First, I tested again for the update RPM xsede-oauth-mapfile and it worked.
Update the rpm and add the ‘MAP-RESOURCE: "expanse.sdsc.xsede.org"’ to the map-config.json .
Running the ‘sudo <rpm-path>/bin/xsede-oauth-mapfile.sh’ generated ‘/etc/grid-security/xsede-oauth-mapfile’ fille successfully.
As the result, three pairs of storage gateways and their collections as shown below, and I can access them via https://app.globus.org/ by searching 'xcidev1' collections.
I am done with the "XSEDE Globus Connect Server v5.4 Installation Guide" (https://docs.google.com/document/d/18eft0Hm94xjV3sqe0UBVrgKi7w9ohaDy1jyz...)
As the result, I was able to create the three pairs of storage gateways and their collections as shown below.
$ globus-connect-server whoami
Username | Name | ID | Email
------------- | ------------ | ------------------------------------ | ----------------
jkm@xsede.org | Jonghoon Kim | ecb182f4-96b1-4cd1-83b5-d6ca9255d658 | jkm@illinois.edu
$ globus-connect-server storage-gateway list
Display Name | ID | Connector | High Assurance
----------------------------------------------- | ------------------------------------ | --------- | --------------
Expanse XSEDE Gateways Storage Gateway | 57cbb913-1db6-4ab0-8552-b2fcaf983dbd | POSIX | False
Expanse XSEDE Useer Storage Gateway | 9fd69a73-a1d2-41d3-b3ba-71b97029f976 | POSIX | False
Expanse XSEDE Guest Collections Storage Gateway | effafbab-f00b-474f-936b-45bc5bfef0e3 | POSIX | False
$ globus-connect-server collection list
ID | Display Name | Owner | Collection Type | Storage Gateway ID
------------------------------ | -------------------------------------------------- | ------------ | --------------- | ------------------------------------
0ba3ed73-79ce-4cce-92a5-5893c3c8a940 | Expansee XSEDE Gateways Collections | jkm@xsede.org | mapped | 57cbb913-1db6-4ab0-8552-b2fcaf983dbd
5705bbdd-7f0e-4e84-8673-7e3065b94ebe | Expanse XSEDE User Data Collection | jkm@xsede.org | mapped | 9fd69a73-a1d2-41d3-b3ba-71b97029f976
8ba2076f-893c-4b00-84b9-747ccfe3b8f4 | Expanse XSEDE Guest Collections for Users Sharing | jkm@xsede.org | mapped | effafbab-f00b-474f-936b-45bc5bfef0e3
Now, Test1 (T1) is done from me.
First, I tested again for the update RPM xsede-oauth-mapfile and it worked.
Update the rpm and add the ‘MAP-RESOURCE: "expanse.sdsc.xsede.org"’ to the map-config.json .
Running the ‘sudo <rpm-path>/bin/xsede-oauth-mapfile.sh’ generated ‘/etc/grid-security/xsede-oauth-mapfile’ fille successfully.
Second, I am done with the "XSEDE Globus Connect Server v5.4 Installation Guide" (https://docs.google.com/document/d/18eft0Hm94xjV3sqe0UBVrgKi7w9ohaDy1jyz...)
As the result, three pairs of storage gateways and their collections as shown below, and I can access them via https://app.globus.org/ by searching 'xcidev1' collections.
----------
$ globus-connect-server storage-gateway list
Display Name | ID | Connector | High Assurance
----------------------------------------------- | ------------------------------------ | --------- | --------------
xcidev1 XSEDE Gateways Storage Gateway | 045b7ef5-9167-49fd-913b-5f44eacf166e | POSIX | False
xcidev1 XSEDE Guest Collections Storage Gateway | 8eac372b-c6fb-40c5-b8b7-876cc85ead8d | POSIX | False
xcidev1 XSEDE User Storage Gateway | cbdbad47-54a3-4ef9-a87c-8109c6fae68b | POSIX | False
------------
$ globus-connect-server collection list
ID | Display Name | Owner | Collection Type | Storage Gateway ID
------------------------------------ | -------------------------------------------------- | ------------- | --------------- | ------------------------------------
3e44567e-2a22-4391-a91a-8ebb36c259ed | xcidev1 XSEDE User Data Collection | jkm@xsede.org | mapped | cbdbad47-54a3-4ef9-a87c-8109c6fae68b
4503dafa-2894-4105-a561-484139c82144 | xcidev1 XSEDE Guest Collections for Users Sharing | jkm@xsede.org | mapped | 8eac372b-c6fb-40c5-b8b7-876cc85ead8d
79847e56-77dd-40d1-b4a6-486baa3c3052 | xcidev1 XSEDE Gateways Collections | jkm@xsede.org | mapped | 045b7ef5-9167-49fd-913b-5f44eacf166e
-----
Note: for the authentication, I had to go through 2FA auth again for accessing the Gest collection.
TEST1 is done.
TEST2 (from the Testing Plan doc ) succeed.
TEST3 (from the Testing Plan doc )
Two issues.
1. the Prerequisites "Follow GCS Domain Guide" link is broken.
2. I ran the test3.3 command with existing ' /etc/pki/tls/certs/*.pem' files and got error as shown below. ( I didn't use sudo )
globus-connect-server endpoint domain update \
--wildcard \
--certificate-path /etc/pki/tls/certs/hostcert.pem \
--private-key-path /etc/pki/tls/certs/hostkey.pem \
--certificate-chain-path /etc/pki/tls/certs/incommon_rsa_chain.pem \
--domain xcidev1.dyn.xsede.org \
--managed
OUTPUT:
PermissionError: [Errno 13] Permission denied: '/etc/pki/tls/certs/hostkey.pem'
The "endpoint domain update" command should be run as root (sudo) on xcidev1 so that it can access the "*.pem" files.
When I run it with 'sudo' I got this error.
Error: You must login first, before running this command!
I logged in as jkm as shown below.
$ globus-connect-server whoami
Username | Name | ID | Email
------------- | ------------ | ------------------------------------ | ----------------
jkm@xsede.org | Jonghoon Kim | ecb182f4-96b1-4cd1-83b5-d6ca9255d658 | jkm@illinois.edu
I don’t know if this matters but in case it helps to debug.
According to the command examples from ‘4.2.2. Setup the endpoint’, ‘4.3. Start the server’ and ‘4.4. Add Data Transfer Nodes to the endpoint’. at https://docs.globus.org/globus-connect-server/v5.4/#set-endpoint-as-managed , I used ‘sudo’ for 4.3 and 4.4 but not for 4.2.2.
It worked after login with 'sudo' and run the command.
Pages