df68c62
How to set up a gatekeeper with a GRAM job manager
df68c62
==================================================
df68c62
df68c62
df68c62
The following commands should be executed as root unless otherwise
df68c62
specified.
df68c62
df68c62
90dfc11
Enabling a service configuration
90dfc11
--------------------------------
df68c62
90dfc11
The gatekeeper service needs to have a GRAM job manager configured
90dfc11
that runs the tasks that the gatekeeper accepts. In order to configure
90dfc11
a job manager first install configuration package corresponding to
90dfc11
your local resource management system (LRMS). For a small test setup
90dfc11
without an LRMS use a "fork" service. The following configuration
90dfc11
packages exists to choose from:
df68c62
90dfc11
 - globus-gram-job-manager-condor
90dfc11
 - globus-gram-job-manager-fork-setup-poll
90dfc11
 - globus-gram-job-manager-fork-setup-seg
4763fc4
 - globus-gram-job-manager-lsf-setup-poll
4763fc4
 - globus-gram-job-manager-lsf-setup-seg
90dfc11
 - globus-gram-job-manager-pbs-setup-poll
90dfc11
 - globus-gram-job-manager-pbs-setup-seg
90dfc11
 - globus-gram-job-manager-sge-setup-poll
90dfc11
 - globus-gram-job-manager-sge-setup-seg
4763fc4
 - globus-gram-job-manager-slurm
df68c62
90dfc11
For many LRMSs you have a choice between a setup the keeps track of
90dfc11
the state of the submitted jobs by polling the LRMS's queuing system,
90dfc11
or a setup that uses the Globus Scheduler Event Generator service.
df68c62
90dfc11
After installing one of the packages above, enable the service you
90dfc11
want to use by running
df68c62
90dfc11
  globus-gatekeeper-admin -e <type> [-n <name>]
df68c62
90dfc11
where <type> is the type of service you want to run, and the optional
90dfc11
<name> is an name under which the service will be available.
df68c62
90dfc11
The list of available service types depends on what configuration
90dfc11
packages you have installed and can be found by listing the
90dfc11
/etc/grid-services/available directory. If the name option is omitted
90dfc11
the name will be the same as the type.
df68c62
90dfc11
You can run more than one service in the same gatekeeper as long they
90dfc11
have different names. If you want to have a defult service configured
90dfc11
this service should have the name "jobmanager".
df68c62
90dfc11
If you use one of the setups that uses the Globus Scheduler Event
90dfc11
Generator services you must also activate this service.
df68c62
90dfc11
  globus-scheduler-event-generator-admin -e <type>
df68c62
90dfc11
Where <type> is the LRMS type for which events should be tracked. The
90dfc11
list of available LRMS types depends on what configuration packages
90dfc11
you have installed and can be found by listing the
90dfc11
/etc/globus/scheduler-event-generator/available/ directory.
df68c62
df68c62
Starting the service
df68c62
--------------------
df68c62
df68c62
Before starting the service make sure you have a host certificate and
df68c62
key installed in the right locations and with the right permissions.
df68c62
df68c62
 - /etc/grid-security/hostcert.pem
df68c62
 - /etc/grid-security/hostkey.pem
df68c62
90dfc11
To start the gatekeeper service, run
df68c62
df68c62
  service globus-gatekeeper start
df68c62
90dfc11
To start the scheduler event generator service (if needed), run
90dfc11
90dfc11
  service globus-scheduler-event-generator start
90dfc11
90dfc11
To make the services start automatically at boot, run
df68c62
df68c62
  chkconfig globus-gatekeeper on
90dfc11
  chkconfig globus-scheduler-event-generator on
df68c62
df68c62
df68c62
Testing the service
df68c62
-------------------
df68c62
df68c62
Athentication test against the new gatekeeper - as a non-root user
df68c62
with a valid user proxy, run
df68c62
df68c62
  globusrun -a -r <resource-contact>
df68c62
df68c62
where <resource-contact> is the service's contact string. See "man
df68c62
globusrun" for details.