Changes between Version 7 and Version 8 of FeddGettingStarted

Timestamp:

Mar 29, 2012 8:37:12 PM (13 years ago)

Author:

faber

Comment:

--

FeddGettingStarted

@@ -187 +187 @@
 
 You can specify a log file with the --log option.
+
+== Configuring the Access Controller ==
+
+The access controller needs a similar set of files configured, but there are a couple key differences.  The configuration file looks like:
+
+{{{
+[DEFAULT]
+# The home directory of the access controller
+base: /usr/local/etc/fedd/access
+
+[globals]
+# Access controller identity
+cert_file: %(base)s/fedd.pem
+
+# Services as for the experiment controller
+services: 23231
+
+[access]
+
+# syslog level
+log_level: debug
+
+# File that holds internal state between access controller boots
+access_state: %(base)s/deter_access.state
+
+# The file that maps from ABAC credentials to local user and project name.
+# Generated by tools, but human readable.
+accessdb: %(base)s/deter_abac_map
+
+# Directory where certificates identifying particular allocations are created
+certdir: %(base)s/certs
+
+# The ssh identity used to move software into experiments.  Federated users
+# must allow this key access to their DETER accounts.
+ssh_privkey_file: %(base)s/fedd_rsa
+ssh_pubkey_file: %(base)s/fedd_rsa.pub
+
+# Same as the experiment controller values
+# create_debug: true
+#leave_tmpfiles: true
+
+# This is the correct value for an Emulab or DETER testbed
+type: local_emulab
+
+# ABAC configuration and directories
+auth_type: abac
+auth_dir: %(base)s/abac
+
+# URI at which to access the Emulab XMLRPC interface.  Generally only the boss
+# node's DNS name needs to be
+boss: https://boss.isi.deterlab.net:3069/usr/testbed
+ops: users.isi.deterlab.net
+
+# Image to be loaded on portal nodes.  Some version of FreeBSD is best.
+portal_image: FBSD7-STD
+
+# Configurable federation setup commands.  For the standard fedkit on a DETER,
+# these are correct.
+portal_startcommand: sudo -H /usr/bin/perl -I/usr/local/federation/lib /usr/local/federation/bin/combo.pl --use_file >& /tmp/bridge.log
+node_startcommand: sudo -H /usr/bin/perl -I/usr/local/federation/lib /usr/local/federation/bin/federate.pl >& /tmp/federate
+
+
+# DNS domain of the testbed
+domain: .isi.deterlab.net
+
+# Analogous to the experiment controller
+federation_software: /usr %(base)s/fedkit.tgz
+
+
+}}}