(Click to open topic with navigation)

Installation > Installing Moab Accounting Manager

Installing Moab Accounting Manager

These instructions describe how to install and start Moab Accounting Manager (MAM).

Requirements

Hardware requirements:

  • Dual or Quad core Intel/AMD x86-64 processor
  • At least 8 GB of RAM
  • 1-2 TB disk space

MAM is commonly installed on the same host as Moab; however, in some cases you might obtain better performance by installing them on separate hosts.

Supported operating systems:

MAM has been tested on the following variants of Linux:

  • CentOS (5.9 and 6.4)
  • RHEL (6.4)
  • Scientific Linux (6.4)
  • SLES (11 SP2)

Supported Databases:

MAM uses an RDBMS as a backend. Use one of the following databases:

  • PostgreSQL (7.2 or higher)
  • MySQL (4.1 or higher)
Prerequisites

Moab Accounting Manager uses a configurable server port (default 7112) for client-server communication. If you have a firewall enabled, you will need to configure the firewall to allow the server port. If you intend to use the MAM web GUI, you will also need to allow port 443 (https).

  • For RedHat-based systems using iptables:
    • [[root]# iptables-save > /tmp/iptables.mod
    [root]# nano /tmp/iptables.mod
     
    # Add the following lines before immediately *before* the line matching
    # "-A INPUT -j REJECT --reject-with icmp-host-prohibited"
    -A INPUT -p tcp --dport 7112 -j ACCEPT
    -A INPUT -p tcp --dport 443 -j ACCEPT
     
    [root]# iptables-restore < /tmp/iptables.mod
    [root]# service iptables save

    On RedHat 5-based systems, replace INPUT with RH-Firewall-1-INPUT in the above instructions

  • For SuSE-based systems using SuSEfirewall2:
    • [root]# nano /etc/sysconfig/SuSEfirewall2
     
    FW_SERVICES_EXT_TCP="443 7112"
     
    [root]# service SuSEfirewall2_setup restart
Dependencies and packages installation

Use the following commands to install the required Moab Accounting Manager dependencies and packages (listed in the Requirements section above).

Install the database server

Moab Accounting Manager uses a database for transactions and data persistence. You may choose between two tested databases to use with MAM: PostgreSQL and MySQL. PostgreSQL is an open source database. Version 7.2 or higher is required. Infinite Allocations are supported with PostgreSQL. MySQL is an open source database. Version 4.1 or higher is required. Infinite Allocations are not supported with MySQL.

  • PostgreSQL database on a RedHat based system:
    • [root]# yum install postgresql postgresql-libs postgresql-server perl-DBD-Pg
  • PostgreSQL database on a SuSE based system:
    • [root]# zypper install postgresql postgresql-libs postgresql-server perl-DBD-Pg
  • MySQL database on a RedHat based system:
    • [root]# yum install mysql mysql-server perl-DBD-MySQL
  • MySQL database on a SuSE based system:
    • [root]# zypper install mysql mysql-server perl-DBD-mysql

Install other dependencies

  • RedHat 5 based system:
    • [root]# yum install gcc perl-suidperl httpd mod_ssl perl-TermReadKey perl-CGI-Session perl-Config-Tiny perl-Crypt-CBC perl-Crypt-DES perl-Crypt-DES_EDE3 perl-DateManip perl-DBI perl-Digest-HMAC perl-Digest-SHA1 perl-Error perl-Log-Dispatch-FileRotate perl-Log-Log4perl perl-Term-ReadLine-Gnu perl-XML-LibXML
  • RedHat 6 based system:
    • [root]# yum install gcc perl-suidperl httpd mod_ssl perl-CGI perl-CGI-Session perl-Config-Tiny perl-Crypt-CBC perl-Crypt-DES perl-Crypt-DES_EDE3 perl-Date-Manip perl-Time-HiRes perl-DBI perl-Digest-HMAC perl-Digest-SHA1 perl-Error perl-Log-Dispatch-FileRotate perl-Log-Log4perl perl-Term-ReadLine-Gnu perl-TermReadKey perl-XML-LibXML

    On a RHEL 6 system, you may experience failed dependencies on perl(Config::Tiny) and perl(RRDs). You can install these by running the following:

    [root]# rpm -Uvh ftp://ftp.pbone.net/mirror/ftp.centos.org/6/os/x86_64/Packages/rrdtool-perl-1.3.8-6.el6.x86_64.rpm --nodeps

    Once those packages finish installing, rerun the yum install command.

