Upgrade caGrid 1.1 Training to caGrid 1.2

The purpose of this guide is to provide step by step instructions on upgrading the caGrid 1.1 Training deployment to caGrid 1.2. It is assumed that the caGrid1.1 Training instructionswere followed to set up your training Grid. Since caGrid 1.2 is a backwards compatible release no maintenance will be required for most services, rather this guide will focus on (1) upgrading services that need to be upgraded and (2) deploying new services.

The following is a matrix of the nodes we are using, and which services are deployed on them:

The following is a listing of the service URLs for this deployment:

Authentication Service	CONSTANT_NOT_DEFINED
caDSR	http://training02.cagrid.org:6080/wsrf/services/cagrid/CaDSRService
Dorian	https://dorian.cagrid.org:6443/wsrf/services/cagrid/Dorian
EVS	http://training03.cagrid.org:6080/wsrf/services/cagrid/EVSGridService
FQP	https://training02.cagrid.org:6443/wsrf/services/cagrid/FederatedQueryProcessor
GME	http://training02.cagrid.org:6080/wsrf/services/cagrid/GlobalModelExchange
Grid Grouper	https://training03.cagrid.org:6443/wsrf/services/cagrid/GridGrouper
GTS (Master)	https://training05.cagrid.org:6442/wsrf/services/cagrid/GTS
GTS (Slave)	https://training04.cagrid.org:6442/wsrf/services/cagrid/GTS
Index	http://index.training.cagrid.org:8080/wsrf/services/DefaultIndexService
Workflow	https://training02.cagrid.org:6443/wsrf/services/cagrid/WorkflowFactoryService

	Table of Contents 1 Upgrade caGrid 1.1 Training to caGrid 1.2 1.1 Upgrading Dorian 1.2 Install the Credential Delegation Service (CDS) 1.2.1 Install caGrid 1.2.2 Request Host Credentials 1.2.3 Install CDS/SyncGTS 1.2.4 Start the Credential Delegation Service (CDS) 1.2.5 Testing the Credential Delegation Service (CDS)

Upgrading Dorian

You should run the following commands from the machine (dorian.cagrid.org).

• Download [CONSTANT_NOT_DEFINED caGrid].
• Unzip the downloaded file, this will create a directory containing the caGrid source. Please note the full path of the caGrid directory, from here on out we will refer to this as CAGRID_LOCATION.
• Build caGrid by typing the following from the command line:

%> cd CAGRID_LOCATION
%> ant clean all

• To configure the Target Grid (CONSTANT_NOT_DEFINED) type the following from a command prompt:

%> cd CAGRID_LOCATION
%> ant -Dtarget.grid=CONSTANT_NOT_DEFINED configure

• Download the [CONSTANT_NOT_DEFINED Upgrade Dorian Ant Utility] and copy it to CAGRID_LOCATION/projects/dorian.
• Download the [CONSTANT_NOT_DEFINED Upgrade SyncGTS Ant Utility] and copy it to CAGRID_LOCATION/projects/syncgts.
• To Shutdown Tomcat execute the following from a command prompt:

On Unix-based Systems

%> cd $CATALINA_HOME\bin
%> shutdown.bat

• Run the Upgrade Dorian Ant Utility executing the following from a command prompt:

%> cd CAGRID_LOCATION/projects/dorian
%> ant -f dorian-upgrade-tomcat-1.1-to-1.2.xml

• Run the Upgrade SyncGTS Ant Utility executing the following from a command prompt:

%> cd CAGRID_LOCATION/projects/dorian
%> ant -f syncgts-upgrade-tomcat-1.1-to-1.2.xml

• To Restart Tomcat execute the following from a command prompt:

On Unix-based Systems

%> cd $CATALINA_HOME/bin
%> ./startup.sh

NOTE: You may need to set execute permissions on the script, to be able to run it.

On Windows-based Systems:

%> cd $CATALINA_HOME\bin
%> startup.bat

Once it has started up, be sure to look in $CATALINA_HOME/logs/catalina.out for any errors.

Install the Credential Delegation Service (CDS)

Install caGrid

You should run the following commands from the machine (cds.training.cagrid.org).

If you have already installed caGrid in the account '''CONSTANT_NOT_DEFINED''' on the host cds.training.cagrid.org you may proceed to the next section, otherwise follow the instructions below to install caGrid.

• [CONSTANT_NOT_DEFINED Click here] to download the Installer.
• Create a directory for the installer in your home directory, copy the downloaded zip file containing the installer and unzip the installer into the create directory.

