Brief HOWTOs
o Acting on a user FusionGrid certificate request
that you received as a FusionGrid RA
- Make sure Doug has heard of user
- Make sure has valid pppl unix account
- Click on url in letter
- Accept certificate
- Wait upto twenty minutes
- Pick a pshr0### account
- Update Comment field and Shell field of this account
- In roam.fusiongrid.org
- Logon to roam.fusiongrid.org
-- Click on Administer Resource for TRANSP
-- Click on Add New and select user
-- ...
-- Back on Resource Permissions for TRANSP page
File user's Auxilliary field
o Updating the cert.fusiongrid.org host certificate
- Assuming you are a "Grid Admin"
Using a browser with your certificate,
Enter page https://pki1.doegrids.org/ca/
Click on "Grid Admin
Cut and paste contents of
from blackbird.pppl.gov
~fgcm/cert.pppl.gov_cert_request.pem
into Request box
Fill out rest of form
Should get instant response
- Cat and paste Base 64 encoded certificate into
~fgcm/cert.pppl.gov.pem
- Restart httpd on blackbird
- Maybe remind Tom Fredian at MIT about
roam.pppl.gov
o Updating the transpgrid.pppl.gov host certificate
- Same as above except location is a little tricky
On portal
/usr/pppl/cppg/hosts/transpgrid.pppl.gov/etc/grid-security
- I have been doing the following
Become user "globus" and use files in
/u/globus/DOEGrids_Certificates/transpgrid
to get new certificate
- Then copy to
/usr/pppl/cppg/hosts/transpgrid.pppl.gov/etc/grid-security