-
Notifications
You must be signed in to change notification settings - Fork 1
/
Copy pathglobus-toolkit-install.html
398 lines (378 loc) · 41.5 KB
/
globus-toolkit-install.html
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
<!DOCTYPE html><html lang="zh-CN" data-theme="light"><head><meta charset="UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no"><title>Globus Toolkit 安装与配置 | 王恒's Blog</title><meta name="keywords" content="Globus Toolkit,Ubuntu,Ant,Openjdk,openssh"><meta name="author" content="王恒"><meta name="copyright" content="王恒"><meta name="format-detection" content="telephone=no"><meta name="theme-color" content="#ffffff"><meta name="description" content="1. 安装前准备工作 准备工作包括软件的准备和环境变量的设置。操作系统选用ubuntu 11.10，Globus Toolkit的安装包为：gt4.0.8-all-source-installer.tar.gz（或者使用适用于ubuntu的gt4.0.8-x86_deb_3.1-installer.tar.gz）下载地址：http://globus.org/toolkit/downloads/，">
<meta property="og:type" content="article">
<meta property="og:title" content="Globus Toolkit 安装与配置">
<meta property="og:url" content="http://wangheng.org/globus-toolkit-install.html">
<meta property="og:site_name" content="王恒's Blog">
<meta property="og:description" content="1. 安装前准备工作 准备工作包括软件的准备和环境变量的设置。操作系统选用ubuntu 11.10，Globus Toolkit的安装包为：gt4.0.8-all-source-installer.tar.gz（或者使用适用于ubuntu的gt4.0.8-x86_deb_3.1-installer.tar.gz）下载地址：http://globus.org/toolkit/downloads/，">
<meta property="og:locale" content="zh_CN">
<meta property="og:image" content="https://i.loli.net/2020/05/01/gkihqEjXxJ5UZ1C.jpg">
<meta property="article:published_time" content="2011-11-29T08:38:06.000Z">
<meta property="article:modified_time" content="2021-11-20T16:23:38.546Z">
<meta property="article:author" content="王恒">
<meta property="article:tag" content="Globus Toolkit">
<meta property="article:tag" content="Ubuntu">
<meta property="article:tag" content="Ant">
<meta property="article:tag" content="Openjdk">
<meta property="article:tag" content="openssh">
<meta name="twitter:card" content="summary">
<meta name="twitter:image" content="https://i.loli.net/2020/05/01/gkihqEjXxJ5UZ1C.jpg"><link rel="shortcut icon" href="/img/favicon.ico"><link rel="canonical" href="http://wangheng.org/globus-toolkit-install"><link rel="preconnect" href="//cdn.jsdelivr.net"/><link rel="preconnect" href="//busuanzi.ibruce.info"/><link rel="stylesheet" href="/css/index.css"><link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/@fortawesome/fontawesome-free/css/all.min.css" media="print" onload="this.media='all'"><link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/@fancyapps/ui/dist/fancybox.min.css" media="print" onload="this.media='all'"><script async defer data-website-id="ddf4c251-6dc0-46f0-8b55-f3b5b1b5b13c" src="https://ds.apiof.com:13002/umami.js"></script><script>const GLOBAL_CONFIG = {
root: '/',
algolia: undefined,
localSearch: {"path":"/search.xml","preload":false,"languages":{"hits_empty":"找不到您查询的内容：${query}"}},
translate: undefined,
noticeOutdate: undefined,
highlight: {"plugin":"highlighjs","highlightCopy":true,"highlightLang":true,"highlightHeightLimit":false},
copy: {
success: '复制成功',
error: '复制错误',
noSupport: '浏览器不支持'
},
relativeDate: {
homepage: false,
post: false
},
runtime: '',
date_suffix: {
just: '刚刚',
min: '分钟前',
hour: '小时前',
day: '天前',
month: '个月前'
},
copyright: {"limitCount":50,"languages":{"author":"作者: 王恒","link":"链接: ","source":"来源: 王恒's Blog","info":"著作权归作者所有。商业转载请联系作者获得授权，非商业转载请注明出处。"}},
lightbox: 'fancybox',
Snackbar: undefined,
source: {
justifiedGallery: {
js: 'https://cdn.jsdelivr.net/npm/flickr-justified-gallery/dist/fjGallery.min.js',
css: 'https://cdn.jsdelivr.net/npm/flickr-justified-gallery/dist/fjGallery.min.css'
}
},
isPhotoFigcaption: false,
islazyload: true,
isAnchor: false
}</script><script id="config-diff">var GLOBAL_CONFIG_SITE = {
title: 'Globus Toolkit 安装与配置',
isPost: true,
isHome: false,
isHighlightShrink: false,
isToc: true,
postUpdate: '2021-11-21 00:23:38'
}</script><noscript><style type="text/css">
#nav {
opacity: 1
}
.justified-gallery img {
opacity: 1
}
#recent-posts time,
#post-meta time {
display: inline !important
}
</style></noscript><script>(win=>{
win.saveToLocal = {
set: function setWithExpiry(key, value, ttl) {
if (ttl === 0) return
const now = new Date()
const expiryDay = ttl * 86400000
const item = {
value: value,
expiry: now.getTime() + expiryDay,
}
localStorage.setItem(key, JSON.stringify(item))
},
get: function getWithExpiry(key) {
const itemStr = localStorage.getItem(key)
if (!itemStr) {
return undefined
}
const item = JSON.parse(itemStr)
const now = new Date()
