Procedure:OnDemandSetup

From OACISS Systems Wiki
Revision as of 08:15, 14 April 2022 by Ekeever1 (talk | contribs)
Jump to navigation Jump to search

This page lists various security permission that are involved with OOD,

https://osc.github.io/ood-documentation/latest/installation/modify-system-security.html

It is necessary to permit all to access ports 80, 443 and 5554 (the OOD authenticator)/tcp.

Step 3 - Authentication setup

  • set ssl cert file and keyfile at ood_config.yml:36
  • under dex:, set ssl: trye
  • utilize most of their given template for LDAP connector, with some minor changes required for our ldap CN/DN/DCs
  • During testing, set OIDCSSLValidateServer Off under httpd conf.d/ood-portal.conf or it will not work

At this point OOD is online/available and login works but apps are not configured.

Step 4 - cluster configuration

https://osc.github.io/ood-documentation/latest/installation/add-cluster-config.html

followed by slurm instructions at

https://osc.github.io/ood-documentation/latest/installation/resource-manager/slurm.html

per config documents, we need to setup munge/munged and the cluster munge key as well. It appears this system is able to access the cluster scheduler info outputs.

== Step 5 - desktop configuration

https://osc.github.io/ood-documentation/master/enable-desktops/add-cluster.html