Changes between Version 44 and Version 45 of ESGFNodeTutorial

Timestamp:

Nov 16, 2018 12:00:18 PM (4 years ago)

Author:

zequi

Comment:

--

ESGFNodeTutorial

@@ -13 +13 @@
 5. Publish CORDEX datasets
 6. Known issues
+6. Local publication in a Data Index IdP ESGF node
 7. References
 
@@ -667 +668 @@
 }}}
 
+== Local publication in a Data Index IdP ESGF node ==
+
+1. Edit {{{/usr/local/cog/cog_install/settings.py}}} to ALLOW access from everywhere (['*'])
+1. Add your node domain to {{{esgf_idp_static.xml}}} and {{{esgf_known_providers.xml}}}
+1. {{{cp /etc/certs/hostcert.pem /etc/grid-security/certificates/$(openssl x509 -hash -noout < /etc/certs/hostcert.pem).0}}}
+1. Create user permissions in postgres database as explained in https://acme-climate.atlassian.net/wiki/spaces/ESGF/pages/15073316/Guide+to+ESGF+Publishing+and+Best+Practices
+1. You should be able to log into cog
+1. Modify esgf_ats_static.xml, eg:
+{{{
+<attribute
+        type="test_group"
+        attributeService="https://esgf.test.es/esgf-idp/saml/soap/secure/attributeService.htm"
+        description="Test group for test data"
+        registrationService="https://esgf.test.es/esgf-idp/secure/registrationService.htm"/>
+}}}
+1. Modify esgf_policies_local.xml, eg:
+{{{
+   <!-- The following statements makes resources that contain '.*test.*' freely available for download -->
+    <policy resource=".*test.*" attribute_type="ANY" attribute_value="" action="Read"/>
+    <policy resource=".*test.*" attribute_type="test_group" attribute_value="publisher" action="Write"/>
+
+    <!-- The following statements makes all resources freely available for download -->
+    <policy resource=".*" attribute_type="ANY" attribute_value="" action="Read"/>
+}}}
+1. You may need to change the file {{{/usr/local/conda/envs/esgf-pub/lib/python2.7/site-packages/esgcet-3.5.4-py2.7.egg/esgcet/publish/utility.py}}}
+{{{
+  27 UPDATE_TIMESTAMP = "/tmp/publisher-last-check"
+  28 DEFAULT_CERTS_LOCATION_SUFFIX = "/etc/grid-security/certificates"
+  29 
+...
+1241         if home is not None:
+1242             service_certs_location = DEFAULT_CERTS_LOCATION_SUFFIX
+1243 
+}}}
+1. Modify {{{/esg/config/esgcet/esg.ini}}}
+{{{
+hessian_service_certfile = %(home)s/.globus/certificate-file
+#hessian_service_certs_location = %(home)s/.globus/certificates
+hessian_service_certs_location = /etc/grid-security/certificates
+hessian_service_debug = false
+}}}
+1. Add host and CA certificates to {{{/esg/config/tomcat/esg-truststore.ts}}}
+1. Add host certificate to {{{/esg/config/tomcat/keystore-tomcat}}}
+1. You should be able to publish
+
 == References ==
  * [https://github.com/ESGF/esgf-installer/wiki/ESGF-Installation-From-scratch ESGF Installation From Scratch]