DNS Name:Port Host & DNS Name IP

mudgreedyΔιακομιστές

9 Δεκ 2013 (πριν από 3 χρόνια και 6 μήνες)

351 εμφανίσεις

I began by setting up the following machines with CENTOS 5.3, MySql 5.0.45 (client and server packages), java
1.5.0_18 and caGrid 1.3. I also configured each machine to use ntpd to keep the clock accurate.

DNS Name
:Port

Host & DNS Name

IP

auth
.grid.cci.emory.edu
:8443

core
grid
01.cci.emory.edu

192.168
.
201
.95

index.grid.cci.emory.edu:8080

core
grid
02.cci.emory.edu

192.168
.
201
.99

mms.grid.cci.emory.edu:8081

globalmodelexchange.grid.cci.emory.edu:8443

portal.grid.cci.emory.edu:8082

cds.grid.cci.emory.edu:8443

core
grid
03.cci.emory.edu

192.168
.
201
.105

dorian.grid.cci.emory.edu:8443

core
grid
04.cci.emory.edu

192.168
.
201
.117

grouper.grid.cci.emory.edu:8443

core
grid
05.cci.emory.edu

192.168
.
201
.118

mastergts.grid.cci.emory.edu:8443

core
grid
06.cci.emory.edu

192.168
.
201
.119

slavegts.grid.cci.emory.edu:8443

core
grid
07.cci.emory.edu

192.168
.
201
.128

workflow
-
bpel.grid.cci.emory.edu:8443

core
grid
08.cci.emory.edu

192.168
.
201
.129

workflow
-
scufl.grid.cci.emory.edu:8444

fqp.grid.cci.emory.edu:8445



I enabled the mysqld service for core
grid
01, core
grid
03, core
grid
04, core
grid
05,

core
grid
06,

core
grid
07.


r
oot password is
__________________

cvrg
Admin password is
_____________



Master GTS

caGrid

should be configured for the training grid so that initial administrator can be authenticated from it.

Create Certificate Authority

export
GTS_HOME=$CAGRID_LOCATION/projects/gts


The distinguished name (DN) for the CA

is

O
=GRID
,
OU=
Trust Fabric
,
CN
=GRID

T
rust Fabric CA

password is:
____________________

Put CA private key at

/home/cvrgAdmin/certificates/gts/trustca
-
key.pem

Put CA certificate at

/home/cvrgAdmin/certificates/gts/
trustca
-
cert.pem

Made
credentials valid for
3650

days

Create Host Certificate

c
d $CAGRID_LOCATION/projects/gts

ant createAndSignHostCertificate

Host name is

masterg
ts.
grid.cci.emory.edu

Valid
for 29998

days

Put host key at

/home/cvrgAdmin/certificates/gts/
mastergts.
grid.cci.emory.edu
-
key.pem

Note that key and cert file names should
be based on the fully qualified DNS name.

Puthost certificate at

/home/cvrgAdmin/certificates/gts/
mastergts.
grid.cci.emory.edu
-
cert
.pem

Configure the Container

Set host name to
mastergts.
grid.cci.emory.edu

Shutdown port
8005

HTTPS Port 8443

Installation directory for tomcat is

/apps


Configure Globus to trust GTS

Put CA certificate in $HOME/
.globus/certificates

(create directory if needed) with the file name cacert.0


Configuring SyncGTS to ignore the GTS CA

Edit
/apps/apache
-
tomcat
-
5.5.27/webapps/wsrf/WEB
-
INF/etc/cagrid_SyncGTS/sync
-
description.xml

so that master GTS ignores previous configuration for any previously configured grid and itself.


<ns1:ExcludedCAs>


<ns1:CASubject>O=caBIG,OU=caGrid,OU=Training Tru
st Fabric,CN=caGrid Training Trust Fabric CA</ns1:CASubject>


<ns1:CASubject>O
=GRID
,OU=Trust Fabric,CN
=GRID

Trust Fabric CA</ns1:CASubject>


</ns1:ExcludedCAs>

Configure GTS

cp /apps/temp/Prod/GTS
-
Master/gts
-
conf.xml $CAGRID_LOCATION/projects/gts/etc

c
p

/apps/temp/Prod/GTS
-
Master/serviceMetadata.xml

$CAGRID_LOCATION/projects/gts/etc

cp


/apps/temp/Prod/GTS
-
Master/sync
-
description.xml


$CATALINA_HOME/webapps/wsrf/WEB
-
INF/etc/cagrid_SyncGTS

Edit syncGTS service.properties of the deployed SyncGTS

vi
$CATALINA_HOME/
w
ebapps/wsrf/WEB
-
INF/etc/cagrid_SyncGTS/jndi
-
config.xml

Replacing the "true" value with "false"

The final configuration should look like this


<parameter>


<name>performFirstSync</name>


<value>false</value>


</parameter>

The following .zip file contains configuration files for core grid services
. Files need to be edited for consistency
with
the proper
URLs and CA distinguished name:


Passwords and user names need to be edited.

