HPSS memo Edit

General Tips Edit

  • File number should be small as possible.
  • A file size can (should) be in GB
  • Try parallel hsi get processes to different directories for faster file download.
  • Putting a directory YYY in hpss:$HOME/XXX.
    $ hsi "cd XXX ; put -R YYY"

Change in Remote login (since 2008/05) Edit

They should momentarily find better way.

set up

  1. get the executable (hsi.3.4.2.exe) and krb5.conf.kei from http://meteora.ucsd.edu/~kyoshimura/tmp/hsi.tar
  2. make symbolic links for the executables
    $ ldd hsi.3.4.2.exe  (check the linkers, if some are missing, please do followings)
    # cd /lib
    # ln -s libssl.so.0.9.7a libssl.so.0.9.7
    # ln -s libcrypto.so.0.9.7a libcrypto.so.0.9.7
  3. add hcdp01-tg.sdsc.teragrid.org, kdc0.sdsc.edu, and kdc1.sdsc.edu in the firewall white list.
    # cd /etc/firewall
    # vi host-list.txt   (add the addresses above)
    # ./start-firewall
    # service iptables save  (to permanently save)
    # iptables -L  (check the firewall)
  4. copy krb5.conf.kei as /etc/krb5.conf
    # cp krb5.conf.kei /etc/krb5.conf
  5. make symbolic links for kinit
    # ln -s /usr/kerberos/bin/kinit /usr/bin/

How to use

$ ./hsi.3.4.2.exe -l kyoshimu/hpss@SDSC.EDU
Only for the first time, your password will be required. 
You can check the ticket by
$ klist
also for destroying the ticket,
$ kdestroy

Remark Accesses to other hosts might necessary.

/sbin/iptables -I INPUT -p udp -s 132.249.0.0/255.255.0.0 -j ACCEPT
/sbin/iptables -I INPUT -p tcp -s 132.249.0.0/255.255.0.0 -j ACCEPT
/sbin/iptables -I INPUT -p udp -s 198.202.0.0/255.255.0.0 -j ACCEPT
/sbin/iptables -I INPUT -p tcp -s 198.202.0.0/255.255.0.0 -j ACCEPT

Remark2

One may not be able to put or get with the procedure above (after you are able to login to HPSS). In this case, please try

$ ./hsi.3.4.2.exe
... login messages ...  
> firewall -on

then one maybe become able to put/get files.