EMI3 LB

Release notes.

(1) Repos and software
CAs:
wget http://repository.egi.eu/sw/production/cas/1/current/repo-files/EGI-trustanchors.repo -O /etc/yum.repos.d/EGI-trustanchors.repo
yum install ca-policy-egi-core
EPEL:
wget http://www.nic.funet.fi/pub/mirrors/fedora.redhat.com/pub/epel/6/x86_64/epel-release-6-8.noarch.rpm
rpm -i epel-release-6-8.noarch.rpm

yum install yum-protectbase
yum install yum-priorities

EMI:
rpm --import http://emisoft.web.cern.ch/emisoft/dist/EMI/3/RPM-GPG-KEY-emi
wget http://emisoft.web.cern.ch/emisoft/dist/EMI/3/sl6/x86_64/base/emi-release-3.0.0-2.el6.noarch.rpm
yum localinstall emi-release-3.0.0-2.el6.noarch.rpm
yum clean all
yum install emi-lb

(2) Hostcerts
I haven't tried yet if I still need SL5 (opennssl 0.9.8e) to convert the host certs as I have been reusing the ones from the previous SL5 install.
(openssl pkcs12 -clcerts -nokeys -out hostcert.pem -in wmslb02.p12
openssl pkcs12 -nocerts -nodes -out hostkey.pem -in wmslb02.p12 )

(3) Open ports
#bdii
-A INPUT -m tcp -p tcp --dport 2170 -j ACCEPT
# LB
-A INPUT -p tcp --dport 9000:9003 -j ACCEPT

(4) Configuration
mkdir /opt/glite/yaim/siteinfo
chmod 700 /opt/glite/yaim/siteinfo
export GLITE_LB_MSG_BROKER=false
/opt/glite/yaim/bin/yaim -c -s /opt/glite/yaim/siteinfo/siteinfo-wmslb02.def -n LB

(5) bdii
add SLAPD: ALL to /etc/hosts.allow
/usr/bin/ldapsearch -x -H ldap://wmslb02.grid.hep.ph.ic.ac.uk:2170 -b mds-vo-name=resource,o=grid