Prod/GTS
-
Master/gts
-
conf.xml

needs to have correct mySQL information. Hostname should be changed to
localhost.

Further instructions are at
https://wiki.cagrid.o
rg/display/caGrid13/Upgrade+caGrid+1.2+Grid+to+caGrid+1.3

mySQL root password is
____________

Be sure to set the password for root@localhost,
root@127.0.0.1

and root@hostname

Master gts database name is gts_master

Under
/apps/caGrid/projects/gts/deploy.properties

set

perform.index.service.registration=false

In
/apps/temp/Prod/GTS
-
Master/service.properties

set

performFirstSync=false

So that the master does not try to sync with itself or the slave.

After editing files, follow step 6 of the wikii directions


Deploy GTS

Cd $GTS_HOME

Ant deployTomcat

Start Container


Add GTS Administrator

ant addAdmin

identity is

/O=caBIG/OU=caGrid/OU=Training/OU=Dorian/CN=mgrand

Copy training grid certificates so that

this identity will be trusted.

cp repository/caGrid/target_grid/training
-
1.3/certificates/68907d53* /home/cvrgAdmin/.globus/certificates

Configuring SyncGTS to ignore the GTS CA

Modify SyncGTS so that the certificates will not be deleted.





Slave GTS


T
he MySQL root password is
____________

The database name should be
gts_slave

Create Host Certificate

The host certificate for the slave GTS host needs to be created on the master GTS host. On master GTS host:

cd $GTS_HOME

ant createAndSignHostCertificate

Copy Certificates from Master Host to Slave Host

This and the following steps are performed on the slave host.

Copy CA certificate from master

rm .globus/certificates/*

scp core
grid
06:.globus/certificates/cacert.
0 .globus/certificates

Copy slave host certi
ficate from master

mkdir .cagrid/certificates

scp core
grid06:certificates/gts/slavegts.
grid.cci.emory.edu
-
cert.pem .cagrid/certificates

scp coregrid06:certificates/gts/slavegts.
grid.cci.emory.edu
-
key.pem .cagrid/certificates

Configure Files

Here is your ta
rget grid setup (minus the cacert.0)


1.

copy to machine

2.

expand

3.

modify URLS to match grid

4.

rename
the top
-
level directory grid
-
1.3
and the top
-
level file ivy
-
grid
-
1.3.xml
to a name appropriate for
the target grid.

For example, if the
name

of the new target grid is xyz
-
1.3, then rename the directory
grid
-
1.3 to xyz
-
1.3 and rename the file ivy
-
grid
-
1.3.xml to ivy
-
xyz
-
1.3.xml

5.

copy the cacert.0 file into the cvrg_prof
-
1.3/certificates directory

6.

SCP
cvrg_prof
-
1.3
and
ivy
-
cvrg_prod
-
1.3.xml

to
e
very machine BUT the master at

$CAGRID_LO
CATION/repository/caGrid/target_
grid


TO configure caGrid using your targetGrid:

1.

cd $CAGRID_LOCATION

2.

ant configureHelp

3.

Run the ant configure task specifying your configuration

Create a Secure Container

Shutdown p
ort =8005

HTTPS port =8443

Specify that host credentials are installed.

