in host_key

ssh-keygen -t rsa1 -f ./host_key -N ""

Generate key and store it in server_key

ssh-keygen -b 768 -t rsa1 -f ./server_key -N ""

/etc/grid-security/grid-vorolemap

"*" "/desy" dteam001
"*" "/dteam/Role=lcgadmin" dteam002

"*" "/desy/Role=production" dteam002
"*" "/dteam" dteam001

/opt/d-cache/etc/layouts/forTesting.conf

[dCacheDomain]
[dCacheDomain/poolmanager]
[dCacheDomain/dummy-prestager]
[dCacheDomain/broadcast]
[dCacheDomain/loginbroker]
[dCacheDomain/topo]

[adminDoorDomain]
[adminDoorDomain/admin]

[namespaceDomain]
[namespaceDomain/pnfsmanager]
[namespaceDomain/cleaner]
[namespaceDomain/acl]
[namespaceDomain/nfsv3]

[utilityDomain]
[utilityDomain/gsi-pam]
[utilityDomain/pinmanager]

[gPlazmaDomain]
[gPlazmaDomain/gplazma]

[srmDomain]
[srmDomain/srm]
[srmDomain/spacemanager]
[srmDomain/transfermanagers]

[gridftpDomain]
[gridftpDomain/gridftp]

[gsidcapDomain]
[gsidcapDomain/gsidcap]

[poolDomain]
[poolDomain/pool]
name=pool_0
path=/pools/0
waitForFiles=${path}/setup
lfs=precious
tags=hostname=vm-dcache-se
[poolDomain/pool]
name=pool_1
path=/pools/1
waitForFiles=${path}/setup
lfs=precious
tags=hostname=vm-dcache-se

[dcapDomain]
[dcapDomain/dcap]

[httpdDomain]
[httpdDomain/httpd]
[httpdDomain/billing]
[httpdDomain/srm-loginbroker]

[webadminDomain]
[webadminDomain/webadmin]
webadminHttpsPort=8442
webadminHttpPort=8080
webadminDCacheInstanceName=Testing

copy certificates from my local machine to vm-dcache-test02

scp vm-dcache-test02certificate/*.pem root@vm-dcache-test02:/etc/grid-security
scp vm-dcache-test02certificate/2f63e9e8* root@vm-dcache-test02:/etc/grid-security/certificates

Reserve Space Token

For the G2 test you need to create a Space Token. Assuming that the test client is dcache-devil4-vm01, you can create it by

ssh -l root dcache-devil4-vm01 
su - testsuite
srm-reserve-space -space_desc=release_test_space -retention_policy=CUSTODIAL -guaranteed_size=1 srm://janxenvm02.desy.de:8443