Alert.png The wiki is deprecated and due to be decommissioned by the end of September 2022.
The content is being migrated to other supports, new updates will be ignored and lost.
If needed you can get in touch with EGI SDIS team using operations @ egi.eu.

User:Enolfc

From EGIWiki
Revision as of 15:49, 10 August 2011 by Enolfc (talk | contribs) (→‎GSISSH)
Jump to navigation Jump to search

Enol Fernandez - CSIC https://www.egi.eu/sso/userDetail/enolfc

Random stuff:

GRAM 5

# Criteria Accepted

(Y/N/NA)

Tested

(TP/VLD)

Comments
Generic Capabilities QC v2
1 DOCUMENTATION
1.1 GENERIC_DOC_1 (Functional Description) Y VLD Available at http://globus.org.eu/toolkit/docs/5.0/5.0.3/execution/gram5/
1.2 GENERIC_DOC_2 (Release Notes) Y VLD Release notes available at: http://globus.org.eu/toolkit/docs/5.0/5.0.3/execution/gram5/rn/
1.3 GENERIC_DOC_3 (User Documentation) Y VLD Available at http://globus.org.eu/toolkit/docs/5.0/5.0.3/execution/gram5/user
1.4 GENERIC_DOC_4 (Online help (man pages)) Y VLD Commands have man and -help options
1.5 GENERIC_DOC_5 (API Documentation) Y VLD API described at http://globus.org.eu/toolkit/docs/5.0/5.0.3/execution/gram5/pi/#gram5PI
1.6 GENERIC_DOC_6 (Administrator Documentation) Y VLD Available at http://globus.org.eu/toolkit/docs/5.0/5.0.3/execution/gram5/admin/. Documentation is not enough to configure the service from scratch.
1.7 GENERIC_DOC_7 (Service Reference Card)
1.8 GENERIC_DOC_8 (Software License) Y VLD Apache License, hard to find in documentation
1.9 GENERIC_DOC_9 (Release changes testing)
2 SOFTWARE DISTRIBUTION
2.1 GENERIC_DIST_1 (Source Code Availability) Y VLD CVS available with code
2.2 GENERIC_DIST_2 (Source Distribution) VLD
2.3 GENERIC_DIST_3 (Binary Distribution) ?? VLD Packages install: yum install ige-meta-globus-gram5

But there is a problem with GPG keys, installing with gpgcheck disabled for now, but will come back:

Downloading Packages:
warning: rpmts_HdrFromFdno: Header V3 RSA/SHA1 signature: NOKEY, key ID 0005e989
IGE.globus-gram5.sl5.x86_64/gpgkey                                                            |  915 B     00:00     
Public key for globus-gass-copy-progs-5.10-2.el5.x86_64.rpm is not installed
3 SOFTWARE FEATURES
3.1 GENERIC_SOFT_1 (Backwards Compatibility) NA VLD No previous releases in UMD
4 SERVICE CRITERIA
4.1 GENERIC_SERVICE_1 (Service control and status) Y VLD Service script does not return status properly.
4.2 GENERIC_SERVICE_2 (Log Files) Y VLD Logs generated in /var/log/
4.3 GENERIC_SERVICE_3 (Service Reliability)
4.4 GENERIC_SERVICE_4 (Service Robustness)
5 SECURITY
5.1 GENERIC_SEC_1 (World Writable Files)
5.2 GENERIC_SEC_2 (Directory Traversal Attacks testing)
6 MISCELLANEOUS
6.1 GENERIC_MISC_2 (Bug Tracking System) Y VLD
Security Capabilties QC v2
7 AUTHENTICATION
7.1 AUTHN_IFACE_1 (X.509 Certificate support)
7.3 AUTHN_DELEG_1 (Delegation Interface)
9 AUTHORISATION
9.5 AUTHZ_PCYDEF_3 (Ban UserFQAN)
9.6 AUTHZ_PCYDEF_4 (Allowed users definition) Y VLD Users are defined in the gridmap file
9.8 AUTHZ_PEP_1 (Policy Enforcement) Y VLD
9.9 AUTHZ_PEP_2 (User Mapping) Y VLD gridmap file mapping available.
Information Capabilities QC v2
11 INFORMATION MODEL
11.1 INFOMODEL_SCHEMA_1 (GlueSchema Support) NA GRAM5 does product does not include
12 INFORMATION DISCOVERY
12.1 INFODISC_IFACE_1 (Information Discovery Interface)
Compute Capabilities QC v2
14 JOB EXECUTION
14.1 JOBEXEC_IFACE_1 (Job Execution Interface)
14.2 JOBEXEC_JOB_1 (Simple Job)
14.3 JOBEXEC_JOB_2 (Simple Job with inputoutput files)
14.4 JOBEXEC_JOB_3 (Cancel Job)
14.5 JOBEXEC_EXECMNGR_1 (Not Invasive Deployment)
14.6 JOBEXEC_EXECMNGR_2 (Job Management)
14.7 JOBEXEC_EXECMNGR_3 (Information Retrieval)
14.8 JOBEXEC_AVAIL_1 (Service Redundancy)
14.9 JOBEXEC_AVAIL_2 (Self Disabling Mechanism)
14.10 JOBEXEC_AVAIL_3 (Job Submission Peaks)
14.11 JOBEXEC_AVAIL_4 (Timely Job Status Updates)
15 PARALLEL JOB
15.1 PARALLEL_JOB_1 (Simple parallel job submission)
15.2 PARALLEL_JOB_2 (Single machine parallel job submission)
15.3 PARALLEL_JOB_3 (Fine grained mapping parallel job submission)
15.4 PARALLEL_MPI_1 (Precompiled MPI job Execution)
15.5 PARALLEL_MPI_2 (MPI job Execution from source.)
15.6 PARALLEL_OMP_1 (Precompiled OpenMP job Execution)
15.7 PARALLEL_OMP_2 (OpenMP job Execution from source)
Operations Capabilities QC v2
26 MONITORING PROBES
26.2 MON_PROBE_GENERIC_1 (Certificate Lifetime Probe)
26.3 MON_PROBE_GENERIC_2 (Service Probe)
26.4 MON_PROBE_JOBEXEC_1 (Job Execution Probe)
27 ACCOUNTING CAPABILITY
27.1 ACC_JOBEXEC_1 (Job Execution Appliances Accounting)