if (now.getTime() > item.expiry) {
localStorage.removeItem(key)
return undefined
}
return item.value
}
}
win.getScript = url => new Promise((resolve, reject) => {
const script = document.createElement('script')
script.src = url
script.async = true
script.onerror = reject
script.onload = script.onreadystatechange = function() {
const loadState = this.readyState
if (loadState && loadState !== 'loaded' && loadState !== 'complete') return
script.onload = script.onreadystatechange = null
resolve()
}
document.head.appendChild(script)
})
win.activateDarkMode = function () {
document.documentElement.setAttribute('data-theme', 'dark')
if (document.querySelector('meta[name="theme-color"]') !== null) {
document.querySelector('meta[name="theme-color"]').setAttribute('content', '#0d0d0d')
}
}
win.activateLightMode = function () {
document.documentElement.setAttribute('data-theme', 'light')
if (document.querySelector('meta[name="theme-color"]') !== null) {
document.querySelector('meta[name="theme-color"]').setAttribute('content', '#ffffff')
}
}
const t = saveToLocal.get('theme')
if (t === 'dark') activateDarkMode()
else if (t === 'light') activateLightMode()
const asideStatus = saveToLocal.get('aside-status')
if (asideStatus !== undefined) {
if (asideStatus === 'hide') {
document.documentElement.classList.add('hide-aside')
} else {
document.documentElement.classList.remove('hide-aside')
}
}
const detectApple = () => {
if(/iPad|iPhone|iPod|Macintosh/.test(navigator.userAgent)){
document.documentElement.classList.add('apple')
}
}
detectApple()
})(window)</script><meta name="generator" content="Hexo 5.4.2"></head><body><div id="sidebar"><div id="menu-mask"></div><div id="sidebar-menus"><div class="avatar-img is-center"><img src= "data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" data-lazy-src="/img/avatar.png" onerror="onerror=null;src='/img/friend_404.gif'" alt="avatar"/></div><div class="sidebar-site-data site-data is-center"><a href="/archives/"><div class="headline">文章</div><div class="length-num">86</div></a><a href="/tags/"><div class="headline">标签</div><div class="length-num">132</div></a><a href="/categories/"><div class="headline">分类</div><div class="length-num">7</div></a></div><hr/><div class="menus_items"><div class="menus_item"><a class="site-page" href="/archives/"><i class="fa-fw fas fa-archive"></i><span> 时间线</span></a></div><div class="menus_item"><a class="site-page" href="/tags/"><i class="fa-fw fas fa-tags"></i><span> 标签</span></a></div><div class="menus_item"><a class="site-page" href="/wiki/"><i class="fa-fw fas fa-pencil-alt"></i><span> 笔记</span></a></div><div class="menus_item"><a class="site-page" href="/link/"><i class="fa-fw fas fa-link"></i><span> 友情链接</span></a></div><div class="menus_item"><a class="site-page group" href="javascript:void(0);"><i class="fa-fw fas fa-list"></i><span> 其他</span><i class="fas fa-chevron-down"></i></a><ul class="menus_item_child"><li><a class="site-page child" href="/projects/"><i class="fa-fw fas fa-boxes"></i><span> 作品</span></a></li><li><a class="site-page child" href="/files/"><i class="fa-fw fas fa-folder-open"></i><span> 文件</span></a></li></ul></div><div class="menus_item"><a class="site-page" href="/about/"><i class="fa-fw fas fa-heart"></i><span> 关于</span></a></div></div></div></div><div class="post" id="body-wrap"><header class="not-top-img" id="page-header"><nav id="nav"><span id="blog_name"><a id="site-name" href="/">王恒's Blog</a></span><div id="menus"><div id="search-button"><a class="site-page social-icon search"><i class="fas fa-search fa-fw"></i><span> 搜索</span></a></div><div class="menus_items"><div class="menus_item"><a class="site-page" href="/archives/"><i class="fa-fw fas fa-archive"></i><span> 时间线</span></a></div><div class="menus_item"><a class="site-page" href="/tags/"><i class="fa-fw fas fa-tags"></i><span> 标签</span></a></div><div class="menus_item"><a class="site-page" href="/wiki/"><i class="fa-fw fas fa-pencil-alt"></i><span> 笔记</span></a></div><div class="menus_item"><a class="site-page" href="/link/"><i class="fa-fw fas fa-link"></i><span> 友情链接</span></a></div><div class="menus_item"><a class="site-page group" href="javascript:void(0);"><i class="fa-fw fas fa-list"></i><span> 其他</span><i class="fas fa-chevron-down"></i></a><ul class="menus_item_child"><li><a class="site-page child" href="/projects/"><i class="fa-fw fas fa-boxes"></i><span> 作品</span></a></li><li><a class="site-page child" href="/files/"><i class="fa-fw fas fa-folder-open"></i><span> 文件</span></a></li></ul></div><div class="menus_item"><a