The wiki is deprecated and due to be decommissioned by the end of September 2022.
The content is being migrated to other supports, new updates will be ignored and lost.
If needed you can get in touch with EGI SDIS team using operations @ egi.eu.
Difference between revisions of "Federated AAI Configuration"
| Line 38: | Line 38: | ||
/etc/grid-security/vomsdir/fedcloud.egi.eu/voms1.egee.cesnet.cz.lsc:<br> | /etc/grid-security/vomsdir/fedcloud.egi.eu/voms1.egee.cesnet.cz.lsc:<br> | ||
<pre>/DC=org/DC=terena/DC=tcs/ | <pre> | ||
/DC=org/DC=terena/DC=tcs/OU=Domain Control Validated/CN=voms1.egee.cesnet.cz | |||
/C=NL/O=TERENA/CN=TERENA eScience SSL CA | /C=NL/O=TERENA/CN=TERENA eScience SSL CA | ||
</pre> | </pre> | ||
/etc/grid-security/vomsdir/fedcloud.egi.eu/voms2.grid.cesnet.cz.lsc:<br> | /etc/grid-security/vomsdir/fedcloud.egi.eu/voms2.grid.cesnet.cz.lsc:<br> | ||
<pre>/DC=org/DC=terena/DC=tcs/ | <pre> | ||
/DC=org/DC=terena/DC=tcs/OU=Domain Control Validated/CN=voms2.egee.cesnet.cz | |||
/C=NL/O=TERENA/CN=TERENA eScience SSL CA | /C=NL/O=TERENA/CN=TERENA eScience SSL CA | ||
</pre> | </pre> | ||
/etc/grid-security/vomsdir/ops/lcg-voms2.cern.ch.lsc:<br> | /etc/grid-security/vomsdir/ops/lcg-voms2.cern.ch.lsc:<br> | ||
<pre>/DC=ch/DC=cern/OU=computers/CN=lcg-voms2.cern.ch | <pre>/DC=ch/DC=cern/OU=computers/CN=lcg-voms2.cern.ch | ||
/DC=ch/DC=cern/CN=CERN Grid Certification Authority | /DC=ch/DC=cern/CN=CERN Grid Certification Authority | ||
</pre> | </pre> | ||
Revision as of 15:53, 17 February 2015
This page lists various AAI configurations for individual Cloud technologies.
OpenNebula
The full OpenNebula configuration including AAI settings: OpenNebula Configuration
OpenStack
Keystone
The generic documentation about how to enable VOMS support for Keystone can be found here[1].
When it comes to configuration, you will need the following files as a member of EGI FCTF.
/etc/keystone/voms.json
{
"fedcloud.egi.eu": {
"tenant": "EGI_FCTF"
},
"ops": {
"tenant": "EGI_ops"
}
}
Of course, the Keystone tenants EGI_FCTF and EGI_ops need to exist prior to using this mapping for the first time.
In order to accept VOMS proxy certificates for VOs fedcloud.egi.eu and ops, the following files need to be created.
/etc/grid-security/vomsdir/
├── fedcloud.egi.eu
│ ├── voms1.egee.cesnet.cz.lsc
│ └── voms2.grid.cesnet.cz.lsc
└── ops
├── lcg-voms2.cern.ch.lsc
└── voms2.cern.ch.lsc
They have to contain the following:
/etc/grid-security/vomsdir/fedcloud.egi.eu/voms1.egee.cesnet.cz.lsc:
/DC=org/DC=terena/DC=tcs/OU=Domain Control Validated/CN=voms1.egee.cesnet.cz /C=NL/O=TERENA/CN=TERENA eScience SSL CA
/etc/grid-security/vomsdir/fedcloud.egi.eu/voms2.grid.cesnet.cz.lsc:
/DC=org/DC=terena/DC=tcs/OU=Domain Control Validated/CN=voms2.egee.cesnet.cz /C=NL/O=TERENA/CN=TERENA eScience SSL CA
/etc/grid-security/vomsdir/ops/lcg-voms2.cern.ch.lsc:
/DC=ch/DC=cern/OU=computers/CN=lcg-voms2.cern.ch /DC=ch/DC=cern/CN=CERN Grid Certification Authority
/etc/grid-security/vomsdir/ops/voms2.cern.ch.lsc:
/DC=ch/DC=cern/OU=computers/CN=voms2.cern.ch /DC=ch/DC=cern/CN=CERN Grid Certification Authority