GPN GUMS Configuration
A minimal gums.config file which will authenticate for the GPN VO.
This page just describes the GUMS configuration file for the GPN. If you have not yet set up and configured your GUMS server, you want this page.
Below is a minimal GUMS configuration for the gums.config. Note that most of the VOs have been commented out until we get our CA recognized in the default OSG stack. Update the configuration file the OSG generated in $VDT_LOCATION/vdt-app-data/gums/gums.config; don't overwrite it, as it has a password in it. Each site will need to make two changes:
Below is a minimal GUMS configuration for the gums.config. Note that most of the VOs have been commented out until we get our CA recognized in the default OSG stack. Update the configuration file the OSG generated in $VDT_LOCATION/vdt-app-data/gums/gums.config; don't overwrite it, as it has a password in it. Each site will need to make two changes:
- Fill in the password:
hibernate.connection.password="*********"
- Fill in the wildcard to match at your site in the following line:
<hostGroup className='gov.bnl.gums.WildcardHostGroup' wildcard='*'
For example, at UNL's server, we set wildcard='*.unl.edu'.
groups='osg,mis,grase,gridex,ivdgl,GLOW-voms,ops,gpn' />
<?xml version="1.0" encoding="UTF-8"?>
<gums>
<persistenceFactories>
<persistenceFactory name="mysql" className="gov.bnl.gums.hibernate.HibernatePersistenceFactory"
hibernate.connection.driver_class="com.mysql.jdbc.Driver"
hibernate.dialect="net.sf.hibernate.dialect.MySQLDialect"
hibernate.connection.url="jdbc:mysql://phedex.unl.edu:49152/GUMS_1_1"
hibernate.connection.username="gums"
hibernate.connection.password="*********"
hibernate.connection.autoReconnect="true"
hibernate.c3p0.min_size="3"
hibernate.c3p0.max_size="20"
hibernate.c3p0.timeout="180" />
</persistenceFactories>
<adminUserGroup className='gov.bnl.gums.ManualUserGroup' persistenceFactory='mysql' name='admins' />
<groupMappings>
<!--
<groupMapping name='osg' accountingVo='osg' accountingDesc='OSG'>
<userGroup className='gov.bnl.gums.VOMSGroup'
url='https://grid03.uits.indiana.edu:8443/edg-voms-admin/vos/services/VOMSAdmin'
persistenceFactory='mysql' name='osg' voGroup="/vos/osg"
sslCertfile='/etc/grid-security/http/httpcert.pem'
sslKey='/etc/grid-security/http/httpkey.pem' matchFQAN="ignore"
acceptProxyWithoutFQAN="true"
/>
<accountMapping className='gov.bnl.gums.GroupAccountMapper'
groupName='osg' />
</groupMapping>
<groupMapping name='grase' accountingVo='grase' accountingDesc='GRASE'>
<userGroup className='gov.bnl.gums.VOMSGroup'
url='https://dylan.ccr.buffalo.edu:8443/edg-voms-admin/GRASE/services/VOMSAdmin'
persistenceFactory='mysql'
name='grase'
voGroup="/GRASE/grid"
sslCertfile='/etc/grid-security/http/httpcert.pem'
sslKey='/etc/grid-security/http/httpkey.pem' matchFQAN="ignore"
acceptProxyWithoutFQAN="true"
/>
<accountMapping className='gov.bnl.gums.GroupAccountMapper'
groupName='grase' />
</groupMapping>
<groupMapping name='ivdgl' accountingVo='ivdgl' accountingDesc='iVDgL'>