class="site-page" href="/about/"><i class="fa-fw fas fa-heart"></i><span> 关于</span></a></div></div><div id="toggle-menu"><a class="site-page"><i class="fas fa-bars fa-fw"></i></a></div></div></nav></header><main class="layout" id="content-inner"><div id="post"><div id="post-info"><h1 class="post-title">Globus Toolkit 安装与配置</h1><div id="post-meta"><div class="meta-firstline"><span class="post-meta-date"><i class="far fa-calendar-alt fa-fw post-meta-icon"></i><span class="post-meta-label">发表于</span><time class="post-meta-date-created" datetime="2011-11-29T08:38:06.000Z" title="发表于 2011-11-29 16:38:06">2011-11-29</time><span class="post-meta-separator">|</span><i class="fas fa-history fa-fw post-meta-icon"></i><span class="post-meta-label">更新于</span><time class="post-meta-date-updated" datetime="2021-11-20T16:23:38.546Z" title="更新于 2021-11-21 00:23:38">2021-11-21</time></span><span class="post-meta-categories"><span class="post-meta-separator">|</span><i class="fas fa-inbox fa-fw post-meta-icon"></i><a class="post-meta-categories" href="/categories/Technical/">Technical</a></span></div><div class="meta-secondline"><span class="post-meta-separator">|</span><span class="post-meta-pv-cv" id="" data-flag-title="Globus Toolkit 安装与配置"><i class="far fa-eye fa-fw post-meta-icon"></i><span class="post-meta-label">阅读量:</span><span id="busuanzi_value_page_pv"><i class="fa-solid fa-spinner fa-spin"></i></span></span></div></div></div><article class="post-content" id="article-container"><content>
<h3>1. 安装前准备工作</h3>
准备工作包括软件的准备和环境变量的设置。操作系统选用ubuntu 11.10，Globus Toolkit的安装包为：gt4.0.8-all-source-installer.tar.gz（或者使用适用于ubuntu的gt4.0.8-x86_deb_3.1-installer.tar.gz）下载地址：<a title="http://globus.org/toolkit/downloads/" target="_blank" rel="noopener" href="http://globus.org/toolkit/downloads/">http://globus.org/toolkit/downloads/</a>，此外还需安装JDK、ANT 下载地址：<a title="http://ant.apache.org/bindownload.cgi" target="_blank" rel="noopener" href="http://ant.apache.org/bindownload.cgi">http://ant.apache.org/bindownload.cgi</a>、JUNIT最新版本。
<p>图1表示了各软件之间的层级关系。</p>
<p><a href="uploads/2011/11/pic1.jpg"><img title="pic1" src= "data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" data-lazy-src="uploads/2011/11/pic1_thumb.jpg" alt="pic1" width="244" height="188" border="0" /></a></p>
<p>图1 各软件层级关系</p>
<p>图2为GT4的安装流程图。</p>
<p><a href="uploads/2011/11/pic2.jpg"><img title="pic2" src= "data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" data-lazy-src="uploads/2011/11/pic2_thumb.jpg" alt="pic2" width="244" height="161" border="0" /></a></p>
<p>图2 GT 安装流程图</p>
<p>辅助软件安装完成之后，需要设置系统环境变量。具体方法是修改系统变量配置文件 /etc/profile。</p>
<p>参考：</p>
<pre class="brush: bash; gutter: true"># /etc/profile: system-wide .profile file for the Bourne bash (sh(1))
# and Bourne compatible bashs (bash(1), ksh(1), ash(1), ...).
if [ -d /etc/profile.d ]; then
for i in /etc/profile.d/*.sh; do
if [ -r $i ]; then
. $i
fi
done
unset i
#Add
unset pathmunge
export ANT_HOME=/usr/local/apache-ant-1.8.2
export JAVA_HOME=/usr/lib/jvm/java-6-openjdk
export GLOBUS_LOCATION=/usr/local/globus
export GPT_LOCATION=/usr/local/globus
export CLASSPATH="./:JAVA_HOME/lib:JAVA_HOME/jre/lib"
export PATH=$PATH:$JAVA_HOME/bin:JAVA_HOME/jre/bin:$GLOBUS_LOCATION/bin:$GLOBUS_LOCATION/sbin:$ANT_HOME/bin:/bin:/usr/bin:/usr/sbin
export LD_LIBRARY_PATH=$/usr/local/globus/lib
fi
if [ "$PS1" ]; then
if [ "$BASH" ]; then
PS1='\u@\h:\w\$ '
if [ -f /etc/bash.bashrc ]; then
. /etc/bash.bashrc
fi
else
if [ "`id -u`" -eq 0 ]; then
PS1='# '
else
PS1='$ '
fi
fi
fi
umask 022
</pre><strong>关于安装需要注意以下几个问题：</strong><blockquote>1 .要确认已安装C编译器gcc,及g++,否则GT4.0.8将无法 进行编译;
<p>2.确认GUN TAR在安装目录中.否则将无法进行解压缩.</p>
<p>3.注意设置自己的主机名,如果使用默认主机名Localhost则在进行服务器认证请求时会失败.</blockquote><strong>关于用户需要注意以下几个问题：</strong><blockquote>除了设置一个globus用户外,还应设置几个普通用户,并且要注意普通用户的权限设置,应能访问globus的安装目录.</p>
<p>如我就设置了4个普通用户，如feetoo，postgre，user01， user02。在进行用户认证时，常会因为用户权限问题失败，且此用户名不能重新认证，所以应多设几个普通用户。</p>
<p>必要用户：root，globus，普通用户（建议多个）</blockquote><h4>2.基本环境的配置（主节点和子节点一样）</h4><h5>2.1 Install JDK</h5><br>首先把JDK安装文件拷贝到/usr/local下面</p>
<pre>[root@xx1 win]# cp jdk-6u1-linux-i586.bin /usr/local/</pre>
<p>然后，我们查看权限</p>
<pre>[root@xx1 local]# ls -la jdk-6u1-linux-i586.bin</pre><pre>-rwxr-xr-x 1 root root 62772481 07-04 21:13 jdk-6u1-linux-i586.bin</pre>
<p>root用户已经有执行权限，我们直接执行文件</p>
<pre>[root@xx1 local]# ./jdk-6u1-linux-i586.bin</pre>
<p>JDK解压完毕 ，我们查看一下，并建立符号链接</p>
<pre>[root@xx1 local]# ln -s jdk1.6.0_01 jdk</pre>
<p>我们查看链接是否正确</p>
<pre>[root@xx1 local]# ls -la jdk</pre><pre>lrwxrwxrwx 1 root root 11 07-04 21:18 jdk -> jdk1.6.0_01</pre><h5><strong>2.2 Install ANT</strong></h5>