Copy Configuration files from Master

scp


core
grid
06:/apps/temp/Prod/GTS
-
Slave/gts
-
conf.xml


$CAGRID_LOCATION/projects/gts/etc

Edit the gts
-
conf file to match the database
configuration.

scp coregrid
06:/apps/temp/Prod/GTS
-
Slave/serviceMetadata.xml $CAGRID_LOCATION/projects/gts/etc

scp coregrid
06:/apps/temp/Prod/GTS
-
Slave/sync
-
description.xml $CATALINA_HOME/webapps/wsrf/WEB
-
INF/etc/cagrid_SyncGTS

Edit the sync
-
description.xml

file so that its authority is the master:

<ns1:gtsServiceURI>https://mastergts.cvrgrid.cci.emory.edu:8443/wsrf/services/cagrid/GTS</ns1:gtsServiceURI>

<ns1:GTSIdentity>/O=caBIG/OU=caGrid/OU=Trust Fabric/CN=host/mastergts.cvrgrid.cci.emory.edu</ns1:GTSIden
tity>

Deploy GTS

cd $GTS_HOME

ant deployTomcat

Start the Container




Dorian


MySql root password is
____________

Create a database named DORIAN

Configure Target Grid

1.

cd $CAGRID_LOCATION

2.

ant configureHelp

3.

Run the ant configure task specifying your config
uration

Configure Dorian

The
subject

for the CA

is

O
=GRID
,OU=LOA1,CN
=GRID

LOA1 CA

Edit Service MetaData

Edit host research center not service info. Role should be maintainer.

Generating Host Credentials for Dorian

Put host cert at
/home/cvrgAdmin
/certificates/
dorian

Create
the
Container

Hostname = dorian.
grid.cci.emory.edu

shutdown=8008

HTTPS=8443

Configuring the Container to Trust the Dorian CA


Configuring SyncGTS to ignore the Dorian CA


Deploying Dorian


Verifying the Installation

In addition
to adding dorian to the Dorian list, add dorian to the authentication service.

The default admin account on Dorian is “
dorian
” with a default password of “
DorianAdmin$1


New password for dorian is
____________

Create an identity for mgrand pa
ssword is
____
___________

GTS Needs to Trust Dorian

We need to export Dorian’s CA certificate and add it to the master GTS.

In the Gaards
-
UI, in the “My Account” menu, click on the Download CA Certificate(s) menu item.

Select the “Localhost” dorian service.

Click on the

“View CA Certificate” button.

Click on “Export Certificate”

Put the exported certificate in $HOME/certificates/dorian/dorianca
-
cert.pem

Create an account named gtsAdmin with password
____________

Determined the grid identity of gtsAdmin by logging into do
rian with that account.

Next go to the machine that hosts the master GTS.

cd $GTS_HOME

ant addAdmin

Log into gaardsui on masterGTS host

Select window
-
>preferences

Select User management
-
>Dorian

Add the new dorian

with the identity
in the dorian

host’s host certificate

Select User Management
-
>Authentication Services

Add the new dorian with the identity
in the dorian host’s host certificate

Shut down container

Disable syncGTS

by moving $CATALINA_HOME/webapps/wsrf/WEB_INF/etc/cagrid_SyncGTS to /app
s/temp

Copy exported dorian cert to .globus/certificates as a .0 file

Restart container.

Log in to Dorian from the master gts gaardsui

Next we will create a

Level of Assurance

to which to assign the trust fabric CA we create.


Complete the following steps:

1.

Select

Trust Fabric

>

Levels of Assurance
. The Levels of Assurance window appears.

2.

From the Service list, select

Localhost
.

3.

Click

Add
. This opens the Add
Level of Assurance window.

4.

In the Name box, enter

LOA1

5.

In the Description box, enter

Level of Assurance for Trust Fabric CAs
.

6.

Click

Add
. The level of assurance is added to the GTS. Note that is appears in the Levels of Assurance window.

Next we will add th
e certificate authority we created earlier to the GTS as a trusted certificate authority. To accomplish this
complete the following steps:

1.

Select

Trust Fabric > Certificate Authorities
. The Certificate Authorities Window appears.

2.

From the Service drop down

select

Localhost
.

3.

Click

Add
. The Add Certificate Authority Window appears.

4.

Select the

Certifcate

tab.

5.

Click Import Certificate. A file browser appears.

6.

Browse to the CA certificate you created earlier (
TRUST_CA_CERTIFICATE
) and click

Open
.


This loads the

certificate
into the UI.

7.

Select the

Level of Assurance

tab.

8.

Select the

LOA1

check box.

9.

Click the

Add

button. The certificate authority is added to the GTS as a trusted certificate authority.

10.

In the Certificate Authorities Window, click

Search
. Once the
search completes, the certificate authority you just added appears
in the table below the Search button.