<userGroup className='gov.bnl.gums.VOMSGroup'
url='https://grid03.uits.indiana.edu:8443/edg-voms-admin/vos/services/VOMSAdmin'
persistenceFactory='mysql'
name='ivdgl'
voGroup="/vos/ivdglp"
sslCertfile='/etc/grid-security/http/httpcert.pem'
sslKey='/etc/grid-security/http/httpkey.pem'
matchFQAN="ignore"
acceptProxyWithoutFQAN="true"
/>
<accountMapping className='gov.bnl.gums.GroupAccountMapper'
groupName='ivdgl' />
</groupMapping>
<groupMapping name='mis' accountingVo='mis' accountingDesc='MIS'>
<userGroup className='gov.bnl.gums.VOMSGroup'
url='https://grid03.uits.indiana.edu:8443/edg-voms-admin/vos/services/VOMSAdmin'
persistenceFactory='mysql'
name='mis'
voGroup="/vos/mis"
sslCertfile='/etc/grid-security/http/httpcert.pem'
sslKey='/etc/grid-security/http/httpkey.pem'
matchFQAN="ignore"
acceptProxyWithoutFQAN="true"
/>
<accountMapping className='gov.bnl.gums.GroupAccountMapper'
groupName='mis' />
</groupMapping>
-->
<groupMapping name="GLOW-voms" accountingVo="GLOW" accountingDesc="GLOW">
<userGroup
className="gov.bnl.gums.VOMSGroup"
url="https://glow-voms.cs.wisc.edu:8443/edg-voms-admin/GLOW/services/VOMSAdmin"
persistenceFactory="mysql"
name="GLOW-voms"
voGroup="/GLOW"
sslCertfile="/etc/grid-security/http/httpcert.pem"
sslKey="/etc/grid-security/http/httpkey.pem"
matchFQAN="exact"
acceptProxyWithoutFQAN="true"/>
<accountMapping className="gov.bnl.gums.GroupAccountMapper" groupName="glow" />
</groupMapping>
<!--
<groupMapping name='gridex' accountingVo='gridex' accountingDesc='GridEx'>
<userGroup className='gov.bnl.gums.VOMSGroup'
url='https://grid03.uits.indiana.edu:8443/edg-voms-admin/vos/services/VOMSAdmin'
persistenceFactory='mysql'
name='gridex' voGroup="/vos/gridex"
sslCertfile='/etc/grid-security/http/httpcert.pem'
sslKey='/etc/grid-security/http/httpkey.pem'
matchFQAN="ignore"
acceptProxyWithoutFQAN="true"
/>
<accountMapping className='gov.bnl.gums.GroupAccountMapper" groupName='gridex' />
</groupMapping>
<groupMapping name="ops" accountingVo="ops" accountingDesc="ops">
<userGroup className="gov.bnl.gums.VOMSGroup"
url="https://lcg-voms.cern.ch:8443/voms/ops/services/VOMSAdmin"
persistenceFactory="mysql"
name="ops" voGroup="/ops"
voRole="lcgadmin"
matchFQAN="exact"
sslCertfile="/etc/grid-security/http/httpcert.pem"
sslKey="/etc/grid-security/http/httpkey.pem"/>
<accountMapping className='gov.bnl.gums.GroupAccountMapper'
groupName='ops' />
</groupMapping>
-->
<groupMapping name="gpn" accountingVo="gpn" accountingDesc="gpn">
<userGroup className="gov.bnl.gums.VOMSGroup"
url="https://t2.unl.edu:8443/voms/gpn/services/VOMSAdmin"
persistenceFactory="mysql"
name="gpn" voGroup="/gpn"
matchFQAN="ignore"
acceptProxyWithoutFQAN="true"
sslCertfile="/etc/grid-security/http/httpcert.pem"
sslKey="/etc/grid-security/http/httpkey.pem"/>
<accountMapping className='gov.bnl.gums.GroupAccountMapper' groupName='gpn' />
</groupMapping>
</groupMappings>
<hostGroups>
<hostGroup className='gov.bnl.gums.WildcardHostGroup' wildcard='*'
groups='osg,mis,grase,gridex,ivdgl,GLOW-voms,ops,gpn' />
</hostGroups>
</gums>