<ol>
<li>ANT安装到/usr/local/文件夹下，并建立符号链接</li>
<li>编辑/etc/profile文件，导出变量<pre>[root@xx1 local]# vi /etc/profile</li>
</ol>
<p>#编辑后，用tail命令查看</pre><pre class="brush: bash; gutter: true">[root@xx1 local]# tail /etc/profile<br>done</p>
<p>unset i<br>unset pathmunge</p>
<p>export ANT_HOME=/usr/local/ant<br>export JAVA_HOME=/usr/local/jdk<br>export GLOBUS_LOCATION=/usr/local/globus<br>export GPT_LOCATION=/usr/local/globus<br>export CLASSPATH="./:JAVA_HOME/lib:JAVA_HOME/jre/lib"<br>export PATH=$JAVA_HOME/bin:JAVA_HOME/jre/bin: $GLOBUS_LOCATION/bin:$GLOBUS_LOCATION/sbin: $ANT_HOME/bin:$PATH<br>export LD_LIBRARY_PATH=$/usr/local/globus /lib</pre><pre>使变量生效</pre><pre>[root@xx1 local]# source /etc/profile</pre><pre>2.3 Install Globus<br>添加一个globus用户，用来启动容器</pre><pre>[root@xx1 local]# adduser globus -p myglobus</pre><br>在/usr/local下面建立globus文件</p>
<pre>[root@xx1 local]# mkdir globus</pre>
<p>更改属主</p>
<pre>[root@xx1 local]# chown globus.globus globus</pre>
<p>把网格的安装源文件拷贝过来,到globus文件夹下</p>
<pre>[root@xx1 local]# cp /mnt/win/ gt4.0.8-all-source-installer.tar.gz ./globus</pre>
<p>修改属主</p>
<pre>[root@xx1 local]# cd globus/
[root@xx1 globus]# chown globus.globus gt4.0.8-all-source-installer.tar.gz</pre>
<p>切换为globus用户</p>
<pre>[root@xx1 globus]# su - globus</pre>
<p>进入globus目录</p>
<pre>[globus@xx1 ~]$ cd /usr/local/globus/</pre>
<p>解压</p>
<pre>[globus@xx1 globus]$ tar -zxvf gt4.0.8-all-source-installer.tar.gz</pre>
<p>已经成功解压了</p>
<pre>[globus@xx1 globus]$ ls
gt4.0.8-all-source-installer gt4.0.8-all-source-installer.tar.gz</pre>
<p>进入安装程序<br>[globus@xx1 globus]$ cd gt4.0.8-all-source-installer</p>
<p>Configure一下[想要特殊配置看帮助或者文档]<br>[globus@xx1 gt4.0.8-all-source-installer]$ ./configure –prefix=/usr/local/globus/<br>checking for javac… /usr/local/jdk/bin/javac<br>checking for ant… /usr/local/ant/bin/ant<br>configure: creating ./config.status<br>config.status: creating Makefile</p>
<p>开始make<br>[globus@xx1 gt4.0.8-all-source-installer]$ make<br>cd gpt && OBJECT_MODE=32 ./build_gpt<br>build_gpt ====> installing GPT into /usr/local/globus/<br>…………….<br>…………….<br>echo “Your build completed successfully. Please run make install.”<br>Your build completed successfully. Please run make install.<br>（make时经常出错，原因是系统缺少各种包，装个yum源，具体安装什么包应根据自己的系统而进行选择，大概有openssl、openssh、grid-packaging-tools-3.2-22.fc14.noarch.rpm、g++ glibc-static perl-ExtUtils-*等等。rm /usr/bin/env; cp /bin/env /usr/bin/env ）<br>安装一下<br>[globus@xx1 gt4.0.8-all-source-installer]$ make install<br>ln -sf /usr/local/globus//etc/gpt/packages /usr/local/globus//etc/globus_packages<br>/usr/local/globus//sbin/gpt-postinstall<br>…………….<br>…………….<br>find-fork-tools: WARNING: “Cannot locate mpiexec”<br>find-fork-tools: WARNING: “Cannot locate mpirun”<br>checking for mpiexec… no<br>checking for mpirun… no<br>find-fork-tools: creating ./config.status<br>config.status: creating fork.pm<br>..Done</p>
<p>3 配置主节点<br>我们是实验环境，所以用SimpleCA来进行加密认证。在这里，我采用了本机＋虚拟机的安装方式，把本机作为主节点，虚拟机作为子节点。<br>本机［xx1.com］：<br>ip:192.168.1.107<br>mask:255.255.255.0<br>gateway:192.168.1.1</p>
<p>虚拟机[xx2.com]：<br>ip:192.168.1.207<br>mask:255.255.255.0<br>gateway:192.168.1.1<br>把/etc/hosts文件修改如下：<br>[root@xx1 globus]# more /etc/hosts</p>
<p>127.0.0.1 localhost.localdomain localhost<br>192.168.1.107 xx1.com xx1<br>192.168.1.207 xx2.com xx2</p>
<p>然后，我在查看主机名称是不是正确<br>[root@xx1 globus]# more /etc/sysconfig/network<br>NETWORKING=yes<br>NETWORKING_IPV6=yes<br>HOSTNAME=xx1.com</p>
<p>修改主机名称之后，我们可以安装SimpleCA了</p>
<p>3.1 安装SimpleCA<br>切换到如下目录<br>[globus@xx1 globus]$ pwd<br>/usr/local/globus-4.0.1/setup/globus</p>
<p>[globus@xx1 globus]$ sudo ./setup-simple-ca</p>
<p>C e r t i f i c a t e A u t h o r i t y S e t u p</p>
<p>This script will setup a Certificate Authority for signing Globus<br>users certificates. It will also generate a simple CA package<br>that can be distributed to the users of the CA.</p>
<p>The CA information about the certificates it distributes will<br>be kept in:</p>
<p>/home/globus/.globus/simpleCA/</p>
<p>The unique subject name for this CA is:</p>
<p>cn=Globus Simple CA, ou=simpleCA-xx1.com, ou=GlobusTest, o=Grid</p>
<p>Do you want to keep this as the CA subject (y/n) [y]:</p>
<p>可以看到，本机作为主节点，ou=simpleCA-xx1.com，这就对应了上边让大家修改主机名称的作用。</p>
<p>直接回车键即可，然后又提示让电邮，这里可以随便填写，这是让别人向你索取证书的地址。</p>
<p>Enter the email of the CA (this is the email where certificate<br>requests will be sent to be signed by the CA):</p>
<p>接着，就是证书过期日期，默认五年，直接回车：</p>
