Configuration

edg-gatekeeper

The edg-gatekeeper is configurable with three command line options in addition to the normal globus-gatekeeper options:

-plainoldglobus: 		 provides the old globus-gatekeeper functionality, LCAS is not used.

-lcas_dir <path>: 		 specifies the directory where the LCAS authorization configuration files are located. 

-lcasmod_dir <path>: 		 specifies the directory where the LCAS module is located. 

The globus.conf file (usually found in the /etc directory) contains the configuration parameters for the globus software. In order to configure the edg-gatekeeper the following two lines are added:

1. GLOBUS_GATEKEEPER=/opt/edg/sbin/edg-gatekeeper
2. GLOBUS_GATEKEEPER_OPTIONS="-lcas_dir /opt/edg/etc/lcas -lcasmod_dir /opt/edg/lib/lcas/"

The first line gives the path of the gatekeeper to be used and the second line the gatekeeper options to be added. One may switch to the original globus gatekeeper (without LCAS functionality !) by specifying
GLOBUS_GATEKEEPER=/opt/globus/sbin/globus-gatekeeper and leaving out the second line.
LCFG configuration:
The globus.conf file can be created using the globus LCFG object contained in package obj-globus. The extra lines for the configuration files have to be specified in an LCFG resource file in the way that is shown in the Computing Element resource file ComputingElement-cfg.h (gconflines 23 and 24).

LCAS

The three static authorization modules each have their own configuration database:

• allowed_users.db: this file is not used in this release, but will eventually partly replace the gridmap file. It will contain the list of LDAP distinguished names (DN) of the users that are allowed on the fabric. This version of the LCAS, however, still relies on the gridmap file.
• ban_users.db: this file contains the list of DNs of the users that should be banned from the fabric. An example can be found here.
• timeslots.db: This file contains the 'opening hours' of the fabric. The format of the file is explained in this example.

LCFG configuration:
The configuration files can also be created using the LCAS LCFG object contained in package obj-lcas. The lines for the configuration files have to be specified in an LCFG resource file in the way that is shown in the Computing Element resource file ComputingElement-cfg.h. One should be careful when specifying asterixes and double quotes.