Quick Reference Guide to GSI Authentication Setup in glideinWMS

glideinWMS uses GSI for authentication/authorization of services and clients. Table below acts as a quick reference guide for configuring GSI in glideinWMS.

Service Comments
glideinWMS Collector
  • GSI_DAEMON_NAME in condor_config should contain DNs of glideinWMS Collector.
  • Condor Mapfile should contain DNs of WMS Collector, VO Frontend, Glidein Factory.
  • DN of glideinWMS Collector should be in GSI_DAEMON_NAME in condor_config of glideinWMS Collector and condor mapfile of glideinWMS Collector.
Glidein Factory
  • condor mapfile to be used by glidein startd should contain DN of user schedds and Glidein Pool Collector.
  • DN of Glidein Factory should be in condor mapfile of glideinWMS Collector, glidein Pool collector and user schedds.
Glidein Pool Collector
  • GSI_DAEMON_NAME in condor_config should contain DNs of Glidein Pool Collector, User Schedd Nodes, Glidein Factory (glidein startd).
  • Condor Mapfile should contain DNs of Glidein Pool Collector, User Schedd Nodes, Glidein Factory (glidein startd).
  • DN of Glidein Pool Collector should be in gridmap file of User Schedd Nodes and glidein startd that will run on worker node.
VO Frontend
  • DN of VO Frontend should be in the gridmapfile of glideinWMS Collector.
User Schedd
  • GSI_DAEMON_NAME in condor_config should contain DNs of Glidein Pool Collector, User Schedd Node itself, Glidein Factory (glidein startd).
  • Condor Mapfile should contain DNs of Glidein Pool Collector, User Schedd Nodes, Glidein Factory (glidein startd).
  • DN of User Schedd should be in the GSI_DAEMON_NAME of its own condor_config file and in the condor mapfile used by the glidein startd that will run on worker node.

glideinWMS support: glideinwms-support@fnal.gov