  • SuSE based system:
    • [root]# zypper install gcc lsb-release apache2 openssl-devel perl-CGI-Session perl-Crypt-CBC perl-Crypt-DES perl-Date-Manip perl-DBI perl-Digest-HMAC perl-Digest-SHA1 perl-Error perl-Log-Log4perl perl-TermReadLine-Gnu perl-XML-LibXML perl-TermReadKey perl-Params-Validate perl-YAML
[root]# cpan -i Config::Tiny Crypt::DES_EDE3 Log::Dispatch::FileRotate
[root]# chmod 4755 /usr/bin/sperl*

If any of the Perl module packages fail to install or are unavailable for your system, you can install it from CPAN by running cpan MODULENAME where MODULENAME is the respective perl module name.

To build a custom RPM

  1. Install rpm-build.
    2. [root]# yum install rpm-build
  2. Download the latest MAM build (mam-<version>.tar.gz) from the Adaptive Computing website.

    3. The variable marked <version> is the desired version of the suite; for example, 7.5.0.

  3. Untar the downloaded package.
  4. Change directories into the untarred directory.
  5. Edit the ./moab.spec file for RPM customization.
  6. Run ./rpm-build.
  7. Locate the custom RPM in rpm/RPMS/x86_64.

To install Moab Accounting Manager

  1. Create a user called moab, and switch to that user.
    2. [root]# useradd -m moab
[root]# su - moab
[moab]$ mkdir src
[moab]$ cd src
  2. Download the latest MAM build (mam-<version>.tar.gz) from the Adaptive Computing website.
  3. Untar the MAM tarball.
    4. [moab]$ tar -zxvf mam-7.5.0.tar.gz
  4. Verify that each of the dependencies and prerequisites (listed above) are satisfied.
  5. Navigate to mam-7.5.0.
    6. [moab]$ cd mam-7.5.0
  6. Configure the software. For a list of all the configuration options, see Moab Accounting Manager configuration options.
    • PostgreSQL database:
      • [moab]$ ./configure --with-db-type=Pg
    • MySQL database:
      • [moab]$ ./configure --with-db-type=mysql
  7. Compile and install the software.
    8. [moab]$ make
[moab]$ exit
[root]# cd ~moab/src/mam-7.5.0
[root]# make install
  8. If you are using the PostgreSQL database, initialize the database.
    • RedHat 6 based system:
      • [root]# service postgresql initdb
    • RedHat 5 or SLES based system:
      • [root]# service postgresql start
  9. If you are using the MySQL database, configure the server to support transactions with the READ COMMITTED transaction isolation level. Then start the mysqld service.
    10. [root]# nano /etc/my.cnf
    ## Place this in the [mysqld] section:
default-storage-engine = INNODB
transaction-isolation = READ-COMMITTED
     
[root]# service mysqld start
  10. As the database user, create a database called mam and grant database privileges to the moab user.
    • PostgreSQL database:
      • [root]# su - postgres
[postgres]$ psql

create database "mam";
create user moab with password 'changeme';
\q

[postgres]$ exit
    • MySQL database:
      • [root]# mysql

mysql> create database mam;
mysql> grant all on *.* to 'moab'@'localhost' identified by 'changeme';
mysql> exit

    The password you define must be synchronized with the database.password value in /opt/mam/etc/goldd.conf.

    [root]# nano /opt/mam/etc/goldd.conf
     
database.password = changeme
  11. Configure the database to start on system startup. Start or restart the database server with the new configurations in effect.
    • PostgreSQL database on a RedHat-based or SuSE-based system:
      • [root]# chkconfig postgresql on
[root]# service postgresql restart
    • MySQL database on a RedHat-based system:
      • [root]# chkconfig mysqld on
[root]# service mysqld restart
    • MySQL database on a SuSE-based system:
      • [root]# chkconfig mysql on
[root]# service mysql restart
  12. Run the hpc.sql script to populate the Moab Accounting Manager database with objects, actions, and attributes necessary to function as an Accounting Manager.
    • PostgreSQL database:
      • [root]# su - moab
[moab]$ cd src/mam-7.5
[moab]$ psql mam < hpc.sql
[moab]$ exit
    • MySQL database:
      • [root]# su - moab
[moab]$ cd src/mam-7.5
[moab]# mysql mam -u moab -p < hpc.sql
[moab]$ exit
  13. Configure MAM to automatically start up at system boot, then start the mam service. 
    14. [root]# chkconfig --add mam
[root]# service mam start
  14. Copy the auto-generated secret key from the token.value parameter in the /opt/mam/etc/site.conf file. Add it to the moab-private.cfg file as the value of the CLIENTCFG KEY attribute so that Moab Workload Manager can communicate with Moab Accounting Manager. Restart Moab Workload Manager.
    15. [root]# nano /opt/moab/etc/moab-private.cfg
    CLIENTCFG[AM:mam] KEY=<MAMSecretKey> AUTHTYPE=HMAC64
     
