Create a Secure Tomcat Container

Introduction

Secure Analytical Services Tutorial

Deploy Photosharing Service

	Table of Contents 1 Begin Secure Tomcat Deployment 2 Obtain Grid account and Host Certificate 2.1 Register with GAARDS 2.2 Login to the Community Training Grid 3 Completing the Tomcat Installation

Begin Secure Tomcat Deployment

We installed caGrid during the Tutorial Preparation and outlined a scenario. Now we need to deploy a secure container. These steps use a caGrid Installer that has been configured to use a local Tomcat installer rather than download from the Apache web site. This is to avoid the time required to perform the download.

Note: the caGrid will be configured to use the Community Training Grid. You must synchronize with the Community Training Grid trust fabric first:

1. Open a Windows Command Prompt
   Click Start->Run and type cmd, then press the Enter key
2. Change to the hackathon directory
   

   %> cd  c:\hackathon 
   

3. Synchronize with Community Training Grid trust fabric
   

   %>ant syncWithTrustFabric
   

Execute the provided installer batch

%>ant installLocal

1. Select the I agree to this license checkbox and click the Next button.

   Agree to License

2. Select the Install/Configure Grid Service Container checkbox. De-select the Install/Configure caGrid Software checkbox. Click the Next button.

   Installer/Configure Grid Service Container

3. Select Tomcat as the Container you would like to install.
4. Check the box Should this container be secure? and click the Next button.

   Selecting the Container

5. We will use the default hostname and ports identified by the Installer. Click the Next button.

   Use Default Hostname

   Note: In real word usage the hostname must be externally routable and fully-qualified name or IP Address. For example, the Training Grid Master GTS external hostname is mastergts.training.cagrid.org and internal, non-routable hostname is 'cagrid-1_3-training-master-gts.cagrid.org. We specified mastergts.training.cagrid.org.

Obtain Grid account and Host Certificate

In order to deploy a secure container to the Grid you must have host certificates that have been created by the Dorian Service. Using these steps you will register an account and obtain host certificates using the GAARDS UI.

Select the Use GAARDS to obtain host credentials option to create credentials and click the Next button. The GAARDS UI will automatically open.

Use GAARDS to obtain host credentials

If it does not, open a new command prompt and change to the GAARDS UI directory:

%> cd c:\hackathon

Then run:

%> ant security

Register with GAARDS

Note: if you have an NCI account (or KC account), you can skip this step.

1. Click the Account Management menu item, then select Local Accounts->Registration.
2. Provide the requested information,
3. Click Apply.

Account Registration

Note on password requirements: A valid password must be between 10 and 20 characters and CANNOT contain a dictionary word. It MUST contain at least one upper case letter, at least one lower case letter, at least one number, and at least one symbol (~!@#$%^&*()_-+={}[]|:;<>,.?)

Login to the Community Training Grid

1. Click the Login button.
2. In the Login dialog, enter your User ID and Password and click the Login button.
   Write down this identity or copy and paste it into a Word document for later use.

   Note: if you are using your NCI/KC username and password, select the NCI organization. Otherwise, use the default of "Training".

Login to the Grid

Request Host Certificate

Host certificates are used to establish secure communications between clients and services.

1. Open the Request Host Certificate Panel via the My Account menu and Request Host Certificate menu item.

   Request Host Certificate

   

2. Accept the Host name that GAARDS identifies.
3. Accept the default location for creating the host credentials. On Windows, this will be a path like "C:\Documents and Settings\<USERNAME>\.cagrid\certificates".
4. Click Request Certificate. A dialog will display the outcome of your request.

   Note: You will see the "Host Certificate Issued" dialog to the lower right after a successful request. Note the location of the certificate and key as shown in the dialog.

5. Close the GAARDS UI.
6. Click the Next button on the installer.

Completing the Tomcat Installation

1. Please enter C:\hackathon in the Directory text box and click the Next button.

   Select Directory

2. The next screen will display a list of tasks that the installer will perform to install and configure tomcat, click Next.
3. Once the installer has completed installing all the components, click the Next button.
4. The final screen asks you to set the following environment variables: ANT_HOME, GLOBUS_LOCATION and CATALINA_HOME. (The values displayed should match the values used while configuring your machine in the Tutorial Preparation steps.)
5. Click Finish.
6. Click Close.

Install Complete

Introduction

Secure Analytical Services Tutorial

Deploy Photosharing Service