Ignore:
Timestamp:
31/10/08 13:41:54 (11 years ago)
Author:
pjkersha
Message:

Updated sessionmanager and attributeauthorityclient unit test readmes

Location:
TI12-security/trunk/python/ndg.security.test/ndg/security/test/sessionmanager
Files:
2 added
2 deleted
1 edited

Legend:

Unmodified
Added
Removed
  • TI12-security/trunk/python/ndg.security.test/ndg/security/test/sessionmanager/README

    r4139 r4403  
    22================================================== 
    33These tests need some careful attention to their configuration in order to  
    4 correctly set up.  MyProxy and test Attribute Authorities services must be  
     4correctly set up.  Test Attribute Authorities services must be  
    55configured and started. 
     6  
     71) Two test Attribute Authority services are required.  These can be run from  
     8the Attribute Authority unit test directory.  It's path relative to this  
     9directory is ../attributeauthorityclient/.  Run each service in a separate  
     10window so that the output can be monitored: 
    611 
    7 MyProxy is installed as part of the NDG Security installation.  See the  
    8 installation guide for details: 
     12$ ../attributeauthorityclient/wsgi/siteAServerApp.py 
     13$ ../attributeauthorityclient/wsgi/siteBServerApp.py 
    914 
    10 http://proj.badc.rl.ac.uk/ndg/browser/TI12-security/trunk/documentation/InstallationGuide/pdf/NDGSecurityInstallationGuide.pdf?format=raw 
    11  
    12 1) Ensure MyProxy is running on it's host machine.  Depending on how you have 
    13 configured it it may be running as SysV init script or with xinetd or inetd. 
    14 Check with the Installation guide.  To start myproxy-server manually as root  
    15 run, 
    16  
    17 $ myproxy-server 
    18  
    19 2) Edit sessionMgrProperties.xml in this directory and set the hostname element 
    20 to the fully qualified domain name (FQDN) of the MyProxy host OR alternatively  
    21 set the environment variable MYPROXY_SERVER to the FQDN e.g. 
    22  
    23 export MYPROXY_SERVER=myproxyhost.somewhere.uk 
    24  
    25 3) Edit sessionMgrTest.cfg and set the username for the MyProxy account you 
    26 wish to test: NDG Security uses MyProxy with a PAM plugin to enable 
    27 authentication against an external source such as a user database or a UNIX 
    28 system account.  The passphrase field can also be filled, or alternatively if 
    29 omitted from the file or commented out it will be prompted for from the 
    30 command line.  Both test1Connect and test3ConnectNoCreateServerSess fields 
    31 should be set. 
    32   
    33 4) Two test Attribute Authority services are required.  These can be run from  
    34 the Attribute Authority unit test directory.  It's path relative to this  
    35 directory is ../attAuthority.   
    36  
    37 The Attribute Authorities accept requests from this Session Manager  
    38 authenticated based on the MyProxy user credentials used in the unit test 
    39 test1Connect.  In order to accept these, the Attribute Authorities must be  
    40 configured to trust the MyProxy CA.  This can be done by including the MyProxy 
    41 CA certificate in the list of trusted CA files in the respective Attribute  
    42 Authority configuration files: 
    43  i) Copy the CA certificate from your MyProxy host computer to the ca/ sub- 
    44  directory under THIS directory. 
    45   
    46  The file will be located on the MyProxy server as e.g. 
    47   
    48  /etc/grid-security/certificates/abcdef01.0 
    49   
    50  The exact name of the CA certificate file will be unique to your installation. 
    51  In the above, it is "abcdef01.0".    
    52   
    53  i) edit 'caCertFilePathList' element in  
    54  ../attAuthority/siteAAttAuthorityProperties.xml and add a new entry for the  
    55  MyProxy CA: 
    56  
    57  -8<--------------------------------------------------------------------------- 
    58     <caCertFilePathList> 
    59         <caCertFile>$NDGSEC_AACLNT_UNITTEST_DIR/ca/ndg-test-ca.crt</caCertFile> 
    60 -->     <caCertFile>$NDGSEC_AACLNT_UNITTEST_DIR/ca/abcdef01.0</caCertFile> 
    61     </caCertFilePathList> 
    62  -8<--------------------------------------------------------------------------- 
    63  The exact name of the CA certificate file will be unique to your installation. 
    64  In the above, it is "abcdef01.0".  Ammend to the correct setting.  Edit  
    65  ../attAuthority/siteBAttAuthorityProperties.xml and in the same way add a new  
    66  entry for the MyProxy CA certificate. 
    67   
    68  Nb. You can check the MyProxy certificate file independently with OpenSSL: 
    69   
    70  $ openssl x509 -in  /etc/grid-security/certificates/abcdef01.0 -text 
    71   
    72155) Run the tests with the command: 
    7316 
    74 $ python ./test.py 
     17$ python ./test_sessionmanager.py 
    7518 
    76196) To run individual tests give the test method name: 
    7720 
    78 $ python ./test.py SessionMgrTestCase.test1Connect 
     21$ python ./test_sessionmanager.py SessionManagerTestCase.test1Connect 
    7922 
    8023Finally, 
    81  * See sessionMgrTest.cfg configuration file to change test parameters. 
    82  * See the installation guide for MyProxy trouble shooting information. 
     24 * See sessionMgrTest.cfg sets the unittest configuration 
     25 * sessionMgr.cfg sets the Session Manager configuration 
    8326 
    8427Troubleshooting: 
Note: See TracChangeset for help on using the changeset viewer.