CVS SETUP FOR AT2SIM ATLAS TDAQ MODELING PACKAGE:



CVS server and CVS ROOT

The CVS server for at2sim model uses :kserver authentication method - the one that uses kerberos 4.
To obtain most recent sources, one should set the CVSROOT variable to:

CVSROOT=:kserver:USER@atdaq-sw.cern.ch:/atdaqcvs

in order to use the CVS server (replace "USER" with your AFS/kerberos login name).
The at2sim model is located in directory DAQ/Modeling/at2sim
therefore in order to check out the current version of the at2sim one should execute


cvs co DAQ/Modeling/at2sim

Kerberos authentication.

In order to "log in" to the CVS server one needs to use kerberos 4 authentication tool.This requires having kerberos client properly installed (see next section). The simplest way to authenticate is by executing kauth program. Optionaly, one may specify the AFS/CERN username as a parameter. One should provide her/his own CERN/AFS password.
Other program may also be used: kinit, yet there may be a conflict in program names with a binary for JAVA executable (described later).

One may verify that authentication was succesfull using klist command. Example is given below:
[piters@pcatlas11 piters]$ klist
Ticket file: /tmp/tkt500
Principal: piters@CERN.CH

Issued Expires Principal
Nov 11 14:46:37 Nov 12 00:46:37 krbtgt.CERN.CH@CERN.CH



Another set of tools is also provided if one has AFS installed.
One may authenticate to kerberos using klog.krb command and list the tickets using tokens.krb command. It is required to be in possession of kerberos ticket, not only the AFS ticket to authenticate to CVS server, i.e. tokens.krb command shows the line similar to this:

User piters's tokens for krbtgt.CERN.CH@cern.ch [Expires Nov 12 00:39]

One should also realize that another command: tokens (without .krb extension) displays AFS tokens only!

Kerbeos 4 client installation and setup.

In the standard CERN installation of RedHat Linux, the kerberos 4 client is usually installed. In case of RedHat version 8.0, installations, the kerberos 4 is no longer distributed: only version 5 is provided.

To install kerberos on a local machine, one may use RPM files from CERN-certified RedHat distribution. One needs to install: Warning! There exist a conflict with krbafs packages (if one have them installed). Either resolve them by uninstaling them (krbafs, krbafs-devel, krbafs-util, pam-krb5). One might also use rpm --force switch to install krb4-libs, then to make sure that the contents of /etc/krb.conf are correct (i.e. one should copy/append /etc/krb.conf.rpmnew to /etc/krb.conf) or ensure the following lines are present at the top of the file:

CERN.CH
CERN.CH afsdb1.cern.ch
CERN.CH afsdb3.cern.ch
CERN.CH afsdb2.cern.ch

(it is important that the first line specified "CERN.CH" - the default kerberos realm we want to use).

Kerberos binaries and java 1.4

It is worth mentioning that java packages in version 1.4.x contains binaries with the same names as kerberos4; particularly, a filename clush seems to affect for the following utilities: To make sure that you are using the proper utilities, use which command, i.e.
[piters@pcatlas11 piters] which kinit
/opt/j2sdk1.4.1/bin/kinit
In this example, the binaries from Java distribution has precedence over kerberos binaries, therefore one should specify the full path for the kerberos binaries, e.g.
[piters@pcatlas11 piters]/usr/bin/kinit
eBones International (pcepatr12.cern.ch)
Kerberos Initialization
Kerberos name:piters
Password:*******
last update by Piotr Golonka , CERN EP/ATR, 17 March 2004.