EES installation instructions

From PDP/Grid Wiki
Jump to navigationJump to search

Basic installation

  • Install the EES:
yum install ees
  • Add a useraccount for the ees user:
useradd -r -M ees
  • Update ees.conf for logging:
syslog
comment-out the log= line.
file
update the logfile to a file writeable for the ees user
# custom log file
log = /var/log/ees/ees.log
create logfile
mkdir /var/log/ees/ && chown ees /var/log/ees/
touch /var/log/ees/ees.log && chown ees /var/log/ees/ees.log
  • start the ees
/etc/init.d/ees start

Installation of Argus Obligation Handler

  • On the host running the Argus PEPd run
yum install ees-pepd-oh
  • Create a symlink:
ln -s /usr/share/java/ees-pepd-oh.jar /var/lib/argus/pepd/lib/
  • Make sure there is a policy active in the Argus PAP that will trigger an EES run, e.g.:
resource "wn" {
    obligation "http://glite.org/xacml/obligation/local-environment-map" {}
    obligation "http://example.org/xacml/obligation/run-ees" {}
    action ".*" {
       rule permit {
          fqan = "/dteam"
       }
    }
 }
Don't forget to reload the policy in the PDP
/etc/init.d/argus-pdp reloadpolicy
  • Add a [EES_OH] section to /etc/argus/pepd/pepd.ini, containing the same obligation as inserted in the PAP policy. Also make sure the eesEndpoint is set correctly.
[EES_OH]
parserClass = org.glite.authz.pep.obligation.eesmap.EESObligationHandlerConfigurationParser
entityId = http://argus.example.org/pepd/ees
handledObligationId = http://example.org/xacml/obligation/run-ees
eesEndpoint = http://ees.example.org:6217/
  • Also add the EES_OH to the list of enabled obligationHandlers is the [SERVICE] section of the /etc/argus/pepd/pepd.ini:
[SERVICE]
...
obligationHandlers = EES_OH ACCOUNTMAPPER_OH
  • Restart the PEPd:
/etc/init.d/argus-pepd restart

It should now be possible to do a gLExec call-out to the Argus PEPd that triggers an EES run.