Line: 1 to 1 | ||||||||
---|---|---|---|---|---|---|---|---|
IntroductionThis installation guide is divided as follows:
WMS/LB sensors installation:Sensors MUST be installed on every machine that needs to be monitored, being it a WMS, an LB or a coupled WMSLB. The following procedure is identical for every kind of nodes, since all the sensors are installed on every node. This waste a little bit of h/d space but simplifies the following installation procedure. (done all the following as root)
Comments can be made using # at the beginning of the line. You can leave the defaults if you do not see the need for a change. For sure on the WMS/LB instances you need to change the following keys: - WMSMON_HOST = 'Set here the name of the wmsmon data collector host' - LEMONFLAG = 1 'If you do not have a lemon tool on the wms/lb instance set to 0' - LEMONURL = 'Set to the machine lemon url if any' - SERVER_MYSQL_PASSWORD = 'If the node is an LB set the root mysql passwd here' !!! IT IS IMPORTANT TO HAVE THE RIGHT PASSWORD ON LB nodes info.def, it is not important on WMS. If the node was installed using the gLite yaim tool this password can be grabbed from the site_info.def file used at configuration time. - SNMPPASSWD = 'The password you choose for snmp communication between data collector and wms instance !! NOTE: it must be the same on every wmsmon_site-info.def When setting a password please read the comments in the wmsmon_site-info.def file to know if the password must be enclosed between ' ' - LB_PARA_HOST = Host publishing the LB_PARAMETER FILE that initializes lb queries. It is the procol://host:port of the http service running on the collector instances. If you follow the instruction below for the server installation without modifying the httpd configuration it s http://<WMSMMON_HOST> # Other examples in case of modified httpd conf #Examples: # http://host.domain # https://host.domain # https://host.domain:8443
net-snmp-devel-5.1.2-11.el4_6.11.2 net-snmp-5.1.2-11.el4_6.11.2 net-snmp-utils-5.1.2-11.el4_6.11.2 net-snmp-libs-5.1.2-11.el4_6.11.2 net-snmp-perl-5.1.2-11.el4_6.11.2 (version numbers may vary) Finally the file /etc/rc.local should contain a line about snmp Please check all the above statements.
exec .1.3.6.1.4.1.10403.98 /bin/sh /root/wmsmon/bin/send_ce_stats.sh exec .1.3.6.1.4.1.10403.97 /bin/sh /root/wmsmon/bin/send_users_stats.sh exec .1.3.6.1.4.1.10403.96 /bin/sh /root/wmsmon/bin/sendLongFile/send_long_file /root/wmsmon/tmp/USERSMAPPING.txt 5 exec .1.3.6.1.4.1.10403.95 /bin/sh /root/wmsmon/bin/sendLongFile/send_long_file /root/wmsmon/tmp/CE_MM.txt 50 exec .1.3.6.1.4.1.10403.94 /bin/sh /root/wmsmon/bin/CE_MM.sh exec .1.3.6.1.4.1.10403.60 /bin/sh /root/wmsmon/bin/wms/wms-sensor-wrapper exec .1.3.6.1.4.1.10403.70 /bin/sh /root/wmsmon/bin/lb/lb-sensor-wrapper exec .1.3.6.1.4.1.10403.75 /bin/sh /root/wmsmon/bin/lb-refill/lb-refill-sensor-wrapper OIDs are those set in the wmsmon_site-info.def file. and the snmp daemon should be running #service snmpd status #snmpd (pid 21770) is running...
WMSMON data collector installation(done all the following as root)
| ||||||||
Changed: | ||||||||
< < | yum install mysql_server | |||||||
> > | yum install mysql-server | |||||||
service mysqld start
/root/wmsmon /var/www/html/wmsmon If an older installation was found a wmsmon_old and /tmp/wmsmon_web_bkp directory are created containing all the old files. Now you can proceed with the configuration of the server. WMSMON data collector configuration
It must be edit as shown in the template file in the following way: wms1.your_domain lb1.your_domain vo1 .... wmsn.your_domain lbn.your_domain von You should insert the wms/lb pairs monitored and a vo served by the pair. The vo indication will be used only to group the wms in the wmsmon web pages, and not for the job counting per vo. If a pair serve more than one VO you can choose a word like multi or multiVO. You can also use this tag to group the wms by their role: PROD, DEVEL etc... THE FILE CANNOT BE COMMENTED.
