Untar the attached file somewhere, then: 1: chmod 644 /path/to/gsi_keys/hostcert.pem -1: chmod 600 /path/to/gsi_keys/hostkey.pem +1: chmod 600 /path/to/gsi_keys/hostkey.pem /path/to/gsi_keys/hostproxycert + +Now to setup the Condor daemons: 1: in condor_config set GSI_DAEMON_DIRECTORY = /path/to/gsi_keys 2: in condor_config set GRIDMAP = /path/to/gsi_keys/mapfiles/grid-mapfile 3: in condor_config set SEC_DEFAULT_AUTHENTICATION = REQUIRED 4: in condor_config set SEC_DEFAULT_AUTHENTICATION_METHODS = GSI and that should do it on the Condor daemon side of things. -On the client side, for simple testing without the need for gsi-proxy-init and friends, you could set the following environment variables for the tools to use: +On the client side, for simple testing without the need for grid-proxy-init and friends, you could just set the following environment variable for the tools to use: - setenv X509_USER_CERT /path/to/gsi_keys/hostcert.pem - setenv X509_USER_KEY /path/to/gsi_keys/hostkey.pem + setenv X509_USER_PROXY /path/to/gsi_keys/hostproxycert
