FusionGridCertificateManager server internals


o Logging into blackbird.pppl.gov (aka cert.fusiongrid.org)

  Must be on SecurID list for blackbird.pppl.gov
  (Verify with Lena Scimeca)
  Now is sysadmin netgroup plus Rob Andre

  Must have local accounts,
  Currently; randerso, cpugh, randre, ludesche, kying

  Must be in /root/.k5login and /fgcm/.k5login
  Must be in sysadmin group or in /var/spool/PBS/users
  Must be in sysadmin group or in /etc/cron.allow

o Cron jobs

  /etc/cron.daily/update-roam
    Backs up  database info from roam.fusiongrid.org
  /var/spool/cron/fgcm
    2/10 * * * * Runs loadCert.py
    11 1 * * * Synchonizes /var/myproxy with roam.fusiongrid.org
    0 2 * * *  Checks for user certificate renewal mail from doegrids
    0-59 * * * * Makes local backup of myproxy

o /etc/init.d files
  
  /etc/init.d/myproxy

o Location of proxy files

  /var/myproxy

o Location of http info

  /var/www/CertRequests
  /var/www/Users
  /var/www/cgi-bin
  /var/www/html

o Location of X509 info

  /etc/grid-security/certificates
  /home/fgcm/hostkey.pem
  /home/fgcm/hostcert.pem

o Location of ssl info

  conf/httpd.conf
  conf.d/ssl.conf
  
o Location of mailbox info

  /var/cgi-bin/renewalMail.py   imaplib.IMAP4_SSL('mail.pppl.gov')
  /var/cgi-bin/renewalMail.py   i.login('fgcm', ... )
  /var/cgi-bin/loadCert.py      imaplib.IMAP4_SSL( 'mail.pppl.gov' 
  /var/cgi-bin/loadCert.py      i.login('fgcm', ... )
  
o Location of mail info

  /var/spool/cron/fgcm          fusiongrid_support@pppl.gov
  /var/www/html/CertReqForm.html    FusionGridRA@pppl.gov
  /var/www/html/CertReqForm.html    lranderson@pppl.gov
  /var/www/html/fusionFooter.html   fusiongrid_support@pppl.gov
  /var/www/html/FusionGrid/FusionGridCAs.html  dmccune@pppl.gov
  /var/www/html/FusionGrid/FusionGridCAs.html  schissel@gat.com
  /var/www/html/FusionGrid/FusionGridCAs.html  g@psfc.mit.edu
  /var/www/html/FusionGrid/index.html          lranderson@pppl.gov
  /var/www/html/FusionGrid/SelfManagement.html lranderson@pppl.gov
  /var/cgi-bin/*.py             FGCM@cert.fusiongrid.org