Post installation STEPSIn order to increase php performance it is advisable that you increase the php allocable memory.Modify the /etc/php.ini to have the folloving line: memory_limit = 56M The WMSMON web configuration does not modify the default port (80) used by httpd. To modify the port number edit /etc/httpd/conf/httpd.conf and edit the line: Listen <port_number>Then restart httpd ( service httpd restart) The WMSMON server needs a valid host certificate stored in a HOST_CERTIFICATE_DIR (i.e. /etc/grid-security) Install mod_ssl package: -Run: yum install mod_ssl Install the accepted ca packages, i.e. you can execute the following: - Create the /etc/yum.repos.d/lcg-ca.repo file containing: [CA] name=CAs baseurl=http://linuxsoft.cern.ch/LCG-CAs/current protect=1- Run : yum install lcg_CA Edit the /etc/httpd/conf/httpd.con f and add the following inside the <Directory /var/www/html> section the following lines : SSLRequireSSL SSLVerifyClient require SSLVerifyDepth 10Edit the /etc/httpd/conf.d/ssl.conf and: - set the SSLCertificateFile variable to HOST_CERTIFICATE_DIR/hostcert.pem and comment any other line that set this variable. - set the SSLCertificateKeyFile variable to HOST_CERTIFICATE_DIR/hostkey.pem and comment any other line that set this variable. _ _ - set the SSLCertificatePath variable to the name of the directory containing the CA file (i.e. /etc/grid-security/certificates if you installed the lcg_CA metapackage) and comment any other line that set this variable. If you want to change the default https port (443) you should change in the /etc/httpd/conf.d/ssl.conf file the line: Listen <port_number> (i.e. Listen 8443) Oprtional redirect - If you want to automatically redirect http requests to https pages you should add to the /etc/httpd/conf/httpd.conf file the following section (using the proper values for the variables SERVER_HOST_IP,SERVER_HOST_NAME and YOUR_DOMAIN): <VirtualHost SERVER_HOST_IP:80> DocumentRoot /var/www/html ServerName SERVER_HOST_NAME.YOUR_DOMAIN RedirectMatch (/.*)$ https://SERVER_HOST_NAME.YOUR_DOMAIN/$1 </VirtualHost>Restart httpd WMSMONitor reports a section with users activity on each WMS. Name and surname of each user is reported on some pages and these pages for privacy reasons are not exposed to all certificates If you want to unlock those pages to some certificate DN you should enable https protocol as descrbed in the previous paragraph(Optional secure http enabled) and do the following: - Edit the /var/www/html/wmsmon/common/config.php file and modify the last line adding the list of DNs in the line $config->dnEnabledList=array('DN1','DN2'....'DNn');If you want to unlock the pages with sensible data to everyone (using either http or https) you have to change the value of the $config->protectedPage variable in /var/www/html/WEBDIR/common/config.php file (WEBDIR is defined in the site-info.def file) and set it to 0: $config->protectedPages=0;WMSMON uses the snmp standard port (in general the 183) for sensor-collector communications. If a firewall blocks the snmp port it is possible to enable the communication on a not-standard port. This can be useful when the data collector and the WMS cluster are not in the same computing centre. If you are not in this case you can skip this section. NOTE: this feature is not well tested, please report any problem and bug found to wms-support<at>cnaf.infn.it To enable high port support you should modify the wmslist.conf file adding a fourth column indicating which is the port number to be used on that particular wms/lb pair: wms1.your_domain lb1.your_domain vo1 port1 NOTE: it is not possible to specify 2 different port numbers for WMS and LB. On WMS/LB sensor side you should set snmp in order to listen for request on the port you choose. This is accomplished by adding in the /etc/snmp.conf file the following line: agentaddress <port_number>and restarting snmp (service snmpd restart)
|