= QCG Broker Client Installation =

[[PageOutline]] 


'''THE INSTALLATION PROCEDURE HAS BEEN TESTED WITH SCIENTIFIC LINUX 5.5, WHICH IS THE RECOMMENDED VERSION.'''

= Requirements =
* '''Packages requirements'''. 
 All packages required by QCG-Broker client will be automatically instaled by YUM during the installation of qcg-broker-client package.
 * '''Java (>= 1.5)'''\\
{{{
#!div style="font-size: 90%"
For SL5.x
{{{#!sh
yum install java-1.6.0-sun-compat.x86_64
}}}
}}}
 * '''Apache Ant''' (>= 1.6) ("Optional tasks for ant" are required. For SL5.x the ''ant-nodeps.x86_64'' package must be installed)
{{{
#!div style="font-size: 90%"
For SL5.x
{{{#!sh
yum install ant.x86_64 ant-nodeps.x86_64
}}}
}}}
 * '''xml-commons-apis''' - installation of this package is not mandatory, but is recommended to avoid confusing information about not important errors.
{{{
#!div style="font-size: 90%"
For SL5.x
{{{#!sh
yum install xml-commons.x86_64 xml-commons-apis.x86_64
}}}
}}}
* '''trusted CA certificates'''
 To enable secure communication between client and QCG-Broker service set of trusted CA certificates must be copied either into `/etc/grid-security/certificates` directory or configured for every user.

 For the PL-Grid project: Install Polish Grid and PL-Grid Simpla-CA certificates:
{{{
#!div style="font-size: 90%"
{{{#!sh
wget https://dist.eugridpma.info/distribution/igtf/current/accredited/RPMS/ca_PolishGrid-1.40-1.noarch.rpm
wget http://software.plgrid.pl/packages/general/ca_PLGRID-SimpleCA-1.0-2.noarch.rpm
wget https://dist.eugridpma.info/distribution/util/fetch-crl/fetch-crl-2.8.5-1.noarch.rpm

rpm -i ca_PolishGrid-1.40-1.noarch.rpm 
rpm -i ca_PLGRID-SimpleCA-1.0-2.noarch.rpm 

#install certificate revocation list fetching utility 
rpm -i fetch-crl-2.8.5-1.noarch.rpm

#get fresh CRLs now
/usr/sbin/fetch-crl 

#install cron job for it
cat > /etc/cron.daily/fetch-crl.cron << EOF
#!/bin/sh 
/usr/sbin/fetch-crl
EOF

chmod a+x /etc/cron.daily/fetch-crl.cron
}}}
}}}
* '''User's credential'''
  To secure the communication and authenticate the user to the service the X509 proxy certificate is needded.
  Client expects the access either to proxy certificate file or to pair of user certificate and private key files in "pem" format.

  If the user has the certificate in p12 format, the certificate has to be first converted to pem format files.
{{{
  openssl pkcs12 -nocerts -in cert.p12 -out userkey.pem
  openssl pkcs12 -clcerts -nokeys -in cert.p12 -out usercert.pem
}}}


= Installation =
The package is designed for Scientific Linux 5.x (recommended and tested version is 5.5).
The installation process requires root privileges.

* Install PL-Grid or/and QCG repositories:
 * Official PL-Grid repository
{{{
#!div style="font-size: 90%"
{{{#!sh
rpm -Uvh http://software.plgrid.pl/packages/repos/plgrid-repos-2010-2.noarch.rpm
}}}
}}}
 * !QosCosGrid testing repository
{{{
#!div style="font-size: 90%"
{{{#!sh
cat > /etc/yum.repos.d/qcg.repo << EOF
[qcg]
name=QosCosGrid YUM repository
baseurl=http://fury.man.poznan.pl/qcg-packages/sl/x86_64/
enabled=1
gpgcheck=0
EOF
}}}
}}}
* install QCG-Broker client using YUM Package Manager:
{{{
#!div style="font-size: 90%"
{{{#!sh
yum install qcg-broker-client
}}}
}}}


* setup deployment configuration - all configuration variables are placed in `/opt/plgrid/qcg/share/qcg-broker-client/client-deploy.prop` file
 * '''client.deploy.dir''' - directory where the QCG-Broker client was installed (`/opt/plgrid/qcg/share/qcg-broker-client`). Please do not modify this property.
 * '''client.service.host''' - QCG-Broker service hostname
 * '''client.service.port''' - QCG-Broker service port
 * '''client.service.dn''' - QCG-Broker credential DN
{{{
#!div style="font-size: 90%"
{{{#!sh
vim /opt/plgrid/qcg/qcg-broker/client/etc/qcg-broker-client.conf
}}}
}}}
*  configure QCG-Broker command-line client 
{{{
#!div style="font-size: 90%"
{{{#!sh
./config.sh
}}}
}}}


= Usage =
For the description how to use the QCG-Broker client please see the [[client_user_guide|QCG-Broker User Guide]].