Date: August 31, 2012
Author: Oscar Koeroo


QUICK INSTALL GUIDE for the LCMAPS Jobrepository plug-in
========================================================

Additional packages to install
-------------------
mysql-server
mysql

unixODBC-libs
mysql-connector-odbc
lcmaps
optionally: unixODBC

Tested front-end tools and services
-----------------------------------
gLExec
globus-gridftp-server
globus-gatekeeper

Possible other front-end tools and services
-------------------------------------------
SCAS
lcmaps-rest
gsi-openssh-server

Front-ends that will likely NOT work
------------------------------------
WMProxy
StoRM backend

Motivation:
The front-ends which do not use an LCMAPS interface based on certificates
can currently not be  supported. It is a requirement for the 1.5 version to
be able to work from a certificate chain.


Example LCMAPS configuration
----------------------------
jobrep      = "lcmaps_jobrep.mod"
              "--dsn MySQL-test"
              "--username root"
              "--password worteltjes"

example_plugin_policy:
verifyproxy -> vomslocalgroup
vomslocalgroup -> vomspoolaccount
vomspoolaccount -> tracking_groupid
tracking_groupid -> jobrep
jobrep -> posix_enf


Example /etc/odbc.ini file
--------------------------
[MySQL-test]
Description = MySQL test database
Driver      = MySQL
SERVER      = 127.0.0.1
PORT        = 3306
DATABASE    = jobrepository


Database connection test
------------------------
To test the connection from the jobrep plug-in to the database use the "--test"
option. The plug-in will not store any information in the database, but it will
test if the configured DSN name is available on the system and if the database
connection can be established using the odbc.ini file details. The LCMAPS log
should have an entry at level LOG_INFO.

Example:
jobrep      = "lcmaps_jobrep.mod"
              "--test"
              "--dsn MySQL-test"
              "--username root"
              "--password worteltjes"

Note on the lcmaps.db and odbc.ini configuration
------------------------------------------------
1.) Notice the --dsn <value> matches the DSN shown in the .ini section header.
2.) Also notice that the posix_enf plug-in is executed _after_ the jobrep
    plug-in. The motivation is to be able to use privilege separation and with 
    that protect the database password.


