Daily Lab / POC Activities

Extramural:

• Worked on troubleshooting the Dallas RFT issue.
• Assisted Columbia with installing and configuring Globus
• Spoke with Wayne about installing the JHUAPL node
• Worked on Atlanta node RLS configuration.

Daily Lab / POC Activities

Extramural:

• Researched RLS
• Configured RLS on lab 1002 node
• Installed the following on the Dallas server:
  

postgresql-8.1.9-1.2.i586.rpm
postgresql-libs-8.1.9-1.2.i586.rpm
postgresql-server-8.1.9-1.2.i586.rpm
libiodbc-3.52.5-1.i386.rpm
libiodbc-devel-3.52.5-1.i386.rpm

• Configured Globus Container on Dallas node

bubba@gump:~> counter-client -s https://gump.somedomain.net:8443/wsrf/services/CounterService
Got notification with value: 3
Counter has value: 3
Got notification with value: 13
bubba@gump:~>

• Configured RFT on Dallas node. RFT transfers on the Dallas node hangs with no errors, need to troubleshoot the issue.

Daily Lab / POC Activities

Extramural:

Reinstalled the MonaLisa service agents on Dallas, Tarrant, and Atlanta using the standard install version 1.8.6. The VDT installations of MonaLisa have been removed to simplify the installation document.

Assisted Jeremy with installing and configuring MonaLisa on the Pittsburgh grid node. Pittsburgh is currently on-line and showing a status in the MonaLisa map.

Documented the current state of the grid with screen shots.

Daily Lab / POC Activities

Extramural:

• Researched the Replica Location Service
• Assisted Pittsburgh Engineer with Grid Node installation and testing.
  

The Pittsburgh node was able to transfer date from Atlanta and Tarrant. Jeremy is going to verify firewall settings with the Firewall administrators because Atlanta cannot transfer data from the Pittsburgh node. Data transfers are working fine from the Tarrant node.

Daily Lab / POC Activities

Extramural:

• Reinstalled VDT on Lab 1001.

Note: If the installation is run by a non-root user, the certificates will be stored in the /opt/vdt/globus/etc directory instead of the default /etc/grid-security/certificates directory.

If you select "no" during the certificate installation portion of the install, VDT will not install the default trusted certificates. This is OK because the CA setup file shipped by HealthGrid, will create all required directories and install the certificates to the correct locations. If this method is used, the GRID_SECURITY variable located in /opt/vdt/setup.sh needs to be modified to include the correct directory location. (/etc/grid-security) This needs to be done before vdt-control --on is run.

• Modified the Trusted Authority setup of the VDT installation document based on the recent VDT installations.
• Installed and tested AccessGrid with Ken and Tom
  

PHGrid News

Jeremy Espino at the University of Pittsburgh reported that their network security people approved and set up the firewall policies to allow their grid node to interoperate on the PH Research Informatics Grid.

The U. Pitt node comprises the 4th node on this grid.

Daily Lab / POC Activities

Extramural:

Assisted Albert at Columbia University with a VDT grid node installation. He is currently awaiting host and user certificates.

Albert's Questions:
How will the grid be used to transmit Natural Language Processor requests? These requests can be initiated using a job that transfers the language processor data to the correct grid node via GridFTP or RFT.

How will the data be secured? A combination of x509 certificates and native user account credentials. Each certificate will be mapped to a valid user account on the grid node. Access rights can be restricted based on the native operating system's security settings.

Daily Lab / POC Activities

Extramural:

• Tested the GRAM configuration on Lab1002 and Tarrant. The service is not functional on Dallas.
  

bubba@gump:~> globusrun-ws -submit -c /bin/true
Submitting job...Done.
Job ID: uuid:bec03646-f44a-11dc-934a-d19d36a71b58
Termination time: 03/18/2008 17:51 GMT
Current job state: Active
Current job state: CleanUp
Current job state: Done
Destroying job...Done.
bubba@gump:~> echo $?
0

Troubleshooting the Dallas Postgresql install. The package postgresql-libs-8.1.9-1.2 is hanging during the installation.
Met with PHINMS team for an overview of PHINMS

Basic Questions about OGSA-DAI

> 1) If I downloaded the current version of OGSA-DAI, what would I be able to do?

If you download OGSA-DAI you will be able to expose data resources, such as relational or XML databases or files, through one or more OGSA-DAI services. There are also a number of simple data integration scenarios that you can achieve - send the same query to various databases through an OGSA-DAI service. If you download extension pack you will also get some activities that allow you to do joins across relational databases (extension packs allow us to release functionality early that will be integrated into a future OGSA-DAI release). However, with what we currently release you will not be able to satisfy one of your scenarios yet (other than in the simplest way).

> 2) Generally, how difficult would it be?

Exposing a database through an OGSA-DAI service should not be difficult. The documentation we provide is quite intensive. After that it depends on what you want to do.

> 3) Is there any sample code that could be used to do a basic 'hello world' scenario?

With the base distribution you can do better than that. Have a look at the documentation that is on-line, see:

http://www.ogsadai.org.uk/documentation/ogsadai3.0/ogsadai3.0-axis/

If you download the distribution you will get a version of this documentation (though the one on-line is the most up to date).

To download you will have to register (this allows us provide a metrics to our funders). Try it.

+-----------------------------------------------------------------------+
|Mario Antonioletti:EPCC,JCMB,The King's Buildings,Edinburgh EH9 3JZ. |
|Tel:0131 650 5141|mario@epcc.ed.ac.uk|http://www.epcc.ed.ac.uk/~mario/ |
+-----------------------------------------------------------------------+

Daily Lab / POC Activities

Researched the possibility of reusing existing VeriSign certificates within Globus environment

Findings:

• To generate a new VeriSign certificate, use the certificate request program within Globus and email it to VeriSign for signing.
• VeriSign certificates are x.509 compatible
• VeriSign certificates are issued in base 64 ASCII text
• Openssl can be used to convert the certificates from DER to PEM format as needed by Globus
• In order to configure VeriSign as a trusted CA, the intermediate certificate (cert_hash) needs to be downloaded from the Support Resources site and copied to the TRUSTED_CA directory of Globus
• The PKI admin will have access to the Download Resources site
  

VeriSign Contacts:
Bogdan Buta 650-426-3324
VeriSign Tech Support 1-800-579-2848