EES installation instructions

From GridWiki
Jump to: navigation, search

Basic installation

  • Install the EES:
yum install ees
  • When needed, add a useraccount for the ees user (should be automatic by RPM):
useradd -r -M ees
  • Update ees.conf for logging:
comment-out the log= line.
when needed, update the logfile to a file writeable for the ees user
  • enable the service
chkconfig ees on
  • start the ees
/etc/init.d/ees start
yum install nagios-plugins-ees

Installation of Argus Obligation Handler

  • On the host running the Argus PEPd run
yum install ees-pepd-oh
  • Create a symlink:
ln -s /usr/share/java/ees-pepd-oh.jar /var/lib/argus/pepd/lib/
  • Make sure there is a policy active in the Argus PAP that will trigger an EES run, e.g.:
resource "wn" {
    obligation "" {}
    obligation "" {}
    action ".*" {
       rule permit {
          fqan = "/dteam"
Don't forget to reload the policy in the PDP
/etc/init.d/argus-pdp reloadpolicy
  • Add a [EES_OH] section to /etc/argus/pepd/pepd.ini, containing the same obligation as inserted in the PAP policy. Also make sure the eesEndpoint is set correctly.
parserClass = org.glite.authz.pep.obligation.eesmap.EESObligationHandlerConfigurationParser
entityId =
handledObligationId =
eesEndpoint =
  • Also add the EES_OH to the list of enabled obligationHandlers is the [SERVICE] section of the /etc/argus/pepd/pepd.ini:
obligationHandlers = EES_OH ACCOUNTMAPPER_OH
  • Restart the PEPd:
/etc/init.d/argus-pepd restart

It should now be possible to do a gLExec call-out to the Argus PEPd that triggers an EES run.

Personal tools