<p>The CA certificate has an expiration date. Keep in mind that<br>once the CA certificate has expired, all the certificates<br>signed by that CA become invalid. A CA should regenerate<br>the CA certificate and start re-issuing ca-setup packages<br>before the actual CA certificate expires. This can be done<br>by re-running this setup script. Enter the number of DAYS<br>the CA certificate should last before it expires.<br>[default: 5 years (1825 days)]:</p>
<p>又提示给打开证书提供一个密码，并且确认<br>Enter PEM pass phrase:<br>Verifying - Enter PEM pass phrase:</p>
<h2 id="接着，又是一堆输出，我们可以看到公钥和私玥放在什么地方了，还有分发包放在那里［分发包可以用来配置自节点］："><a href="#接着，又是一堆输出，我们可以看到公钥和私玥放在什么地方了，还有分发包放在那里［分发包可以用来配置自节点］：" class="headerlink" title="接着，又是一堆输出，我们可以看到公钥和私玥放在什么地方了，还有分发包放在那里［分发包可以用来配置自节点］："></a>接着，又是一堆输出，我们可以看到公钥和私玥放在什么地方了，还有分发包放在那里［分发包可以用来配置自节点］：</h2><p>The private key of the CA is stored in /home/globus/.globus/simpleCA//private/cakey.pem<br>The public CA certificate is stored in /home/globus/.globus/simpleCA//cacert.pem</p>
<p>The distribution package built for this CA is stored in</p>
<p>/home/globus/.globus/simpleCA//globus_simple_ca_b62cb8c1_setup-0.19.tar.gz</p>
<p>This file must be distributed to any host wishing to request<br>certificates from this CA.</p>
<p>CA setup complete.</p>
<p>The following commands will now be run to setup the security<br>configuration files for this CA:</p>
<p>$GLOBUS_LOCATION/sbin/gpt-build /home/globus/.globus/simpleCA//globus_simple_ca_b62cb8c1_setup-0.19.tar.gz</p>
<h2 id="GLOBUS-LOCATION-sbin-gpt-postinstall"><a href="#GLOBUS-LOCATION-sbin-gpt-postinstall" class="headerlink" title="$GLOBUS_LOCATION/sbin/gpt-postinstall"></a>$GLOBUS_LOCATION/sbin/gpt-postinstall</h2><p>最后，终于完成了，SimpleCA生成了，但是我们也得到提示，还有一步：<br>Note: To complete setup of the GSI software you need to run the<br>following script as root to configure your security configuration<br>directory:</p>
<p>/usr/local/globus//setup/globus_simple_ca_b62cb8c1_setup/setup-gsi</p>
<p>For further information on using the setup-gsi script, use the -help<br>option. The -default option sets this security configuration to be<br>the default, and -nonroot can be used on systems where root access is<br>not available.</p>
<hr>
<p>setup-ssl-utils: Complete</p>
<p>我们查看一下，是不是真的生成了分发包：<br>[globus@xx1 globus]$ sudo ls ~/.globus/simpleCA/<br>cacert.pem crl grid-ca-ssl.conf newcerts serial<br>certs globus_simple_ca_b62cb8c1_setup-0.19.tar.gz index.txt private</p>
<p>接下来，我们要让我们的本机[xx1.com]，信任我们的globus的证书，那么我们要切换到root</p>
<p>[globus@xx1 globus]$ su - root<br>口令：</p>
<p>执行最后一步命令<br>[root@xx1 ~]# /usr/local/globus/setup/globus_simple_ca_b62cb8c1_setup/setup-gsi -default<br>setup-gsi: Configuring GSI security<br>Making /etc/grid-security…<br>mkdir /etc/grid-security<br>Making trusted certs directory: /etc/grid-security/certificates/<br>mkdir /etc/grid-security/certificates/<br>Installing /etc/grid-security/certificates//grid-security.conf.b62cb8c1…<br>Running grid-security-config…<br>Installing Globus CA certificate into trusted CA certificate directory…<br>Installing Globus CA signing policy into trusted CA certificate directory…<br>setup-gsi: Complete<br>（这步出现错误：<br>ERROR: Setup package not found. Looking for:<br>name=globus_simple_ca_11ad4bb3_setup,setup_name=, and setup version＝<br>就是因为环境变量没有设置好，把/etc/profile中的环境变量设置好就行了）<br>根据上面的输出，我们看看相应的目录下面是不是多了什么。<br>[root@xx1 ~]# ls /etc/grid-security/certificates/<br>b62cb8c1.0 globus-host-ssl.conf.b62cb8c1 grid-security.conf.b62cb8c1<br>b62cb8c1.signing_policy globus-user-ssl.conf.b62cb8c1</p>
<p>[root@xx1 ~]# ls /etc/grid-security/<br>certificates globus-host-ssl.conf globus-user-ssl.conf grid-security.conf</p>
<p>这些都是SimpleCA的配置文件，它们的具体总用，可以参考相应的文档。</p>
<h3>3.2 让本机请求证书并得到SimpleCA的认证。</h3>
[root@xx1 bin]#
./grid-cert-request -host xx1.com
<p>Generating a 1024<br>bit RSA private key</p>
<p>.++++++</p>
<p>……………………..++++++</p>
<p>writing new private<br>key to ‘/etc/grid-security/hostkey.pem’</p>
<hr>
<p>You are about to be<br>asked to enter information that will be incorporated</p>
<p>into your<br>certificate request.</p>
<p>What you are about<br>to enter is what is called a Distinguished Name or a DN.</p>
<p>There are quite a<br>few fields but you can leave some blank</p>
<p>For some fields<br>there will be a default value,</p>
<p>If you enter ‘.’,<br>the field will be left blank.</p>
<hr>
<p>Level 0 Organization<br>[Grid]:Level 0 Organizational Unit [GlobusTest]:Level 1 Organizational Unit<br>[simpleCA-xx1.com]:Name (e.g., John M. Smith) []:</p>
<p> </p>
<p>A private host key<br>and a certificate request has been generated</p>
<p>with the subject:</p>
<p> </p>
