| 4 | |
| 5 | == Static Access Only on Users == |
| 6 | |
| 7 | This is the simplest configuration of `fedd`, used to allow users of other testbeds to use resources from yours using pre-configured projects. The layout assumes that for each [FeddAbout#GlobalIdentifiers:Three-levelName] three-level name] you are willing to allow to use your testbed, you have set up a project that already has proper keys installed. Because no local projects or local users need to be modified, `fedd` does not need access to boss. |
| 8 | |
| 9 | A commented fedd.conf (installed in `/usr/local/etc/fedd.conf`) on `users.isi.deterlab.net` might look like this: |
| 10 | |
| 11 | {{{ |
| 12 | [access] |
| 13 | # Keep access state (which experiments are live) in this file |
| 14 | # Be sure it is writeable by the fedd user |
| 15 | access_state: /var/db/fedd/deter_access.state |
| 16 | |
| 17 | # Parameters for remote fedds to instantiate experiments |
| 18 | boss: boss |
| 19 | ops: users |
| 20 | domain: .isi.deterlab.net |
| 21 | fileserver: fs |
| 22 | eventserver: event-server |
| 23 | |
| 24 | # This machine's URI to discriminate proxy requests |
| 25 | testbed: https://users.isi.deterlab.net:23235 |
| 26 | |
| 27 | # The database that maps requester to local acces projects |
| 28 | accessdb: /usr/local/etc/fedd/deter_access |
| 29 | |
| 30 | [allocate] |
| 31 | allocation_level: none |
| 32 | allocate_state: /var/db/fedd/deter_allocate.state |
| 33 | |
| 34 | [globals] |
| 35 | cert_file: /usr/local/etc/fedd/fedd.pem |
| 36 | services: 23235 |
| 37 | |
| 38 | }}} |