Shut down container

Reenable syncGTS

Restart container

Add Master GTS as authority to Slave

On Slave GTS, run


ant addAdmin

to add gtsAdmin as
an administrator for the slave GTS.

https://wiki.cagrid.org/display/gts13/Trust+Federation

In the URL field put the full URL

https://YOUR_HOST:YOUR_PORT/wsrf/services/cagrid/GTS

In the
“Service” field, select the slave as the service we are adding the authority to.

set perform authorization to true

get master GTS host certificate identity from its host certificate by running $GLOBUS_LOCATION/bin/grid
-
cert
-
info

all

file host
-
cert
-
file
-
p
ath

Identity is
/O
=GRID
/OU=Tr
ust Fabric/CN=host/mastergts.
grid.cci.emory.edu

Set time to live to longer than synch frequency: 9 minutes

Configure Dorian to Trust Globus

cd $DORIAN_HOME

ant
configureGlobusToTrustDorian

Configure
D
orian to publish its CRL to

the master GTS

Made sure that the Dorian host is targeted at the proper grid

ant
-
Dtarget.grid=
grid
-
1.3 configure

On the Dorian host

$ cd $CAGRID_HOME

$ ant security

1.

Click the "Login" button.

2.

Select Proper Credential Provider (Probably localhost).

3.

Enter

user and password of a user with administration privileges.

Use

the GTS administration account.

4.

Click "Login" button.

5.

From the

Trust Fabric

menu, select

Access Control
, this will launch the

Access Control Window
.

6.

Click the

Add

button,

this will launch the

Add Permission Window
.

7.

In the

Grid Identity

text box, enter the grid identity of Dorian (e.g. for Stage this is /O=caBIG/OU=caGrid/OU=Stage
LOA1/OU=Services/CN=cagrid
-
dorian
-
stage.nci.nih.gov)

8.

From the Trusted Authority drop down, sel
ect the certificate authority Dorian manages (e.g. For Stage this is
OU=caBIG,OU=caGrid,OU=Stage LOA,CN=caGrid Stage LOA1 Certificate Authority)

9.

From the Role down down, make sure TrustAthorityManager is selected

10.

Click the

Add

button, this will add the per
mission to the GTS.


Index, MMS and GlobalModelExchange

On corecvrg02, target caGrid to cvrg_prod
-
1.3

cd $CAGRID_LOCATION

ant syncWithTrustFabric

Use gaards
ui to create a host certificate for all four services,

Index Installation

Using the caGrid

installer, create
an
unsecured container

hostname: index.
grid.cci.emory.edu

shutdown: 8004

HTTP Port:
8080

Tomcat directory: /apps/index

In .bash_profile:

export CATALINA_HOME_INDEX=/apps/index/apache
-
tomcat
-
5.5.27

e
xport INDEX_HOME=$CAGRID_LOCATION/proje
cts/index

Index Deployment

export CATALINA_HOME=$CATALINA_HOME_INDEX

cd $INDEX_H
OME

ant deployIndexTomcat

Start the container

Index
Validation

P
oint browser at

http://index.
grid.cci.emory.edu:8080/
wsrf/services/DefaultIndexService

Run the command line
client:

cd $INDEX_HOME/../discovery

ant
-
Dservice.url=
http://index.
grid.cci.emory.edu:8080/
wsrf/services/DefaultIndexService

runClient

MMS Installation

In .bash_profile:

export CATALINA_HOME_
MMS
=/apps/
mms
/apache
-
tomcat
-
5.5.27

e
xport
MMS_HOME=$CAGRID_LOCATION/projects/mms

Issue the command

export CATALINA_HOME=$CATALINA_HOME_
MMS

Using the caGrid installer, create an unsec
ured container

hostname: mms.
grid.cci.emory.edu

shutdown: 8005

HTTP Port: 8081

Say yes to reinstall tomcat

Tomcat di
rectory: /apps/mms

Edit MMS
Service Metadata

cd $MMS_HOME

Edit

etc/
serviceMetadata.xml
. Change

just the
ns1:hostingResearchCenter

element
. It should look like
this:

<ns1:hostingResearchCenter>


<ns18:ResearchCenter


displayName="
Name University
"



shortName="
Name
"



xmlns:ns18="gme://caGrid.caBIG/1.0/gov.nih.nci.cagrid.metadata.common">



<ns18:Address country="USA" locality="
AnyTown
" postalCode="
00000
"



stateProvince="
ZZ
" street1="
123 Main Street
"



street2=""/>



<ns18
:ResearchCenterDescription description=""



homepageURL="
www
.
name
.edu" imageURL="" rssNewsURL=""/>




<ns18:pointOfContactCollection>




<ns18:PointOfContact affiliation="
Name
" email="
postmaster
@
nameU
.edu"



firstName="
John
" lastName="
Doe
" phoneNumber="
999
-
999
-
9999
"



role="Maintainer"/>



</ns18:pointOfContactCollection>


</ns18:ResearchCenter>

</ns1:hostingResearchCenter>


MMS Introduce Properties

No changes were made to
mms
introduce properties.