<p>/O=Grid/OU=GlobusTest/OU=simpleCA-xx1.com/CN=host/xx1.com</p>
<p> </p>
<hr>
<p> </p>
<p>The private key is<br>stored in /etc/grid-security/hostkey.pem</p>
<p>The request is<br>stored in /etc/grid-security/hostcert_request.pem</p>
<p> </p>
<p>Please e-mail the<br>request to the Globus Simple CA <a href="mailto:cy_xiaoxiao@yahoo.com.cn">cy_xiaoxiao@yahoo.com.cn</a></p>
<p>You may use a<br>command similar to the following:</p>
<p> </p>
<p>cat /etc/grid-security/hostcert_request.pem |<br>mail <a href="mailto:cy_xiaoxiao@yahoo.com.cn">cy_xiaoxiao@yahoo.com.cn</a></p>
<p> </p>
<p>Only use the above<br>if this machine can send AND receive e-mail. if not, please</p>
<p>mail using some<br>other method.</p>
<p> </p>
<p>Your certificate<br>will be mailed to you within two working days.</p>
<p>If you receive no<br>response, contact Globus Simple CA at <a href="mailto:cy_xiaoxiao@yahoo.com.cn">cy_xiaoxiao@yahoo.com.cn</a></p>
<p> </p>
<p>[root@xx1<br>grid-security]# pwd</p>
<p>/etc/grid-security</p>
<p> </p>
<p>运行完成后会产生以下几个文件：</p>
<p>/etc/grid-security/hostkey.pem</p>
<p>/etc/grid-security/hostcert_request.pem</p>
<p>/etc/grid-security/hostcert.pem<br>（空文件）</p>
<p> </p>
<p>下一步，我们要做的，就是转换为SimpleCA的角色，签署一下我们本机的认证请求。</p>
<p> </p>
<p>我们首先拷贝请求文件到/usr/local/globus/bin下</p>
<p>[root@xx1 ~]# cp<br>/etc/grid-security/hostcert_request.pem /usr/local/globus/bin/</p>
<p> </p>
<p>转换到globus下，因为我们本机是用globus用户产生的SimpleCA</p>
<p>[root@xx1 ~]# su -<br>globus</p>
<p> </p>
<p>[globus@xx1 ~]$ cd<br>/usr/local/globus/bin</p>
<p> </p>
<p>签署证书</p>
<p>[globus@xx1 bin]$<br>./grid-ca-sign -in hostcert_request.pem -out hostcert.pem</p>
<p> </p>
<p>To sign the request</p>
<p>please enter the password<br>for the CA key:</p>
<p> </p>
<p>The new signed<br>certificate is at: /home/globus/.globus/simpleCA//newcerts/01.pem</p>
<p> </p>
<p>把签署过的证书复制回去，覆盖原来的空文件</p>
<p>[globus@xx1 bin]$ su</p>
<ul>
<li>root</li>
</ul>
<p>口令：</p>
<p> </p>
<p>[root@xx1 ~]# cp<br>/usr/local/globus/bin/hostcert.pem /etc/grid-security/</p>
<p>cp：是否覆盖“/etc/grid-security/hostcert.pem”?<br>yes</p>
<p> </p>
<p>这三个文件属主都是root，但是我们的gridftp要用到它们，并且我们要采用globus用户启动web容器，所以我们就得有</p>
<p>两套认证的证书，一套归root使用，另一套归globus</p>
<p>[root@xx1<br>grid-security]# cp hostcert.pem containercert.pem</p>
<p> </p>
<p>[root@xx1<br>grid-security]# cp hostkey.pem containerkey.pem</p>
<p> </p>
<p>[root@xx1 grid-security]#<br>chown globus.globus container*.pem<br></content></p>
</article><div class="post-copyright"><div class="post-copyright__author"><span class="post-copyright-meta">文章作者: </span><span class="post-copyright-info"><a href="http://wangheng.org">王恒</a></span></div><div class="post-copyright__type"><span class="post-copyright-meta">文章链接: </span><span class="post-copyright-info"><a href="http://wangheng.org/globus-toolkit-install.html">http://wangheng.org/globus-toolkit-install.html</a></span></div><div class="post-copyright__notice"><span class="post-copyright-meta">版权声明: </span><span class="post-copyright-info">本博客所有文章除特别声明外，均采用 <a href="https://creativecommons.org/licenses/by-nc-sa/4.0/" target="_blank">CC BY-NC-SA 4.0</a> 许可协议。转载请注明来自 <a href="http://wangheng.org" target="_blank">王恒's Blog</a>！</span></div></div><div class="tag_share"><div class="post-meta__tag-list"><a class="post-meta__tags" href="/tags/Globus-Toolkit/">Globus Toolkit</a><a class="post-meta__tags" href="/tags/Ubuntu/">Ubuntu</a><a class="post-meta__tags" href="/tags/Ant/">Ant</a><a class="post-meta__tags" href="/tags/Openjdk/">Openjdk</a><a class="post-meta__tags" href="/tags/openssh/">openssh</a></div><div class="post_share"><div class="social-share" data-image="https://i.loli.net/2020/05/01/gkihqEjXxJ5UZ1C.jpg" data-sites="wechat,weibo,qq"></div><link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/butterfly-extsrc/sharejs/dist/css/share.min.css" media="print" onload="this.media='all'"><script src="https://cdn.jsdelivr.net/npm/butterfly-extsrc/sharejs/dist/js/social-share.min.js" defer></script></div></div><nav class="pagination-post" id="pagination"><div class="prev-post pull-left"><a href="/modify-openssh-server-port-number.html"><img class="prev-cover" src= "data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" data-lazy-src="https://i.loli.net/2020/05/01/gkihqEjXxJ5UZ1C.jpg" onerror="onerror=null;src='/img/404.jpg'" alt="cover of previous post"><div class="pagination-info"><div class="label">上一篇</div><div class="prev_info">修改openssh-server 的默认端口号</div></div></a></div><div class="next-post pull-right"><a href="/setup-vpn-the-server.html"><img