The following is provided as an example:

%> mkdir ~/installer
%> mv caGrid-installer-1.2-rc2.zip ~/installer
%> cd ~/installer
%> unzip caGrid-installer-1.2-rc2.zip

• Launch the installer:
  It can be run from wherever you downloaded it. From our instructions earlier that would be:

  %> cd ~/installer
  %> java -jar caGrid-installer-1.2.jar

• Accept the caGrid license and click Next.
• If you have not already installed caGrid select the Install caGrid checkbox. Unselect the Install caGrid Services checkbox. De-select all other check boxes. Click the Next button.
• Next you will be asked to specify a directory in which to install Ant. In the Directory text field enter USER_HOME/ext and click the Next button.
  • If you already have Ant installed (with the ANT_HOME environment variable set), you will be prompted if you want to reinstall it; choose Yes if you would like to replace it. Press Next
• Next you will be asked to specify a directory in which to install Globus. In the Directory text field enter USER_HOME/ext and click the Next button.
  • If you already have Globus installed (with the GLOBUS_LOCATION environment variable set), you will be prompted if you want to reinstall it; choose Yes if you would like to replace it. Press Next.
• Next you will be asked to specify a directory in which to install caGrid. In the Directory text field enter USER_HOME/ext and click the Next button.
  • If you already have caGrid installed...
    • You will be prompted if you want to reinstall it; choose Yes if you would like to replace it. Press Next.
    • You will then be asked if you would like to reconfigure caGrid for another target grid; choose Yes if you would like to reconfigure it. Press Next.
• Select the OSU Training Grid from the Target Grid drop down and click Next.
• Click the Start button, the installer will begin to download and install Ant, Globus, and caGrid.
  • NOTE: this step may take a while to download and extract all the files, and build caGrid. http://cagrid.org/wiki/Image:BreakTime.png
• Once the tasks have finished, click the Next button.
• The installer will instruct you set the following environment variables: ANT_HOME, GLOBUS_LOCATION, and CATALINA_HOME. Set these environment variables now.
• Click the Finish button and the click the Close button to close the installer.

Request Host Credentials

You should run the following commands from the machine (cds.training.cagrid.org).

If you have already obtained host credentials from Dorian for the host cds.training.cagrid.org you may proceed to the next section, otherwise follow the instructions below to request host credentials from Dorian.

The GAARDS Admin UI provides a mechanism for requesting host credentials from Dorian. To launch the GAARDS UI complete the following:

%> cd USER_HOME/ext/caGrid
%> ant security

To request host credentials from Dorian using the GAARDS UI please complete the following steps:

1. Click the Login button. This will launch the Login window.
2. From the Dorian Service drop down, select https://dorian.cagrid.org:6443/wsrf/services/cagrid/Dorian.
3. From the Authentication Service drop down select https://dorian.cagrid.org:6443/wsrf/services/cagrid/Dorian.
4. In the User Id text field enter the username for the account just created earlier.
5. In the Password text field enter the password for the account just created earlier.
6. Click the Authenticate button. This will authenticate you to Dorian using the account just created and launch the Proxy Manager window, click the Set Default button.
   1. If you have not yet done so, take note of your Grid Identity; this is the grid wide unique identifier for this user, which authorization policies can be set against.
7. Close the window.
8. From the MyAccount select Request a Host Certificate, this will launch the Request Host Certificate window.
9. Select https://dorian.cagrid.org:6443/wsrf/services/cagrid/Dorian from the Service URI drop down.
10. In the Host text box enter cds.training.cagrid.org.
11. In the Specify Directory to Write Credentials text box enter or browse to the directory: USER_HOME/certificates (You may need to created this directory if it does not exist.
12. Click the Request Host Certificate button.
13. This will request a host certificate from Dorian, and an informational window will then detail the results, telling you where the credentials were created. Record this information, and press the Close button.

If you followed the instructions above, the host certificate and private key will be written to out as follows:

• Certificate - USER_HOME/certificates/cds.training.cagrid.org-cert.pem
• Private Key - USER_HOME/certificates/cds.training.cagrid.org-key.pem

After completion of this section, you should record the location of the host certificate and private key. The installer will ask you for these when you configure your secure container.

Install CDS/SyncGTS

You should run the following commands from the machine (cds.training.cagrid.org).

• Launch the installer:

It can be run from wherever you downloaded it. From our instructions earlier that would be:

%> cd ~/installer
%> java -jar caGrid-installer-1.2.jar

• Accept the caGrid license and click Next.
• De-select the Install caGrid check box.
• Select the Install caGrid Services check box.
• De-select all other check boxes.
• Click the Next button.
• Select the "SyncGTS" and "Credential Delegation Service (CDS)" check box and click Next.
• From the Container Type drop down select "Tomcat" and click Next.
• The installer will then ask whether or not you want to re-install Ant. Make sure the Yes button is NOT selected and click Next.
• The installer will then ask whether or not you want to re-install Tomcat. Select Yes.
• Next you will be asked to specify a directory in which to install Tomcat. In the Directory text field enter USER_HOME/ext and click the Next button.
• The installer will then ask whether or not you want to re-install Globus. Make sure the Yes button is NOT selected and click Next.
• The installer will then ask whether or not you want to re-install caGrid. Make sure the Yes button is NOT selected and click Next.
• If you have already installed caGrid, the next panel will ask if you want to reconfigure caGrid for another target grid. Make sure the Yes check box is NOT selected. Press Next.
• Click the Start button.
• The installer will now download and install Tomcat
• Click the Next button.
• The installer will ask if you want to redeploy Globus to Tomcat, deselect Yes and click the next button. (The Installer will not always ask this, if it does not proceed to the next step)
• The installer will ask if you want to the container to be secure, select Yes and click the next button. (The Installer will not always ask this, if it does not proceed to the next step)

• In the Hostname text field, enter the name of the host (cds.training.cagrid.org) that will run the service and click the Next button.
• In the Shutdown port text field enter '8009'. In the "HTTPS" Port text field enter 8443.
• Next the installer will ask if server credentials are present, select the Yes check box and click next.
• In the Certificate Path text field enter USER_HOME/certificates/cds.training.cagrid.org-cert.pem
• In the Certificate Key text field enter USER_HOME/certificates/cds.training.cagrid.org-key.pem
• Click the Next button.
• Next the installer will ask you to configure SyncGTS. To configure SyncGTS complete the following steps:

1. In the GTS Service URI text box enter https://training04.cagrid.org:6442/wsrf/services/cagrid/GTS.
2. In the Expiration Hours text box enter 12.
3. In the GTS Identity text box enter /O=caBIG/OU=caGrid/OU=Training Trust Fabric/CN=host/training04.cagrid.org.
4. Select the Perform First Sync? check box.
5. Click the Next button.
6. In the next screen, SyncGTS Standard Properties you DO NOT need to edit anything, just click the Next button.
7. Next the installer ask if you want to replace the "Default GTS CA". Make sure that the Yes check box is NOT selected and click the Next button.

• Next the installer will ask you if you want to replace the default GTS CA, DO NOT select Yes, and click Next.
• Edit the service metadata for your deployment. Be sure to provide:
  • Appropriate Research Center Metadata (including the Address, etc)
  • Appropriate Research Center Points of Contact (including a point of contact for support questions)
• Click the Next button.
• Next the installer will ask you to configure the Credential Delegation Service (CDS). To configure CDS complete the following steps:

1. In the Database Hostname text box enter the hostname that your MySQL database runs on.
2. In the Database Port text box enter the number of the port that you MySQL database binds too.
3. In the Database Name text box enter the name of the CDS database.
4. In the Database Username text box enter the username of a user on you MySQL database. (This user should have right to create databases.)
5. In the Database Password text box enter the password for the user entered in the Database Username text box.
6. Click the Next button.

• In the next screen you DO NOT need to edit anything, just click the Next button.
• In the next screen enter the grid identity of the user created here and click the Next button.
• Click the Start button to install Grid Grouper/SyncGTS as configured.
• Once the installation has completed click the Next button.
• The installer will instruct you set the following environment variables: ANT_HOME, GLOBUS_LOCATION, and CATALINA_HOME. Set these environment variables now.
• Click the Finish button and the click the Close button to close the installer.

Start the Credential Delegation Service (CDS)

You should run the following commands from the machine (cds.training.cagrid.org).

To start Grid Grouper, start tomcat as follows:

On Unix-based Systems

%> cd $CATALINA_HOME/bin
%> ./startup.sh

NOTE: You may need to set execute permissions on the script, to be able to run it.

On Windows-based Systems:

%> cd $CATALINA_HOME\bin
%> startup.bat

Once it has started up, be sure to look in $CATALINA_HOME/logs/catalina.out for any errors.

Testing the Credential Delegation Service (CDS)

You should run the following commands from the machine (cds.training.cagrid.org).

The GAARDS Admin UI provides a mechanism for administrating the Credential Delegation Service (CDS). To launch the GAARDS UI complete the following:

%> cd USER_HOME/ext/caGrid
%> ant security

To test that CDS has been installed and configure successfully, complete the following steps:

1. Click the Login button. This will launch the Login window.
2. From the Dorian Service drop down, select https://dorian.cagrid.org:6443/wsrf/services/cagrid/Dorian.
3. From the Authentication Service drop down select https://dorian.cagrid.org:6443/wsrf/services/cagrid/Dorian.
4. In the User Id text field enter the username for the account just created earlier.
5. In the Password text field enter the password for the account just created earlier.
6. Click the Authenticate button. This will authenticate you to Dorian using the account just created and launch the Proxy Manager window, click the Set Default button.
   1. If you have not yet done so, take note of your Grid Identity; this is the grid wide unique identifier for this user, which authorization policies can be set against.
7. Close the window.

• From the Account Management menu, select Delegation Management, then Delegation Administrators, this will launch the Delegation Administrators window.
• Select https://cds.training.cagrid.org:8443/wsrf/services/cagrid/CredentialDelegationService from the Service URI drop down.
• Click the List Administrators button, this will list the CDS administrator in the Administrators table.

If you see your grid identity listed in the Administrators table you have successfully installed and configured the CDS.