This is a list of actions to be done over a normal UI.

SLC3

Install ARCD

• Install the arcd daemon rpm:

          apt-get install arc-server
        

• edit the file /etc/xinetd.d/arcd and change the value on "disable line" to "no"

          ( disable                 = no)
        

• be sure that the file /etc/krb.realms contains the lines:

   .wgs.cern.ch CERN.CH
   .plus.cern.ch CERN.CH
        

• be sure that CERN.CH is the first line of the file /etc/krb.conf

(if the files above do not exist please install krbafs-1.1.1-11 rpm)

• be sure that the line

   arc     4241/tcp        # Authenticated Remote Control

is included in the file /etc/services

• Make also sure that your local firewall is configured to let

in traffic to port 4241 (arc) (edit the file /etc/sysconfig/iptables and add this lines before the REJECT rules) and restart then the iptables

-A INPUT -m state --state NEW -m tcp -p tcp --dport 4241 -j ACCEPT
/etc/init/iptables restart

• remove any possible local cronjobs that tends to restore default iptables ( chmod 655 /etc/cron.hourly/firewall.cron)
  
• check the existence of the file /etc/krb5.keytab.

If not do the command

 cern-config-srvtab

to obtain the /etc/srvtab and /etc/krb5.keytab files

ALTERNATIVELY you can do:

apt-get install lcm
 lcm --configure krb4clt
 lcm --configure srvtab

and probabily also:

>lcm --configure krb5clt

• Run the command:

    ln -s /usr/lib/perl/* /usr/lib/perl5/5.8.0/

• add users to the file /usr/libexec/arcd/ACL as following:

lfield.@CERN.CH
 rgracian.@CERN.CH
 santinel.@CERN.CH

• In order to add someone to do something you have to add a perl module under the directory /usr/libexec/arcd. This module should be named as: remote-command.arc and should contain both the policy (who can run) and the action (what the command should

do). For instance the module check_status.arc:

#!/usr/bin/perl

$ACL{'check_status'}="ANY"; sub check_status { system "su - rgracian 
/afs/cern.ch/lhcb/project/web/wdqa/DC04-LCG/LCG-Job-Submit/cron_LCG-Check_/
status"; 
}

allows anybody in the ACL file to run the command that sues to the local user "rgracian" and calls the script located under the afs directory: /afs/cern.ch/lhcb/project/web/wdqa/DC04-LCG/LCG-Job-Submit/cron_LCG-Check_status

• restart xinetd (/etc/init.d/xinetd restart)
• If the installation described here doesn't work we strongly suggest to reboot the machine

more info about acrontab can be retrieved at:

link to arc other links

default VO

modify /opt/edg/etc/edg_wl_ui_cmd_var.conf by changing the Default VO:

DefaultVo = "lhcb";

AFS users allowed:

The following LHCb users have to been added with the command:

/afs/usr/local/etc/ccdbuser _username_ 

1. joel
2. paterson
3. rgracian
4. atsareg
5. vgaronne
6. mgsanche
7. saborido
8. acsmith
9. brook
10. castella
11. mbargiot
12. santinel

Disk server for Input/Output Sandboxes:

The LHCb UI needs to have mounted an external file system for storing Input/Output Sandboxes. Add the following line on the /etc/fstab

cat >> /etc/fstab <<EOF
 lxfsrk524:/shift/lxfsrk524/data01/lxb2004 /storage nfs  defaults        0 0
 EOF

then mount the /storage directory (create it if doesn't exists yet)

mount /storage

RH73

Install AFS

• cd /afs/cern.ch/lhcb/project/web/wdqa/DC04-LCG/lxn1176/AFS
• rpm -ivh *.rpm

Install ARCD

• mkdir ~root/ACRONTAB
• cd /root/ACRONTAB
• rpm -ivh /afs/cern.ch/project/linux/cern/7.3.4/i386/RedHat/RPMS/pdksh-5.2.14-16.i386.rpm
• Install minisue:
  • /afs/cern.ch/lhcb/project/web/wdqa/DC04-LCG/lxn1176/ACRONTAB/minisue
• /etc/init.d/xinetd restart
• check if everything is OK:
  • tail /etc/hosts.allow

(if everything is ok you should see this file changed..) with the new entries:

 
        arcd : 127.0.0.1, afsdb1.cern.ch, afsdb2.cern.ch, afsdb3.cern.ch, afsdb4.cern.ch, afsdb5.cern.ch, afsmisc1.cern.ch, afsmisc2.cern.ch

• • Make sure the file /etc/krb.realm contains the following lines:

       .wgs.cern.ch CERN.CH
       .plus.cern.ch CERN.CH
       .cern.ch CERN.CH

default VO

modify /opt/edg/etc/edg_wl_ui_cmd_var.conf by changing the Default VO:

DefaultVo = "lhcb";

AFS users allowed:

The following LHCb users have to been added with the command:

/afs/usr/local/etc/ccdbuser _username_ 

1. joel
2. paterson
3. rgracian
4. atsareg
5. vgaronne
6. mgsanche
7. saborido
8. acsmith
9. brook
10. castella
11. mbargiot
12. santinel

Disk server for Input/Output Sandboxes:

The LHCb UI needs to have mounted an external file system for storing Input/Output Sandboxes. Add the following line on the /etc/fstab

cat >> /etc/fstab <<EOF
 lxfsrk524:/shift/lxfsrk524/data01/lxb2004 /storage nfs  defaults        0 0
 EOF

then mount the /storage directory (create it if doesn't exists yet)

mount /storage

Please note that the same disk server is mounted by the lxb2003.cern.ch SE used for storing and surfing through log files.

/shift/lxfsrk524/data01/lxshare009d/data03

mail to roberto.santinelli@cernNOSPAMPLEASE.ch