26fbf35
How to set up an LFC server with a mysql backend
26fbf35
================================================
26fbf35
26fbf35
The LFC server is run by the lfcmgr user. This user requires a copy of
26fbf35
the host certificate files:
26fbf35
26fbf35
  cp -p /etc/grid-security/hostcert.pem /etc/grid-security/lfcmgr/lfccert.pem
26fbf35
  cp -p /etc/grid-security/hostkey.pem /etc/grid-security/lfcmgr/lfckey.pem
26fbf35
  chown lfcmgr:lfcmgr /etc/grid-security/lfcmgr/lfc*
26fbf35
26fbf35
Create the LFC database on the mysql server:
26fbf35
26fbf35
  mysql -u root < /usr/share/lfc/create_lfc_tables_mysql.sql
26fbf35
26fbf35
Select a username and password for this mysql database table. Replace
26fbf35
<user> and <password> in the commands below with your choice, also
26fbf35
replace <hostname> with the hostname of the LFC server:
26fbf35
26fbf35
  mysql -u root
26fbf35
  mysql> use mysql
26fbf35
  mysql> grant all on cns_db.* to <user>@localhost identified by '<password>';
26fbf35
  mysql> grant all on cns_db.* to <user>@<hostname> identified by '<password>';
26fbf35
  mysql> quit
26fbf35
26fbf35
Let the LFC server know about the account information and make sure
26fbf35
only the lfcmgr user can read this information:
26fbf35
26fbf35
  touch /etc/NSCONFIG
26fbf35
  chmod 600 /etc/NSCONFIG
26fbf35
  chown lfcmgr:lfcmgr /etc/NSCONFIG
26fbf35
  echo <user>/<password>@<dbserver>/<dbname> > /etc/NSCONFIG
26fbf35
26fbf35
If the /<dbname> part is omitted the database "cns_db" will be used.
26fbf35
26fbf35
If you have a firewall, open the LFC server port (5010).
26fbf35
26fbf35
Once the configuration is completed, start the LFC server:
26fbf35
26fbf35
  service lfc-mysql start
26fbf35
26fbf35
If you want to start the service automatically at boot time:
26fbf35
26fbf35
  chkconfig --add lfc-mysql