Tutorialihep2013 11

End-user tutorial at IHEP, Beijing (China), November 2013

The information below is intended to the individuals who registered for participating on the tutorial scheduled at IHEP computing center from Nov. 13th to 15th, 2013.

Agenda

The detailed agenda of the tutorial is at https://indico.in2p3.fr/conferenceDisplay.py?confId=9051.

What to prepare for the tutorial

1. Bring your own computer

   You are required to bring your own personal computer in order to do the exercises. You will be provided wireless access to the network, so make sure your computer have a wireless network card.

   Please bear in mind that the DIRAC client software cannot be installed on a Windows machine. If your machine runs Windows you can use your account in IHEP computing center or install a Linux distribution (e.g. Ubuntu) in a virtual machine on your computer.

2. Apply for your user credentials

   DIRAC uses X509 certificates to identify and authenticate users. These certificates are delivered to each individual by trusted certification authorities.

   If you have a personal certificate issued by a EUGridPMA-certified authority you can use it for this tutorial. Otherwise, IHEP certification authority can deliver one for you. Click on the link Online for User Request in this page and follow the instructions. Your certificate may take a few days to be delivered, so please ask for your certificate well in advance and in any case, before the tutorial starts.

3. Export your credentials from your browser

   Your personal certificate is usually delivered to you via a web site and is automatically loaded in your browser. You need to export it from the browser and put it in the appropriate format for DIRAC to use. This is a one-time operation. Please follow the instructions in this document to export your certificate to a local file and named $HOME/MyCertificate.

4. Install your credentials

   You can user the commands below in any Unix machine to get your user credentials in the format and location expected by DIRAC:

   mkdir -p $HOME/.globus
   chmod 700 $HOME/.globus
   openssl pkcs12 -in  $HOME/MyCertificate -clcerts -nokeys -out $HOME/.globus/usercert.pem
   openssl pkcs12 -in  $HOME/MyCertificate -nocerts -out $HOME/.globus/userkey.pem
   chmod 600 $HOME/.globus/usercert.pem $HOME/.globus/userkey.pem
   

5. Send your certificate's subject to the tutorial organizers

   Before the tutorial starts, the organizers need to configure the DIRAC server so that you get registered as a user. In order to do that, they need to know your certificate's subject. Please use the command below on any Unix machine and send its output to the tutorial organizers:

   openssl x509 -in $HOME/.globus/usercert.pem -subject -noout