class="next-cover" src= "data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" data-lazy-src="https://i.loli.net/2020/05/01/gkihqEjXxJ5UZ1C.jpg" onerror="onerror=null;src='/img/404.jpg'" alt="cover of next post"><div class="pagination-info"><div class="label">下一篇</div><div class="next_info">Ubuntu 搭建 Vpn 服务</div></div></a></div></nav><div class="relatedPosts"><div class="headline"><i class="fas fa-thumbs-up fa-fw"></i><span>相关推荐</span></div><div class="relatedPosts-list"><div><a href="/setup-vpn-the-server.html" title="Ubuntu 搭建 Vpn 服务"><img class="cover" src= "data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" data-lazy-src="https://i.loli.net/2020/05/01/gkihqEjXxJ5UZ1C.jpg" alt="cover"><div class="content is-center"><div class="date"><i class="far fa-calendar-alt fa-fw"></i> 2011-11-15</div><div class="title">Ubuntu 搭建 Vpn 服务</div></div></a></div><div><a href="/the-apache2-configure-multi-the-domain.html" title="Apache2配置多域名"><img class="cover" src= "data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" data-lazy-src="https://i.loli.net/2020/05/01/gkihqEjXxJ5UZ1C.jpg" alt="cover"><div class="content is-center"><div class="date"><i class="far fa-calendar-alt fa-fw"></i> 2012-02-17</div><div class="title">Apache2配置多域名</div></div></a></div><div><a href="/ubuntu-10-10-update-source.html" title="Ubuntu 10.10 更新源总结"><img class="cover" src= "data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" data-lazy-src="https://i.loli.net/2020/05/01/gkihqEjXxJ5UZ1C.jpg" alt="cover"><div class="content is-center"><div class="date"><i class="far fa-calendar-alt fa-fw"></i> 2011-06-01</div><div class="title">Ubuntu 10.10 更新源总结</div></div></a></div><div><a href="/ubuntu-12-04-source-list.html" title="ubuntu 12.04更新源"><img class="cover" src= "data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" data-lazy-src="https://i.loli.net/2020/05/01/gkihqEjXxJ5UZ1C.jpg" alt="cover"><div class="content is-center"><div class="date"><i class="far fa-calendar-alt fa-fw"></i> 2012-04-26</div><div class="title">ubuntu 12.04更新源</div></div></a></div><div><a href="/ubuntu-14-04-install-configure-denyhosts.html" title="ubuntu 安装配置denyhosts"><img class="cover" src= "data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" data-lazy-src="https://i.loli.net/2020/05/01/gkihqEjXxJ5UZ1C.jpg" alt="cover"><div class="content is-center"><div class="date"><i class="far fa-calendar-alt fa-fw"></i> 2015-05-06</div><div class="title">ubuntu 安装配置denyhosts</div></div></a></div><div><a href="/ubuntu-install-air-video-server.html" title="ubuntu中安装air video server"><img class="cover" src= "data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" data-lazy-src="https://i.loli.net/2020/05/01/gkihqEjXxJ5UZ1C.jpg" alt="cover"><div class="content is-center"><div class="date"><i class="far fa-calendar-alt fa-fw"></i> 2012-11-05</div><div class="title">ubuntu中安装air video server</div></div></a></div></div></div><hr/><div id="post-comment"><div class="comment-head"><div class="comment-headline"><i class="fas fa-comments fa-fw"></i><span> 评论</span></div></div><div class="comment-wrap"><div><div id="disqus_thread"></div></div></div></div></div><div class="aside-content" id="aside-content"><div class="card-widget card-info"><div class="is-center"><div class="avatar-img"><img src= "data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" data-lazy-src="/img/avatar.png" onerror="this.onerror=null;this.src='/img/friend_404.gif'" alt="avatar"/></div><div class="author-info__name">王恒</div><div class="author-info__description">make progress little day by day.</div></div><div class="card-info-data site-data is-center"><a href="/archives/"><div class="headline">文章</div><div class="length-num">86</div></a><a href="/tags/"><div class="headline">标签</div><div class="length-num">132</div></a><a href="/categories/"><div class="headline">分类</div><div class="length-num">7</div></a></div><a id="card-info-btn" target="_blank" rel="noopener" href="https://github.com/all4fun"><i class="fab fa-github"></i><span>关注</span></a></div><div class="sticky_layout"><div class="card-widget" id="card-toc"><div class="item-headline"><i class="fas fa-stream"></i><span>目录</span><span class="toc-percentage"></span></div><div class="toc-content"><ol class="toc"><li class="toc-item toc-level-3"><a class="toc-link"><span class="toc-number">1.</span> <span class="toc-text">1. 安装前准备工作</span></a><ol class="toc-child"><li class="toc-item toc-level-4"><a class="toc-link"><span class="toc-number">1.1.</span> <span class="toc-text">2.基本环境的配置（主节点和子节点一样）</span></a><ol class="toc-child"><li class="toc-item toc-level-5"><a class="toc-link"><span class="toc-number">1.1.1.