MMS Configuration File

No
changes were made to the MMS configuration file.

Deploy MMS

export CATALINA_HOME=$CATALINA_HOME_
MMS

cd $MMS_HOME

ant deployTomcat

Start the Container

Even though I specified a http port of 8081, Tomcat was configured to use 8080. To fix this I had to edit

conf/server.xml
.

I commented out this line:

<Connector acceptCount="100" connectionTimeout="20000"
disableUploadTimeout="true" enableLookups="false" maxHttpHeaderSize="8192"
maxSpareThreads="75" maxThreads="150" minSpareThreads="25" port="8080"
redirect
Port="8443"/>

and replaced it with this line:

<Connector acceptCount="100" connectionTimeout="20000"
disableUploadTimeout="true" enableLookups="false" maxHttpHeaderSize="8192"
maxSpareThreads="75" maxThreads="150" minSpareThreads="25" port="8081"/>

Then I
redeployed MMS and restarted the container.

MMS Validation

Point your browser to

http://mms.
grid.cci.emory.edu:8081/wsrf/services/cagrid/MetadataModelService

GlobalModelExchange Installation

In .bash_profile:

export CATALINA_HOME_
GME
=/apps/
gme
/apache
-
tomcat
-
5.5.27

e
xport GME_HOME=$CAGRID_LOCATION/projects/
globalModelExchange

Issue the command

export CATALINA_HOME=$CATALINA_HOME_
GME

Using the caGrid installer, create an secured container

hostname:
globalmodelexchange
.
grid.cci.emory.edu

shutdown:

8006

HTTP
S

Port:
8443

Say yes to reinstall tomcat

Tomcat directory: /apps/
gme

Create a
GME
Database

Do not s
et database password

for root

mysqladmin
-
u root create gme

Edit GME
ServiceMetadata

cd $
GME
_HOME

Edit

etc/
serviceMetadata.xml
. Change

just the
ns
1:hostingResearchCenter

element. It should look like
this:

<ns1:hostingResearchCenter>


<ns18:ResearchCenter


displayName="
Name University
"



shortName="
Name
"



xmlns:ns18="gme://caGrid.caBIG/1.0/gov.nih.nci.cagrid.metadata.common">



<
ns18:Address country="USA" locality="
AnyTown
" postalCode="
00000
"



stateProvince="
ZZ
" street1="
123 Main Street
"



street2=""/>



<ns18:ResearchCenterDescription description=""



homepageURL="
www
.
name
.edu" imageURL="" rssNewsURL=""/>




<ns18:pointOfContactCollection>




<ns18:PointOfContact affiliation="
Name
" email="
postmaster
@
nameU
.edu"



firstName="
John
" lastName="
Doe
" phoneNumber="
999
-
999
-
9999
"



role="Maintainer"/>



</ns18:pointOfContactCollection>


</ns18:Res
earchCenter>

</ns1:hostingResearchCenter>


GME
Introduce Properties

No introduce properties were modified.

GME Configuration File

The GME configuration file was not modified.

GME Deployment

cd $GME_HOME

ant deployTomcat

Validate that

GME

is Running

Point
the browser at

https://globalmodelexchange.
grid.cci.emory.edu:8443/wsrf/services/cagrid/GlobalModelExchange

Grid Grouper

export GRID_GROUPER_HOME=$CAGRID_LOCATION/projects/gridgrouper

Target cagrid to
cvrg_prod
-
1.3

ant
-
Dtarget.grid=
grid
-
1.3 configure

Obtain Host Credentials


Sync With Trust Fabric

ant syncWithTrustFabric

Configure a Secure Container

Hostname: grouper.
grid.
cci.emory.edu

Shutdown Port: 8005

HTTPS Port: 8443

Tomcat directory: /apps

Set up a MySql user and password for Grid Grouper

MySql r
oot password is
____________

SET PASSWORD FOR 'root'@'localhost'=PASSWORD('
____________
');

