View source for EES installation instructions

== Basic installation ==
* Install the EES:
 yum install ees
* Add a useraccount for the ees user:
 useradd -r -M ees
* Update ees.conf for logging:
** ''syslog''<br>comment-out the ''log='' line.
** ''file''<br>update the logfile to a file writeable for the ees user
 # custom log file
 log = /usr/log/ees.log
:: create logfile
 touch /var/log/ees.log && chown ees.root /var/log/ees.log
* start the ees
 /etc/init.d/ees start
* You can use the [http://ndpfsvn.nikhef.nl/cgi-bin/viewvc.cgi/pdpsoft/trunk/nagios/ees/ EES nagios plugin] to test it is working correctly

== Installation of Argus Obligation Handler ==
* On the host running the Argus PEPd run
 yum install ees-pepd-oh
* Make sure there is a policy active in the Argus PAP that will trigger an EES run, e.g.:
 <nowiki>resource "wn" {
    obligation "http://glite.org/xacml/obligation/local-environment-map" {}
    obligation "http://example.org/xacml/obligation/run-ees" {}
    action ".*" {
       rule permit {
          fqan = "/dteam"
       }
    }
 }</nowiki>
:Don't forget to reload the policy in the PDP
 /etc/init.d/argus-pdp reloadpolicy
* Add a [EES_OH] section to /etc/argus/pepd/pepd.ini, containing the same obligation as inserted in the PAP policy. Also make sure the eesEndpoint is set correctly.
 <nowiki>
[EES_OH]
parserClass = org.glite.authz.pep.obligation.eesmap.EESObligationHandlerConfigurationParser
entityId = http://argus.example.org/pepd/ees
handledObligationId = http://example.org/xacml/obligation/run-ees
eesEndpoint = http://ees.example.org:6217/</nowiki>
* Also add the EES_OH to the list of enabled obligationHandlers is the [SERVICE] section of the /etc/argus/pepd/pepd.ini:
 <nowiki>[SERVICE]
...
obligationHandlers = EES_OH ACCOUNTMAPPER_OH</nowiki>
* Restart the PEPd:
 /etc/init.d/argus-pepd restart

It should now be possible to do a gLExec call-out to the Argus PEPd that triggers an EES run.