Installing PURSe

Grab the PURSe System Source Tarball from the Downloads page for the current release. Unpack it in a directory on your portal server host. Hereafter, the install directory will be referred to as $PURSE_HOME.

Configuring SimpleCA

Note that simpleCA must be installed on the file system of the portal server.

See the GT4 SimpleCA Admin Guide for instructions on configuring SimpleCA. Follow those instructions. Some caveats follow.

The typical thing to do when configuring SimpleCA is to run the setup-simple-ca script as user globus (or some other non-root grid user account). By default, the simpleCA directory will be installed in the globus user's .globus/ directory. It's important that the user under which you run your portal server read/write access to the simpleCA directory. If that user is not globus, then you can pass the -dir option to setup-simple-ca, like so:

$GLOBUS_LOCATION/setup/globus/setup-simple-ca -dir /usr/local/globus-4.0.0/portalCA
        

Then set the permissions on that directory such that the user under which the portal server runs can access and write to that directory.

When you run setup-gsi to install the CA created by the setup-simple-ca script, you're not required to pass it the -default option, because you can configure the CA hash to use in PURSe. You may wish to do this is you want to have the portal CA be distinct from your grid's default CA.

Configuring MyProxy

These PURSe portlets use a customized version of PURSe that allows it to store user certificates in a remote MyProxy server (the version of PURSe available at the PURSe web site requires that PURSe be installed locally). Therefore, if you have a current installation of MyProxy on your grid, you can use that. It just needs to be version 0.6.5 or higher of MyProxy. You can use the installation notes for the MyProxy that comes with GT4, which is a PURSe compatible version of MyProxy. Or you can upgrade your installation with MyProxy from the MyProxy site.

Some things to keep in mind:

• If you are upgrading MyProxy from an earlier version, and you wish for users to be able to retrieve their certificates from MyProxy that are stored for them by PURSe, then you need to add the following configuration line in your myproxy-server.config file:

  authorized_key_retrievers "*"
            

  With this, users will be able to retrieve their user certificate and key from MyProxy with their username and password using the myproxy-retrieve command.
• If you are new to MyProxy configuration and you're looking for a quick start configuration, make sure you have these two lines in myproxy-server.config (these lines should be there in the provided template, so typically you only need to uncomment them):

  accepted_credentials "*"
  authorized_retrievers "*"		  
            

Configuring MySQL database

PURSe uses a MySQL database to store its state, things like the certificate request status of a user (e.g., PENDING, ACCEPTED, etc.). If you already have a MySQL server installed, you can use that. Otherwise you'll need to install MySQL, which you can get from the MySQL site.

In order to create the MySQL PURSe database, do the following:

mysqladmin -h <dbHostName> [-u <user>] [-p] create purseDatabase
        

Where <dbHostName> is the hostname of your MySQL server and <user> is the user with administrative privileges on your MySQL server. Use -p to prompt for password. Now we'll initialize the database:

mysql [-u <user>] [-p] purseDatabase < $PURSE_HOME/etc/purse_database_schema.sql
        

You'll need to have add at least one user account for accessing the PURSe database. To do this, log into the MySQL server with the MySQL client using an administrative MySQL account, and create a user account, with something like the following:

$ mysql [-u <user>] [-p] 
mysql> GRANT ALL ON purseDatabase.* TO 'purseuser'@'portalserver.com'
       IDENTIFIED BY 'password';
        

Then in $PURSE_HOME you need to edit test.properties file, and edit the dbConnectionURL, dbUsername, and dbPassword properties with the values you just specified. Then execute the following:

ant bootstrap
        

Note: ant bootstrap will fail if you don't have a JUnit jar in the $PURSE_HOME/lib directory. You can use this JUnit jar if you wish.