-- IFAE - 28 Jun 2006

User Documentation:

---

---

Joining IFAE

---

Contact IFAE System Manager (email: helpdesk(at)ifae.es, telephone: +34 93 581 4163) to open a network account and get email address.

Joining GRID and ATLAS VO

Getting a Grid certificate

---

The LHC accelerator will generate enormous amounts of data, and need huge computational and storage resources. It was not considered feasible to fund all of the resources at one site, and so it was agreed that the LCG computing service would be implemented as a geographically distributed Computational Data Grid. This means that the service will use computing and storage resources, installed at a large number of computing sites in many different countries, interconnected by fast networks. LCG-2 Grid middleware will hide much of the complexity of this environment from the user, giving the impression that all of these resources are available in a coherent virtual computer center.

Before using the LCG-2 Grid, you must do the following:

• Obtain a Cryptographic certificate from an LCG-2 approved Certification Authority (CA).
• Get registered with LCG-2.
• Join the LCG-2 ATLAS Virtual Organization.
• Obtain an account on a machine which has the LCG-2 User Interface software installed.

This need to be executed only once/yr to have access to the Grid.

---

PROCEDURE

---

• 1. To request the certificate fill the form IFAE USER CERTIFICATE REGISTRATION, that has to be signed by the IFAE director. Download it from and hand it to Tier-2 staff:

http://atlasweb.ifae.es/tier2/CA-Request-Form.pdf

---

• 2. To obtain the IRISGRID Certificate to join the GRID, use this link and fill the form.All this procedure of the certificate must be done in the same browser! and remember your password in order to download the certificate afterwards.

https://pk.irisgrid.es/rat2/csr_spkac.phtml?eet=usr

---

• 3. Once you have made the request for IRISGRID certificate send an mail to "ATLAS-support mailing list" in order to know the request.

Mail to: atlas-support@NOSPAMifaeNOSPAMPLEASE.es

---

• 4. You'll receive the mail of IRISGRID with a link to install your certificate. Install it in the same browser as before!

---

• 5. In Firefox browser: Go to Edit -->Preferences -->Advanced --> Encription --> View Certificates You will find your certificate with your username like the certificate name. To take this certificate in a file (.p12) press Backup and save to Hard Disk.

---

• 6. To change extension of your certificate ( .p12 to .pem) use this command on a machine with the openssl package installed.

$ openssl pkcs12 -in Rediriscert.p12 -clcerts -nokeys -out usercert.pem

$ openssl pkcs12 -in Rediriscert.p12 -nocerts -out userkey.pem

---

• 7. You will find in your disk two files: *usercert.pem and *userkey.pem that must be added in a path call ./globus .

---

• 8 To install this certificate into you ui.pic.es insert the following command:

$ scp -r .globus atlasui.pic.es:/nfs/pic.es/user/$USER

---

• 9 Change the public and the private key permissions to the correct values.
  -rw-r--r-- 1 espinal neutrinos 1861 Jan 25 12:00 my_cert.p12
  -rw-r--r-- 1 espinal neutrinos 1393 Jan 25 12:01 usercert.pem
  -r-------- 1 espinal neutrinos 1087 Jan 25 12:02 userkey.pem
  

Files *.pem must have these permissions in order to work!

---

• 10 Test the certificate by typing: $ grid-proxy-init and , grid-proxy-info you should get something like:
  

subject : /DC=es/DC=irisgrid/O=ifae/CN=jordi-nadal/CN=proxy
issuer : /DC=es/DC=irisgrid/O=ifae/CN=jordi-nadal
identity : /DC=es/DC=irisgrid/O=ifae/CN=jordi-nadal
type : full legacy globus proxy
strength : 512 bits
path : /tmp/x509up_u63025
timeleft : 11:59:52

---

• 11. Alternatively with your NICE account at CERN you can get a valid certificate within minutes.

https://ca.cern.ch/ca/

• 12. To renew your certificate please:

https://pk.irisgrid.es/rat2/
When you renew your certificate, you will be asked to provide some details of the certificate that you want to renew. Such informations can be found in the mail sent to you by IRISGrid when you received the certificate that you want to renew:

• Your identification : usually in the format name-surname@ifae.es).
• IRISGrid certificate identification (in the format a1b234c56).
• PIN of your certificate (this will not be in the mail, as it is yours).

