| « | January 2026 | » | | 日 | 一 | 二 | 三 | 四 | 五 | 六 | | | | | 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 | 15 | 16 | 17 | 18 | 19 | 20 | 21 | 22 | 23 | 24 | 25 | 26 | 27 | 28 | 29 | 30 | 31 | |
|
公告 |
| 暂无公告... |
| Blog信息 |
|
blog名称:黑洞
日志总数:6
评论数量:22
留言数量:0
访问次数:104523
建立时间:2005年8月30日 |
| |
|
 [globus]GT4.0.0安装历程2
心得体会, 软件技术
嘻嘻哈哈 发表于 2005/8/30 20:39:30 |
|
安装simpleCa
安装安全，执行 $GLOBUS_LOCATION/setup/globus/setup-simple-ca
按照提示填写信息。最后一行会输出setup-ssl-utils: Complete表示安装完成。（详细信息见附件1），本步骤将创建/home/globus/.globus/相关目录，并生成CA等相关文件到该目录。
我安装的过程中，出现了：
creating CA config package.../bin/chmod: getting attributes of `globus_simple_ca_9c5a55a6_setup-0.18': No such file or directory
还是目录权限的问题，chown，解决。
然后由于.profile原有版本文件路径设置错误，重装了一次
出现: ERROR: Unable to configure the simple_ca 9c5a55a6 setup package 解决：？？
安装gsi。
切换为root用户，到/usr/local/globus-4.0.0，执行
./setup/globus_simple_ca_1592e942_setup/setup-gsi –default
gsi为globus的安全管理支持。
输出信息见附件2。
2、 使用root用户，执行
./bin/grid-default-ca
输出见附录4。
3、 安装CA，使用globus用户，执行
globus$ ./sbin/gpt-build /home/globus/.globus/simpleCA/globus_simple_ca_1592e942_setup-0.18.tar.gz –force
(某些资料对这里描述如下，但会出现错误
globus$ ./sbin/gpt-build –install -only /home/globus/.globus/simpleCA/globus_simple_ca_1592e942_setup-0.18.tar.gz –force)
输出信息见附录3。
4、 使用globus用户，执行
globus$ ./sbin/gpt-postinstall –force
该过程需要几分钟时间。
1、 客户机请求证书，比如为操作系统用户zy用户请求，则
1） 使用zy用户执行命令：grid-cert-request
这将在目录/home/zy/.globus/ 产生usercert_request.pem，用root用户将该文件拷贝到/usr/local/globus-4.0.0/ 目录下，
2） 更改/usr/local/globus-4.0.0/usercert_request.pem 属性，
chown globus:globus usercert_request.pem
3） 用globus用户执行命令：
grid-ca-sign -in usercert_request.pem -out usercert.pem
详细输出信息见附录5。
4） 用root用户将usercert.pem拷贝到/home/zy/.globu/ 下。
5） 用zy用户执行 grid-proxy-init
将输出如下：
Your identity: /O=Grid/OU=GlobusTest/OU=simpleCA-yly2/CN=zy
Enter GRID pass phrase for this identity:
Creating proxy ............................ Done
Your proxy is valid until: Thu May 19 23:32:33 2005
2、 服务端添加信息进gridmap映射文件：
./sbin/grid-mapfile-add-entry -dn zy -ln zy
将输出如下：
Modifying /etc/grid-security/grid-mapfile ...
New entry:
"zy" zy
(1) entry added
如果该DN已经添加，则显示：
Modifying /etc/grid-security/grid-mapfile ...
DN zy already exists.
No changes were made - already present and ignored: zy
3、 启动服务，确认已经启动postgreSQL数据库，执行globus-start-container -nosec
如果有安全错误需要修改源文件：/usr/local/globus-4.0.0/source-trees/wsrf/java/core/source/src/org/globus/wsrf/container/ServiceContainer.java，将其中的secure = true;改为secure = false;使其不进行安全验证。
二、部署开发应用：
1、 所有开发源码详见progtutorial-examples_zy.rar。
2、 将全部源码直接解压到$GLOBUS_LOCATION/ examples目录（需建立examples目录）。
3、 执行source etc/globus-devel-env.sh，部署编译运行环境
4、 用Ant创建一个GAR文件，执行
./globus-build-service.sh \
-d org/globus/examples/services/core/first/ \
-s schema/examples/MathService_instance/Math.wsdl
执行./globus-build-service.sh first
在本地将出现org_globus_examples_services_core_first.gar
5、 部署gar文件（即在本机部署服务），运行：
globus-deploy-gar org_globus_examples_services_wsrf_core_first.gar
6、 编译客户端如下：
javac \
-classpath ./build/stubs/classes/:$CLASSPATH \
org/globus/examples/clients/MathService_instance/Client.java
7、 启动服务：globus-start-container –nosec
该服务地址为：http://127.0.0.1:8080/wsrf/services/examples/core/first/MathService
8、 如果服务正确部署，我们现在可以运行客户端：
java \
-classpath ./build/stubs/classes/:$CLASSPATH \
org.globus.examples.clients.MathService_instance.Client \
http://127.0.0.1:8080/wsrf/services/examples/core/first/MathService
这将显示类似以下消息：
Current value: 25
Current value: 20
Current value: 35
Current value: 30
由于为有状态服务，该数字随请求次数增长。
＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝
附件：
1、 CA安装显示信息：
WARNING: GPT_LOCATION not set, assuming:
GPT_LOCATION=/usr/local/globus-4.0.0
C e r t i f i c a t e A u t h o r i t y S e t u p
This script will setup a Certificate Authority for signing Globus
users certificates. It will also generate a simple CA package
that can be distributed to the users of the CA.
