Adding a new VO to the VOMS server

/opt/glite/sbin/voms-admin-configure install \
       --vo negtb --port 15004 \
       --dbapwd xxx --smtp-host smtp.uib.no  \
       --mail-from lcg-admin@bccs.uib.no

/opt/glite/etc/init.d/voms restart

/opt/glite/etc/init.d/voms-admin restart

Adding an administrator (from say your HOME/.globus folder):

voms-admin --vo negtb create-user usercert.pem assign-role VO VO-Admin usercert.pem

Adding the VO to a gLiteCE node

Add users to /etc/grid/users.conf (see here for example users file)

Add groups to /etc/grid/groups.conf

"/VO=negtb/GROUP=/negtb/ROLE=lcgadmin":::sgm:
"/VO=negtb/GROUP=/negcourse/ROLE=production":::prd:
"/VO=negtb/GROUP=/negtb"::::

Modify the site-info.def file for your installation. For example:

VO_NEGTB_USERS=""
VO_NEGTB_VOMS_SERVERS="vomss://hydra.ii.uib.no:8443/voms/negtb?/negtb/"
VO_NEGTB_SGM="vomss://hydra.ii.uib.no:8443/voms/negtb?/negtb/Role=lcgadmin"
VO_NEGTB_QUEUES="negtb"
VO_NEGTB_SW_DIR=$VO_SW_DIR/negtb
VO_NEGTB_DEFAULT_SE=$CLASSIC_HOST
VO_NEGTB_STORAGE_DIR=$CLASSIC_STORAGE_DIR/negtb
VO_NEGTB_VOMS_EXTRA_MAPS=""
VO_NEGTB_VOMSES="negtb hydra.ii.uib.no 15004 /O=Grid/O=NorduGrid/CN=host/hydra.ii.uib.no negtb"
VO_NEGTB_VOMS_POOL_PATH=""

Add the VO cert and signing policy files to the certificates folder.

Adding the VO to the gLite WN node

Follow the same instructions as for a gLiteCE node, modifying the appropriate site-info.def and users/groups files. Then re-run your configure_node command.

Add the VO cert and signing policy files to the certificates folder.

Adding the VO to a TAR_UI

Make the changes to your site-info.def, for example:

VO_NEGTB_USERS=""
VO_NEGTB_VOMS_SERVERS="vomss://hydra.ii.uib.no:8443/voms/negtb?/negtb/"
VO_NEGTB_SGM="vomss://hydra.ii.uib.no:8443/voms/negtb?/negtb/Role=lcgadmin"
VO_NEGTB_QUEUES="negtb"
VO_NEGTB_SW_DIR=$VO_SW_DIR/negtb
VO_NEGTB_DEFAULT_SE=$CLASSIC_HOST
VO_NEGTB_STORAGE_DIR=$CLASSIC_STORAGE_DIR/negtb
VO_NEGTB_VOMS_EXTRA_MAPS=""
VO_NEGTB_VOMSES="negtb hydra.ii.uib.no 15004 /O=Grid/O=NorduGrid/CN=host/hydra.ii.uib.no negtb"
VO_NEGTB_VOMS_POOL_PATH=""

and re-run your configure_node script. It is not necessary to modify the users or groups files.

Add the VO cert and signing policy files to the certificates folder.

VOMS host certificate

You can obtain the host certificate from a VOMS server by using the following method:

openssl s_client -CApath /etc/grid-security/certificates -prexit \
   -connect voms-biomed.in2p3.fr:8443 2>/dev/null | openssl x509 -noout -text \
    >/etc/grid-security/vomsdir/cclcgvomsli01.in2p3.fr.$$