a multi-objective bisexual reproduction genetic algorithm for ...

103
grid-ca-sign -in /root/hostcert_request.pem -out /root/hostcert.pem
mycapw
Then, ftp the file /root/hostcert.pem back to the server machine and place it in
the directory /etc/grid-security.
B.2.10 Requesting and Signing User Certificates
For each user who will use the grid (in our example, user snobol on the client
machine m1), the following procedure must be executed by the user and Certificate
Authority. On the snobol user’s logon, run:
grid-cert-request
The user should make up his own passphrase for his certificate. He will use this
same passphrase later with the grid-proxy-init command to authenticate with the
grid. In our example, the snobol user’s login password could be used here.
The user must then send the file /home//.globus/usercert_request.pem
to the Certificate Authority (machine m2) for signing. On the CA machine (m2), sign
the certificate using root with the following command, adjusting the location of
usercert_request.pem to point to wherever the above request file is now stored on m2:
grid-ca-sign -in usercert_request.pem -out usercert.pem
mycapw
Securely send the file usercert.pem back the requesting user. The user should
put the file usercert.pem into his /home//.globus directory.
The user should also be added to the grid-mapfile (on machine m2 under root)
using the following command (note the backward apostrophe characters next to the
double quote characters):
grid-mapfile-add-entry -dn “`grid-cert-info -f usercert.pem –subject`” –ln globususer
Copy grid-mapfile in /etc/grid-security/grid-mapfile to each of the other servers
(m2) so that all of the servers have this file.
B.2.11 Setting Up the Gatekeepers
On each server (m2 and m3), add the following two lines to the file
/etc/services:
gsigatekeeper 2119/tcp #globus gatekeeper
gsiftp 2811/tcp #globus wuftp
Create the file /etc/xinetd.d/gsigatekeeper on each server, containing the lines: