Admin Support
Support

Tools & Patches
Cert updating
Globus patches
Installs
EDG Globus-2.0
DutchGrid Config
Globus 1.1.x Distribution
EDG Globus repository

Hints & Tips
GridFTP for FNAL
GridCVS install
GSIssh install

Multi-domain GIIS in 1.1.x
MDS response times

Local
DAS-2
NIKHEF
UvA/WINS
SARA

Multiple domains in your GIIS, a How-To

The ..../etc directory on your GIIS host contains two relevant files: an access list and a object hierarchy. You have to edit both files to be effective as a multi-domain GIIS service.

First for the access list, grid-info-site.conf. This in an LDIF-formatted description of allowed DN's. The current NIKHEF giis service lists NIKHEF, UvA/WINS and SARA as allowed clients:

# this entry is for access-control only.
# it uses all the global configuration data set above.
#
# NIKHEF, the home organization
dn: service=MDS Resource, hn=*.nikhef.nl, service=MDS Registration, ${GRID_INFO_ORGANIZATION_DN}

# UVA/WINS
dn: service=MDS Resource, hn=*.wins.uva.nl, service=MDS Registration, dc=wins, dc=uva, dc=nl, o=Grid

# SARA
dn: service=MDS Resource, hn=*.sara.nl, service=MDS Registration, dc=sara, dc=nl, o=Grid

Beware that the empty line between the three entries (and the last empty line) are required by the LDIF format!

Now, edit the grid-info-tree.cldif file in order to generate the whole and complete roots for the new organizations. The NIKHEF example reads:

#
# The basic root objects for this organization
#
dn: dc=wins, dc=uva, dc=nl, o=Grid
objectname: dc=wins, dc=uva, dc=nl, o=Grid
objectclass: GlobusStub
lastupdate: Mon Oct 23 08:08:36 GMT 2000

dn: dc=uva, dc=nl, o=Grid
objectname: dc=uva, dc=nl, o=Grid
objectclass: GlobusStub
lastupdate: Mon Oct 23 08:08:36 GMT 2000

dn: dc=sara, dc=nl, o=Grid
objectname: dc=sara, dc=nl, o=Grid
objectclass: GlobusStub
lastupdate: Mon Oct 23 08:08:36 GMT 2000

dn: dc=nikhef, dc=nl, o=Grid
objectname: dc=nikhef, dc=nl, o=Grid
objectclass: GlobusStub
lastupdate: Mon Oct 23 08:08:36 GMT 2000

dn: dc=nl, o=Grid
objectname: dc=nl, o=Grid
objectclass: GlobusStub
lastupdate: Mon Oct 23 08:08:36 GMT 2000

dn: o=Grid
objectname: o=Grid
objectclass: GlobusStub
lastupdate: Mon Oct 23 08:08:36 GMT 2000

Relevant Globus releases (verified)	1.1.3, 1.1.3b14
Creation date	April 24, 2001
Author(s)	David Groep

Comments to David Groep