</span> <span class="toc-text">2.1 Install JDK</span></a></li><li class="toc-item toc-level-5"><a class="toc-link"><span class="toc-number">1.1.2.</span> <span class="toc-text">2.2 Install ANT</span></a></li></ol></li></ol></li></ol></li><li class="toc-item toc-level-2"><a class="toc-link" href="#%E6%8E%A5%E7%9D%80%EF%BC%8C%E5%8F%88%E6%98%AF%E4%B8%80%E5%A0%86%E8%BE%93%E5%87%BA%EF%BC%8C%E6%88%91%E4%BB%AC%E5%8F%AF%E4%BB%A5%E7%9C%8B%E5%88%B0%E5%85%AC%E9%92%A5%E5%92%8C%E7%A7%81%E7%8E%A5%E6%94%BE%E5%9C%A8%E4%BB%80%E4%B9%88%E5%9C%B0%E6%96%B9%E4%BA%86%EF%BC%8C%E8%BF%98%E6%9C%89%E5%88%86%E5%8F%91%E5%8C%85%E6%94%BE%E5%9C%A8%E9%82%A3%E9%87%8C%EF%BC%BB%E5%88%86%E5%8F%91%E5%8C%85%E5%8F%AF%E4%BB%A5%E7%94%A8%E6%9D%A5%E9%85%8D%E7%BD%AE%E8%87%AA%E8%8A%82%E7%82%B9%EF%BC%BD%EF%BC%9A"><span class="toc-number"></span> <span class="toc-text">接着，又是一堆输出，我们可以看到公钥和私玥放在什么地方了，还有分发包放在那里［分发包可以用来配置自节点］：</span></a></li><li class="toc-item toc-level-2"><a class="toc-link" href="#GLOBUS-LOCATION-sbin-gpt-postinstall"><span class="toc-number"></span> <span class="toc-text">$GLOBUS_LOCATION/sbin/gpt-postinstall</span></a><ol class="toc-child"><li class="toc-item toc-level-3"><a class="toc-link"><span class="toc-number">1.</span> <span class="toc-text">3.2 让本机请求证书并得到SimpleCA的认证。</span></a></li></ol></div></div></div></div></main><footer id="footer"><div id="footer-wrap"><div class="copyright">©2020 - 2022 By 王恒</div><div class="framework-info"><span>框架 </span><a target="_blank" rel="noopener" href="https://hexo.io">Hexo</a><span class="footer-separator">|</span><span>主题 </span><a target="_blank" rel="noopener" href="https://github.com/jerryc127/hexo-theme-butterfly">Butterfly</a></div></div></footer></div><div id="rightside"><div id="rightside-config-hide"><button id="readmode" type="button" title="阅读模式"><i class="fas fa-book-open"></i></button><button id="darkmode" type="button" title="浅色和深色模式转换"><i class="fas fa-adjust"></i></button><button id="hide-aside-btn" type="button" title="单栏和双栏切换"><i class="fas fa-arrows-alt-h"></i></button></div><div id="rightside-config-show"><button id="rightside_config" type="button" title="设置"><i class="fas fa-cog fa-spin"></i></button><button class="close" id="mobile-toc-button" type="button" title="目录"><i class="fas fa-list-ul"></i></button><a id="to_comment" href="#post-comment" title="直达评论"><i class="fas fa-comments"></i></a><button id="go-up" type="button" title="回到顶部"><i class="fas fa-arrow-up"></i></button></div></div><div id="local-search"><div class="search-dialog"><nav class="search-nav"><span class="search-dialog-title">搜索</span><span id="loading-status"></span><button class="search-close-button"><i class="fas fa-times"></i></button></nav><div class="is-center" id="loading-database"><i class="fas fa-spinner fa-pulse"></i><span> 数据库加载中</span></div><div class="search-wrap"><div id="local-search-input"><div class="local-search-box"><input class="local-search-box--input" placeholder="搜索文章" type="text"/></div></div><hr/><div id="local-search-results"></div></div></div><div id="search-mask"></div></div><div><script src="/js/utils.js"></script><script src="/js/main.js"></script><script src="https://cdn.jsdelivr.net/npm/@fancyapps/ui/dist/fancybox.umd.min.js"></script><script src="https://cdn.jsdelivr.net/npm/instant.page/instantpage.min.js" type="module"></script><script src="https://cdn.jsdelivr.net/npm/vanilla-lazyload/dist/lazyload.iife.min.js"></script><script src="/js/search/local-search.js"></script><div class="js-pjax"><script>function loadDisqus () {
var disqus_config = function () {
this.page.url = 'http://wangheng.org/globus-toolkit-install.html'
this.page.identifier = '/globus-toolkit-install.html'
this.page.title = 'Globus Toolkit 安装与配置'
};
window.disqusReset = () => {
DISQUS.reset({
reload: true,
config: disqus_config
})
}
if (window.DISQUS) disqusReset()
else {
(function() {
var d = document, s = d.createElement('script');
s.src = 'https://wangheng.disqus.com/embed.js';
s.setAttribute('data-timestamp', +new Date());
(d.head || d.body).appendChild(s);
})();
}
document.getElementById('darkmode').addEventListener('click', () => {
setTimeout(() => window.disqusReset(), 200)
})
}
if ('Disqus' === 'Disqus' || !true) {
if (true) btf.loadComment(document.getElementById('disqus_thread'), loadDisqus)
else loadDisqus()
} else {
function loadOtherComment () {
loadDisqus()
}
}
</script></div><script async data-pjax src="//busuanzi.ibruce.info/busuanzi/2.3/busuanzi.pure.mini.js"></script></div></body></html>