Joining ATLAS-VO

---

• 1. Assuming the request and installation of the certificate is completed, you must join the ATLAS VO. Go to the registration form in:

https://lcg-voms.cern.ch:8443/vo/atlas/vomrs (Fill in the gaps and submit the request) To fill the gap in ATLAS VO use the CERN-mail address (shown in http://consult.cern.ch/xwho) and your CERN-password. You will receive a mail to follow the registration.

---

• 2. If you are eligible, you will be notified about the status of your request within ~1 day after the confirmation email is received by the VO manager.

---

• 3. For either know if you are registred in VO Atlas or try the certificate in the VO.

$ voms-proxy-init -voms atlas

Further Information

---

• 1. Further information: https://edms.cern.ch/file/454439/2/LCG-2-UserGuide.pdf

---

---

Setting up Grid environment

• https://twiki.cern.ch/twiki/bin/view/Atlas/UsingAthena#Setting_up_your_environment

---

Using ATHENA

• https://twiki.cern.ch/twiki/bin/view/Atlas/UsingAthena

---

Running Jobs in the Grid

Useful info page from Setting up your Account to Running the Full Chain in Athen

• The ATLAS Workbook: https://twiki.cern.ch/twiki/bin/view/Atlas/WorkBook

Grid distributed analysis tool for IFAE users

• Gurb: http://personal.ifae.es/osuna/attached_files/Gurb.ps

---

EGEE WMS user guide

http://egee-jra1-wm.mi.infn.it/egee-jra1-wm/wmproxy_client_quickstart.shtml

---

---

DQ2:

---

---

*Links to the dq2 usertools: https://twiki.cern.ch/twiki/bin/view/Atlas/UsingDQ2

GANGA:

---

---

*http://ganga.web.cern.ch/ganga/

• Install ganga in 30 seconds:
• 1. Download this python file : http://ganga.web.cern.ch/ganga/download/ganga-install
• 2. Execute like :

python ganga-install --extern=GangaAtlas,GangaNG,GangaCronus,GangaGUI,GangaPlotter LASTVERSION

• 3. Your are ready to send jobs! But better look at this tutorial first :

https://twiki.cern.ch/twiki/bin/view/Atlas/GangaTutorial44

Tier-2

---

---

Spanish Tier-2s in SC4

• First Datasets coming from DQ2 subscriptions has arrived to spanish Tier-2 sites (last week monitoring 01-July to 07-July):

• 01_070706_T2s.png:
  

Site Monitoring:

---

ATLAS-IFAE Grid Mini Tutorial (By Mireia Dosil)

• http://personal.ifae.es/dosil/IFAE_grid_tutorial_161205/atlas_ifae_grid_tutorial.pdf

Spanish Fed. Tier-2 Monitoring

• CPU Monitoring: http://ific.uv.es/lcg21/atlas-t2-es.html

• Dataset within the cloud:http://ific.uv.es/atlas-t2-es/

*DDM for the PIC CLOUD :http://dashb-atlas-data-test.cern.ch/dashboard/request.py/site?name=PIC&statsInterval=4&fromDate=2008-02-27%2016:14&toDate=2008-02-27%2020:14

*Production Monitoring: http://gridui02.usatlas.bnl.gov:25880/server/pandamon/query?dash=clouds

About releases in each site

---

*How do I know what releases are installed in each site?

• use the following command : lcg-infosites --vo atlas ce tag . You should get something like:

Name of the CE: ce06.pic.es VO-atlas-cloud-ES VO-atlas-offline-14.0.0-i686-slc4-gcc34-opt VO-atlas-point1-13.0.35.1 VO-atlas-production-12.0.31 VO-atlas-production-12.0.6 VO-atlas-production-12.0.7 VO-atlas-production-12.0.8 VO-atlas-production-12.0.95 VO-atlas-production-13.0.30 VO-atlas-production-13.0.30.1 VO-atlas-production-13.0.30.2 VO-atlas-production-13.0.30.3 VO-atlas-production-13.0.30.4 VO-atlas-production-13.0.30.5 VO-atlas-production-13.0.35 VO-atlas-production-13.0.40 VO-atlas-production-13.0.40.1 VO-atlas-production-13.0.40.2 VO-atlas-production-13.0.40.3 VO-atlas-production-13.0.40.4 VO-atlas-tier-T1