component=px
mkdir -m 700 yaim
cd yaim

cat << EOF > site-info.def
SITE_NAME=krakonosovo
PX_HOST=\`hostname -f\`
GRID_AUTHORIZED_RETRIEVERS="\*"
GRID_AUTHORIZED_RENEWERS="\`openssl x509 -in /etc/grid-security/hostcert.pem -noout -subject |sed -e 's/subject= //'\`"
EOF

/opt/glite/yaim/bin/yaim -c -s ./site-info.def -n glite-PX

cd -

mkdir ~glite/.certs
cp /etc/grid-security/host* ~glite/.certs/
chown -R glite ~glite/.certs/

export GLITE_USER=glite
GLITE_HOME=`getent passwd ${GLITE_USER} | cut -d: -f6`
export GLITE_HOST_KEY=$GLITE_HOME/.certs/hostkey.pem
export GLITE_HOST_CERT=$GLITE_HOME/.certs/hostcert.pem
=

platform=(sl|deb).*component=px
/etc/init.d/glite-proxy-renewald start
+
platform=f.*component=px
service glite-proxy-renewd start
+

project=native.*component=px
# ==== deploy myproxy ====

cat > /etc/myproxy-server.config <<EOF
accepted_credentials "*"

authorized_renewers "`openssl x509 -in /etc/grid-security/hostcert.pem -noout -subject |sed -e 's/subject= //'`"
#default_renewers

authorized_retrievers "*"
#default_retrievers

#authorized_key_retrievers
#default_key_retrievers

#trusted_retrievers
#default_trusted_retrievers
EOF

cp /etc/grid-security/host*.pem /etc/grid-security/myproxy
chown -R myproxy:myproxy /etc/grid-security/myproxy/host*.pem

service myproxy-server restart

# ==== deploy proxyrenewal ====

/usr/sbin/glite-proxy-setup
=

component=px
#
# using external VOMS server in tests
# (deployed locally by default)
#
mkdir /etc/vomses
echo '"vo.org" "emicert-voms.civ.zcu.cz" "15000" "/DC=org/DC=terena/DC=tcs/C=CZ/ST=Plzen/L=Plzen/O=University of West Bohemia/CN=emicert-voms.civ.zcu.cz" "vo.org"' > /etc/vomses/emicert-voms.civ.zcu.cz
+

platform=deb.*component=px
# ==== deploy ====

cat > /etc/myproxy-server.config <<EOF
accepted_credentials "*"

authorized_renewers "`openssl x509 -in /etc/grid-security/hostcert.pem -noout -subject |sed -e 's/subject= //'`"
#default_renewers

authorized_retrievers "*"
#default_retrievers

#authorized_key_retrievers
#default_key_retrievers

#trusted_retrievers
#default_trusted_retrievers
EOF

cp /etc/grid-security/host*.pem /etc/grid-security/myproxy
chown -R myproxy:myproxy /etc/grid-security/myproxy/host*.pem

/etc/init.d/myproxy-server restart

mkdir ~glite/.certs
cp /etc/grid-security/host* ~glite/.certs/
chown -R glite ~glite/.certs/

export GLITE_USER=glite
GLITE_HOME=`getent passwd ${GLITE_USER} | cut -d: -f6`
export GLITE_HOST_KEY=$GLITE_HOME/.certs/hostkey.pem
export GLITE_HOST_CERT=$GLITE_HOME/.certs/hostcert.pem

/etc/init.d/glite-proxy-renewald start

# BDII
# MyProxy
export INFO_SERVICE_CONFIG='/etc/glite/info/service'
cp ${INFO_SERVICE_CONFIG}/glite-info-service-myproxy.conf.template ${INFO_SERVICE_CONFIG}/glite-info-service-myproxy.conf
cp ${INFO_SERVICE_CONFIG}/glite-info-glue2-myproxy.conf.template ${INFO_SERVICE_CONFIG}/glite-info-glue2-myproxy.conf
cat <<EOF >/var/lib/bdii/gip/provider/glite-info-provider-service-myproxy-wrapper
/usr/bin/glite-info-service ${INFO_SERVICE_CONFIG}/glite-info-service-myproxy.conf $SITE_NAME
/usr/bin/glite-info-glue2-simple ${INFO_SERVICE_CONFIG}/glite-info-glue2-myproxy.conf $SITE_NAME
EOF
chmod +x /var/lib/bdii/gip/provider/glite-info-provider-service-myproxy-wrapper

BDII_PASSWD=`dd if=/dev/random bs=1 count=10 2>/dev/null | base64`
cat << EOF > /etc/default/bdii
RUN=yes
SLAPD_CONF=
SLAPD=
BDII_RAM_DISK=
EOF
sed -i  "s#.*rootpw.*#rootpw	\"${BDII_PASSWD}\"#" /etc/bdii/bdii-slapd.conf
/etc/init.d/bdii restart

# remove file from libvomsapi0
rm -fv /etc/vomses

#
# using external VOMS server in tests
# (deployed locally by default)
#
mkdir /etc/vomses
echo '"vo.org" "emicert-voms.civ.zcu.cz" "15000" "/DC=org/DC=terena/DC=tcs/C=CZ/ST=Plzen/L=Plzen/O=University of West Bohemia/CN=emicert-voms.civ.zcu.cz" "vo.org"' > /etc/vomses/emicert-voms.civ.zcu.cz
=