Project

General

Profile

Submit Grid Job » History » Version 6

Timo Eronen, 2016-10-06 14:50

1 1 Timo Eronen
h1. Submit Grid Job
2
3 2 Timo Eronen
*======================== DRAFT ===============================*
4 1 Timo Eronen
5
First you need to create a Personal Certificate according to this help: [[Obtain_the_Personal_Certificate]]
6
7 6 Timo Eronen
Then you need to Join to the fgi.csc.fi Virtual Organization. You should use the same machine and Browser for obtaining both the 
8
Certificate and for joining the VO:
9 1 Timo Eronen
10 5 Timo Eronen
Go to page https://voms.fgi.csc.fi:8443/voms/fgi.csc.fi, fill the form and submit it.
11
12
Once you have sent your application you need to wait until it has been processed after which you'll get an email how to proceed.
13
14
*1. Extract the Personal Certificate.*
15
16 6 Timo Eronen
Your Personal Certificate is stored into the Web Browser where you created it. To extract it for the Grid usage proceed as follows:
17 3 Timo Eronen
18
Locate the certificate in your Browser. It's placed under something like "Preferences" => "Advanced" => "Certificates" => "View Certificates" => "Your Certificates".
19 4 Timo Eronen
20
For example the Certificate in Firefox for OSX looks the following:
21
22 1 Timo Eronen
https://p55cc-redmine.utu.fi/attachments/download/6/cert_help.tiff
23 4 Timo Eronen
24 5 Timo Eronen
It's hard to tell where it is stored as there are too many different Browsers and versions, but the name of the Certificate should be TERENA and your name and email must be part of the Certificate.
25 1 Timo Eronen
26
Now "Backup" or "Export" the Certificate, or whatever options you have to Extract the Certificate into a file.
27 5 Timo Eronen
28 6 Timo Eronen
You will be asked filename into which the Certificate shall be stored. Give some name, for example _user.p12_
29 1 Timo Eronen
30 5 Timo Eronen
Select “File type” as PKCS12 for the Certificate file.
31 1 Timo Eronen
32 6 Timo Eronen
Then you will be asked to create a password. Invent a reasonable password and remember it (you will need it later).
33 1 Timo Eronen
34
Once you have entered the password the Certificate will be stored into the given file. The file consist of the Certificate and an associated private key. These two items will be separated into two files next.
35
36 6 Timo Eronen
To extract the Certificate private key enter command as follows:
37 1 Timo Eronen
38 6 Timo Eronen
<pre>
39
openssl pkcs12 -nocerts -in user.p12 -out userkey.pem
40
</pre>
41 1 Timo Eronen
42 6 Timo Eronen
When executed, this command will ask for the old and the new key passwords (they can be the same).
43
44
To extract the User Certificate enter the command:
45
46
<pre>
47
openssl pkcs12 -clcerts -nokeys -in user.p12 -out usercert.pem
48
</pre>
49
50
The two commands above should have created two files, _usercert.pem_ and _userkey.pem_. These two files should be moved into a _.globus_ sub-directory under the user's home directory (note the dot as the first character of the directory name). If the _.globus_ directory does not exist, it can be created with the command:
51
52
_mkdir ~/.globus/_
53
54
After this, the two Certificate files can be moved to the _.globus_ directory with the commands:
55
56
<pre>
57 1 Timo Eronen
cp usercert.pem ~/.globus/
58 6 Timo Eronen
59 5 Timo Eronen
cp userkey.pem ~/.globus/
60 6 Timo Eronen
</pre>
61
62
At this point you can remove the original Certificate file:
63
64
<pre>
65
rm user.p12
66
</pre>
67
68
Finally, make sure that the access permissions of the _userkey.pem_ file are set up correctly. The command to ensure this is:
69
70
<pre>
71 5 Timo Eronen
chmod 400 ~/.globus/userkey.pem
72 6 Timo Eronen
</pre>