The CA information about the certificates it distributes will
be kept in:
/home/globus/.globus/simpleCA/
/bin/sed: can't read /tmp//globus_tmp_ca_setup//pkgdata/pkg_data_src.gpt.tmpl: No such file or directory
creating CA config package...done.
A self-signed certificate has been generated
for the Certificate Authority with the subject:
/O=Grid/OU=GlobusTest/OU=simpleCA-yly2/CN=Globus Simple CA
If this is invalid, rerun this script
./setup-simple-ca
and enter the appropriate fields.
-------------------------------------------------------------------
The private key of the CA is stored in /home/globus/.globus/simpleCA//private/cakey.pem
The public CA certificate is stored in /home/globus/.globus/simpleCA//cacert.pem
The distribution package built for this CA is stored in
/home/globus/.globus/simpleCA//globus_simple_ca_1592e942_setup-0.18.tar.gz
This file must be distributed to any host wishing to request
certificates from this CA.
CA setup complete.
The following commands will now be run to setup the security
configuration files for this CA:
$GLOBUS_LOCATION/sbin/gpt-build /home/globus/.globus/simpleCA//globus_simple_ca_1592e942_setup-0.18.tar.gz
$GLOBUS_LOCATION/sbin/gpt-postinstall
-------------------------------------------------------------------
setup-ssl-utils: Configuring ssl-utils package
Running setup-ssl-utils-sh-scripts...
***************************************************************************
Note: To complete setup of the GSI software you need to run the
following script as root to configure your security configuration
directory:
/usr/local/globus-4.0.0/setup/globus_simple_ca_1592e942_setup/setup-gsi
For further information on using the setup-gsi script, use the -help
option. The -default option sets this security configuration to be
the default, and -nonroot can be used on systems where root access is
not available.
***************************************************************************
setup-ssl-utils: Complete
2、setup-gsi: Configuring GSI security
Making trusted certs directory: /etc/grid-security/certificates/
mkdir /etc/grid-security/certificates/
Installing /etc/grid-security/certificates//grid-security.conf.1592e942...
Running grid-security-config...
Installing Globus CA certificate into trusted CA certificate directory...
Installing Globus CA signing policy into trusted CA certificate directory...
setup-gsi: Complete
3、gpt-build ====> CHECKING BUILD DEPENDENCIES FOR globus_simple_ca_1592e942_setup
gpt-build ====> Changing to /usr/local/globus-4.0.0/BUILD/globus_simple_ca_1592e942_setup-0.18/
gpt-build ====> BUILDING globus_simple_ca_1592e942_setup
gpt-build ====> Changing to /usr/local/globus-4.0.0/BUILD
gpt-build ====> REMOVING empty package globus_simple_ca_1592e942_setup-noflavor-pgm_static
4、The available CA configurations installed on this host are:
Directory: /etc/grid-security/certificates
1) 1592e942 - /O=Grid/OU=GlobusTest/OU=simpleCA-yly2/CN=Globus Simple CA
The default CA is: /O=Grid/OU=GlobusTest/OU=simpleCA-yly2/CN=Globus Simple CA
Location: /etc/grid-security/certificates/1592e942.0
Enter the index number of the CA to set as the default:1
setting the default CA to: /O=Grid/OU=GlobusTest/OU=simpleCA-yly2/CN=Globus Simple CA
linking /etc/grid-security/certificates//grid-security.conf.1592e942 to
/etc/grid-security/grid-security.conf
linking /etc/grid-security/certificates//globus-host-ssl.conf.1592e942 to
/etc/grid-security/globus-host-ssl.conf
linking /etc/grid-security/certificates//globus-user-ssl.conf.1592e942 to
/etc/grid-security/globus-user-ssl.conf
removing link /etc/grid-security/directions
...done.
5、
To sign the request
please enter the password for the CA key:
The new signed certificate is at: /home/globus/.globus/simpleCA//newcerts/02.pem
示例到www.globus.org下载。
|
|
|
回复:GT4.0.0安装历程2
心得体会, 软件技术
喜子(游客)发表评论于2006/5/30 17:41:15 |
| 真的很感谢你总结的部分问题，我也在安装GT4也有很多权限的问题，请问你有没有详细点的安装文挡，截图或出错解决的方法集合吗？
有的话可以发过来吗？谢谢~~
对了我是菜鸟，不过找到的关于网格的资料不少，你需要的话也可以共享交流以下~
Email:jingxi624@sina.com
jx624@hotmail.com |
|
|
回复:GT4.0.0安装历程2
心得体会, 软件技术
naomi(游客)发表评论于2006/4/25 11:07:13 |
| 你好
出现: ERROR: Unable to configure the simple_ca 9c5a55a6 setup package 解决：？？
你怎么解决的阿？ |
|
|
回复:GT4.0.0安装历程2
心得体会, 软件技术
阿明(游客)发表评论于2005/9/4 21:00:02 |
|
» 1 »
|