Set up gLExec with SCAS

Setting up gLExec on the worker node to query SCAS for authorization decisions is preferably done through YAIM, but some set-ups require manual configuration as outlined below.

This page is part of the guide on HOWTO set up gLExec on the worker node.

Installation

For the installation and configuration of SCAS, see the gLite page on SCAS[1].

For the installation of gLExec on the worker node, see the release notes and the installation manual.

Typical gLite installation is done with

wget -O /etc/yum.repos.d/glite-GLEXEC_wn.repo http://grid-deployment.web.cern.ch/grid-deployment/glite/repos/3.2/glite-GLEXEC_wn.repo
yum install glite-GLEXEC_wn

Configuration with YAIM

Variables to set in siteinfo/services/glite-glexec_wn:

GLEXEC_WN_OPMODE=setuid
GLEXEC_WN_SCAS_ENABLED=yes
SCAS_ENDPOINTS="https://scas1.example.com:8443 https://scas2.example.com:8443"