GSISSH

# Criteria Accepted

(Y/N/NA)

Tested

(TP/VLD)

Comments
Generic Capabilities QC v2
1 DOCUMENTATION
1.1 GENERIC_DOC_1 (Functional Description) Y VLD Available at http://globus.org.eu/toolkit/docs/5.0/5.0.3/security/openssh/
1.2 GENERIC_DOC_2 (Release Notes) Y VLD Release notes available at: http://globus.org.eu/toolkit/docs/5.0/5.0.3/security/openssh/rn/#opensshRN
1.3 GENERIC_DOC_3 (User Documentation) Y VLD
1.4 GENERIC_DOC_4 (Online help (man pages)) Y VLD Commands have man and -h options. The help shown by the command is not enough for
1.5 GENERIC_DOC_5 (API Documentation) NA VLD No API for GSISSH
1.6 GENERIC_DOC_6 (Administrator Documentation) NA VLD It does not include gsissh server
1.7 GENERIC_DOC_7 (Service Reference Card) NA VLD Does not include the gsissh server
1.8 GENERIC_DOC_8 (Software License) Y VLD Apache License, hard to find in documentation
1.9 GENERIC_DOC_9 (Release changes testing)
2 SOFTWARE DISTRIBUTION
2.1 GENERIC_DIST_1 (Source Code Availability) Y VLD CVS available with code
2.2 GENERIC_DIST_2 (Source Distribution) VLD
2.3 GENERIC_DIST_3 (Binary Distribution) ?? VLD Packages install: yum install ige-meta-globus-gsissh

But there is a problem with GPG keys, installing with gpgcheck disabled for now, but will come back:

warning: rpmts_HdrFromFdno: Header V3 RSA/SHA1 signature: NOKEY, key ID 0005e989
IGE.globus-gsissh.sl5.x86_64/gpgkey                                                                                                                 |  915 B     00:00     
Importing GPG key 0xB4D025B3 "Initiative for Globus in Europe - short (IGE) <info@ige-project.eu>" from http://repo-rpm.ige-project.eu/RPM- GPG-KEY-IGE
Is this ok [y/N]: y

Public key for gsissh-4.3p2-1.el5.x86_64.rpm is not installed
3 SOFTWARE FEATURES
3.1 GENERIC_SOFT_1 (Backwards Compatibility) NA VLD No previous releases in UMD
4 SERVICE CRITERIA
4.1 GENERIC_SERVICE_1 (Service control and status) NA VLD No services to run
4.2 GENERIC_SERVICE_2 (Log Files) NA VLD No services
4.3 GENERIC_SERVICE_3 (Service Reliability) NA VLD No services
4.4 GENERIC_SERVICE_4 (Service Robustness) NA VLD No services
5 SECURITY
5.1 GENERIC_SEC_1 (World Writable Files) NA VLD Only client, no world writable files.
5.2 GENERIC_SEC_2 (Directory Traversal Attacks testing) NA VLD Only client, no services
6 MISCELLANEOUS
6.1 GENERIC_MISC_2 (Bug Tracking System) Y VLD IGE enrolled in GGUS
Security Capabilties QC v2
7 AUTHENTICATION
7.1 AUTHN_IFACE_1 (X.509 Certificate support) Y VLD X.509 certificates with voms extensions accepted.
7.3 AUTHN_DELEG_1 (Delegation Interface) NA VLD No services
9 AUTHORISATION
9.5 AUTHZ_PCYDEF_3 (Ban UserFQAN) NA VLD Only client service, server white-lists users.
9.6 AUTHZ_PCYDEF_4 (Allowed users definition) Y VLD Only client service, users are defined in the gridmap file
9.8 AUTHZ_PEP_1 (Policy Enforcement) Y VLD Only client service, gsissh server policy is enforced correctly
9.9 AUTHZ_PEP_2 (User Mapping) Y VLD Only client service, gsissh server includes gridmap file mapping.
Compute Capabilities QC v2
16 INTERACTIVE JOB MANAGEMENT
16.1 INTERACTIVE_JOB_1 (Interactive login) Y VLD gsissh provides interactive login to remote nodes using X509 certificates.
Operations Capabilities QC v2
26 MONITORING PROBES
26.2 MON_PROBE_GENERIC_1 (Certificate Lifetime Probe) NA VLD Not a service, only client.
26.3 MON_PROBE_GENERIC_2 (Service Probe) NA VLD Not a service, only client.