{section: glidein factory setup}
 
-Go to c157.chtc.wisc.edu.  Install the factory in /data1/itb-stress.
+Go to c157.chtc.wisc.edu.  Install the factory in /data1/itb-stress.  Where an unprivileged user account is needed, we are using zmiller.
+
+Documentation for the glideinWMS factory may be found here: http://www.uscms.org/SoftwareComputing/Grid/WMS/glideinWMS/doc.v2/install/factory_install.html
+
+{verbatim}
+cd /data1/itb-stress
+cvs -d :pserver:anonymous@cdcvs.fnal.gov:/cvs/cd_read_only co -r snapshot_091214 glideinWMS
+
+perl-Time-HiRes appears to be already installed as part of the main perl install
+
+httpd was already installed, so just enabled it:
+/sbin/chkconfig --level 3  httpd on
+/etc/init.d/httpd start
+
+wget http://atlas.bu.edu/~youssef/pacman/sample_cache/tarballs/pacman-3.28.tar.gz
+tar xvzf pacman-3.28.tar.gz
+cd pacman-3.28
+. ./setup.sh
+cd ..
+
+mkdir osg_1_2_4
+cd osg_1_2_4/
+
+export VDTSETUP_CONDOR_CONFIG=/data1/itb-stress/personal-condor/etc/condor_config
+export VDTSETUP_CONDOR_BIN=/data1/itb-stress/personal-condor/bin
+
+pacman -get http://software.grid.iu.edu/osg-1.2:client
+. ./setup.sh
+
+ln -s /etc/grid-security/certificates globus/TRUSTED_CA
+
+cd ..
+
+yum install rrdtool-python
+
+
+M2Crypto python module appears to be already installed
+  m2crypto-0.16-6.el5.3.x86_64
+  This is older than Igor's requirements 0.17, but I am trying it to see if it works.
+
+Download javascriptrrd-0.4.2.zip and unzip it.
+
+Download flot-0.5.tar.gz and untar it.
+
+I made a service cert for glideinwms and installed it in certs.  (I used the following command.)
+cert-gridadmin -email dan@hep.wisc.edu -affiliation osg -vo glow -host c157.chtc.wisc.edu -service glideinwms
+
+A proxy for the factory may be made with this command:
+grid-proxy-init -cert certs/c157.chtc.wisc.edu_glideinwms_cert.pem -key certs/c157.chtc.wisc.edu_glideinwms_key.pem -hours 100 -out certs/c157.chtc.wisc.edu_proxy.pem
+
+
+cd glideinWMS/install
+chown zmiller /data1/itb-stress
+su zmiller
+./glideinWMS_install
+
+
+choose [4] pool Collector
+Where do you have the Condor tarball? /afs/cs.wisc.edu/p/condor/public/binaries/v7.4/7.4.1/condor-7.4.1-linux-x86_64-rhel5-dynamic.tar.gz
+
+Where do you want to install it?: [/home/zmiller/glidecondor] /data1/itb-stress/glidecondor
+Where are the trusted CAs installed?: [/data1/itb-stress/osg_1_2_4/globus/TRUSTED_CA] /etc/grid-security/certificates
+
+
+Will you be using a proxy or a cert? (proxy/cert) cert
+Where is your certificate located?: /data1/itb-stress/certs/c157.chtc.wisc.edu_glideinwms_cert.pem
+Where is your certificate key located?: /data1/itb-stress/certs/c157.chtc.wisc.edu_glideinwms_key.pem
+
+
+What name would you like to use for this pool?: [My pool] ITB-Stress
+How many secondary schedds do you want?: [9]
+
+In this version of glideinWMS, the condor_config.local needs to be edited
+to replace HOSTALLOW with ALLOW.
+
+
+./glideinWMS_install
+[2] Glidein Factory
+
+Where is your proxy located?: /data1/itb-stress/certs/c157.chtc.wisc.edu_proxy.pem
+Where will you host your config and log files?: [/home/zmiller/glideinsubmit] /data1/itb-stress/glideinsubmit
+
+Give a name to this Glidein Factory?: [mySites-c157] ITB-Stress
+
+Do you want to use CCB (requires Condor 7.3.0 or better)?: (y/n) y
+Do you want to use gLExec?: (y/n) n
+Force VO frontend to provide its own proxy?: (y/n) [y]
+Do you want to fetch entries from RESS?: (y/n) [n]
+Do you want to fetch entries from BDII?: (y/n) [n]
+
+Entry name (leave empty when finished): ITB
+Gatekeeper for 'ITB': vdt-itb.cs.wisc.edu/jobmanager-condornfslite
+RSL for 'ITB':
+Work dir for 'ITB':
+Site name for 'ITB': [ITB]
+
+Should glideins use the more efficient Match authentication (works for Condor v7.1.3 and later)?: (y/n) y
+Do you want to create the glidein (as opposed to just the config file)?: (y/n) [n]
+
+/data1/itb-stress/glideinWMS/creation/create_glidein /data1/itb-stress/glideinsubmit/glidein_v1_0.cfg/glideinWMS.xml
+
+Submit files can be found in /data1/itb-stress/glideinsubmit/glidein_v1_0
+Support files are in /var/www/html/glidefactory/stage/glidein_v1_0
+Monitoring files are in /var/www/html/glidefactory/monitor/glidein_v1_0
+
+cd /data1/itb-stress
+# make setup.sh set X509_CERT_DIR and X509_USER_PROXY
+. ./setup.sh
+glideinsubmit/glidein_v1_0/factory_startup start
+
+
+I added the following entries to glidecondor/certs/condor_mapfile:
+GSI "/DC=org/DC=doegrids/OU=Services/CN=glideinwms/c158.chtc.wisc.edu" vofrontend
+FS zmiller gfactory
+
+The FS mapping of zmiller to gfactory appears to be necessary to make the factory
+ad have AuthenticatedIdentity gfactory, which is what I configured the VO frontend
+to expect.  Not sure why it is using FS to authenticate to the collector though.
+
+{endverbatim}