SET PASSWORD FOR 'root'@'127.0.0.1'=PASSWORD('
____________
');

Configure Grid Grouper

Edit $
GRID_GROUPER_HOME/resources/conf/grouper.hibernate.properties

Property



Description



hibernate.connection.url

jdbc:mysql://localhost:3306/grouper

hibernate.connection.username

root

hibernate.connection.password



Initialize Grouper Database

mysql
-
u YOUR_DATABASE_USER

p


Enter password: YOUR_DATABASE_PASSWORD


create database grouper;

cd $GRID_GROUPER_HOME

ant grouperInit

Add Initial Administrator

Create
a grid identity for grouperAdm

password is
____________

grid identity is /O
=GRID
/OU=LOA1/OU=Dorian/CN=grouperAdm

Make grouperAdm an administrator for grid gro
uper

cd
$
GRID_GROUPER_HOME

ant addA
d
min

E
dit Service Metadata

Edit

the
ns1:hostingResearchCenter

element of

$
GRID_GROUPER_HOME/etc/serviceMetadata.xml

Deploy Grid Grouper

cd $GRID_GROUPER_HOME

ant deployTomcat

Start the Container


Verifying the
Installation




Final Tasks

Use

logrotate, which might be installed on your CentOS. If not installed it it is available via yum as logrotate.i386



Create a config file for tomcat

named
/etc/logrotate.d/catalina

with the following contents (change
the directory)

/
apps/gme
/apache
-
tomcat
-
5.5.27/logs/catalina.out {


daily


rotate 30


copytruncate


compress


notifempty


missingok

}

Th
is should be run daily,

keeping 30

days of compressed logs and tr
uncate catalina.out after the daily log has
been created

In a CENTOS environment, there is a cron
script
/etc/cron.daily
/
logrotate

that is run daily by cron and
includes all logrotate config files in
/etc/logrotate.d
.



Configure services to start when ho
st is re
-
booted.


These instructions make these assumptions:



If there are multiple services running on the same host, each service runs in a separate tomcat
instance.



The home directory for each tomcat instance is under a directory with a name that identi
fies the
service that the tomcat instance supports. For example

o

/apps/gme/apache
-
tomcat
-
5.5.27

o

/apps/index/apache
-
tomcat
-
5.5.27

o

/apps/mms/apache
-
tomcat
-
5.5.27



The environment is CENTOS.



The user name that the services run under is gridAdmin.

In a convenient directory, such as /apps/bin, create three shell scripts for each service to start, restart and stop
the service. The names for each service should follow the pattern shown below with the name of the actual
service substituted for gme.
Be
low

are the script fil
es for a service named gme. Note that these scripts are owned
by the user gridAdmin.

gme_start
:

#!/bin/sh

export CATALINA_HOME=/apps/gme/apache
-
tomcat
-
5.5.27

$CATALINA_HOME/bin/startup.sh


gme_
re
start
:

#!/bin/sh

export

CATALINA_HOME=/apps/gme/apache
-
tomcat
-
5.5.27

$CATALINA_HOME
/bin/shutdown.sh

sleep 2

$CATALINA_HOME/bin/startup.sh


gme_st
op
:

#!/bin/sh

export CATALINA_HOME=/apps/gme/apache
-
tomcat
-
5.5.27

$

CATALINA_HOME
/bin/shutdown.sh


Be sure to make these scripts executable with a command like

chmod +x /apps/bin/*

The next step is to add a script that will be called during boot
-
up or shut
-
down of the host. This script must be
owned by root

and have execute permission
.

/etc/init.d
/gme
:

#!/bin/sh

case "$1" in


start)


su
--
login
--
command=/apps/bin/gme_start
grid
Admin


;;



stop)


su
--
login
--
command=/apps/bin/gme_stop
grid
Admin


;;



restart)


su
--
login
--
command=/apps/bin/gme_restart
grid
Admin


;;



*)


echo
"Usage $0 start|stop|restart"


exit 1;;

esac


exit $?


This script can be run by root t
o start, restart or stop the service. The final stem is to arrange for root to call the
script during boot
-
up and shut
-
down with these commands

that are issued as root
:

cd /etc

ln
-
s ../init.d/gme rc6.d/K01gme

ln

s ../init.d/gme rc5.d/S99gme


Migrate passwords to
KeePass

User KeePass

1.x as a password vault that can secure all of the other passwords with a master password using a
tool that runs on Windows, Linux and Mac.