[root]# service moab restart
  15. (Only if you use a SuSE-based system) Edit the Apache configure files to use SSL.
    16. [root]# nano /etc/sysconfig/apache2
     
APACHE_SERVER_FLAGS="-DSSL"
  16. If you plan to use the web GUI, do each of the following steps:
    1. As root, add or edit the SSL virtual host definition as appropriate for your environment. To do so, configure the cgi-bin directory in ssl.conf. Below the cgi-bin directory element, create an alias for /cgi-bin pointing to your cgi-bin directory. If you chose to install to a cgi-bin sub-directory, you might want to create an alias for that as well. Also, add index.cgi to the DirectoryIndex so you can use the shorter sub-directory name.
      • RedHat-based system:
        • [root]# nano /etc/httpd/conf.d/ssl.conf

<Directory "/var/www/cgi-bin">
## Add these lines
  Options ExecCGI
  AddHandler cgi-script .cgi
  AllowOverride All
  Order allow,deny
  Allow from all
</Directory>

# Aliases for /cgi-bin
Alias /cgi-bin/ /var/www/cgi-bin/
Alias /mam /var/www/cgi-bin/mam/

# Make shorter sub-dir name available
DirectoryIndex index.cgi
      • SuSE-based system:
        • [root]# cp /etc/apache2/vhosts.d/vhost-ssl.template
/etc/apache2/vhosts.d/mam-ssl.conf
[root]# nano /etc/apache2/vhosts.d/mam-ssl.conf

<Directory "/srv/www/cgi-bin">
## Add these lines
  Options ExecCGI
  AddHandler cgi-script .cgi
  AllowOverride All
  Order allow,deny
  Allow from all
</Directory>

# Aliases for /cgi-bin
Alias /cgi-bin/ /srv/www/cgi-bin/
Alias /mam /srv/www/cgi-bin/mam/

# Make shorter sub-dir name available
DirectoryIndex index.cgi
    2. For RedHat-based systems where Security Enhanced Linux (SELinux) is enforced, you need to adjust SELinux to allow the web server to make network connections, use setuid for authentication, and write to the log file. To determine the current mode of SELinux, run getenforce.
      3. [root]# getenforce
                                    
Enforcing

      If the command returns a mode of Disabled or Permissive, or if the getenforce command is not found, you can skip the rest of this step.

      If the command returns a mode of Enforcing, you can choose between options of customizing SELinux to allow the web GUI to perform its required functions or disabling SELinux on your system.

      • If you choose to customize SELinux, run steps like the following. It is important to note that SELinux can vary by version and architecture and that these instructions may not work in all possible environments.
        • [root]# cat > mamgui.te <<EOF
module mamgui 1.0;
require {
        type httpd_sys_script_t;
        type port_t;
        class capability setuid;
        class tcp_socket name_connect;
}
allow httpd_sys_script_t port_t:tcp_socket name_connect;
allow httpd_sys_script_t self:capability setuid;
EOF

[root]# checkmodule -M -m -o mamgui.mod mamgui.te
[root]# semodule_package -m mamgui.mod -o mamgui.pp
[root]# semodule -i mamgui.pp
        [root]# setenforce 0
[root]# chcon -v -t httpd_sys_content_t /opt/mam/log /opt/mam/log/goldg.log*
        [root]# setenforce 1

        If you used the --prefix=<prefix> configuration option when you configured Moab Accounting Manager, you must replace references to /opt/mam in the example above with the <prefix> you specified.

      • If you choose to disable SELinux, use the following steps:
        • [root]# nano /etc/sysconfig/selinux
                                             
SELINUX=disabled
         
[root]# setenforce 0
    3. For the highest security, it is recommended that you install a public key certificate that has been signed by a certificate authority. The exact steps to do this are specific to your distribution and the chosen certificate authority. An overview of this process for CentOS 5 is documented here. If you are using self-signed certificates, some Mozilla Firefox users might experience certificate-related difficulties accessing MAM within Moab Viewpoint for the first time.

      4. Alternatively, if your network domain can be secured from man-in-the-middle attacks, you could use a self-signed certificate. Often this does not require any additional steps since in many distributions, such as RedHat, the Apache SSL configuration provides self-signed certificates by default.

      The following steps assume you are using self-signed certificates:

      Create self-signed SSL certificate and key files.

      • RedHat-based system:

        • RedHat ships with ready-made certificates.

      • SuSE-based system:
        • [root]# cd /etc/apache2
[root]# openssl genrsa -out ssl.key/server.key 1024
[root]# openssl req -new -key ssl.key/server.key -x509 -out ssl.crt/server.crt
    4. Start or restart the HTTP server daemon.
      • RedHat-based system:
        • [root]# chkconfig httpd on
[root]# service httpd restart
      • SuSE-based system:
        • [root]# service apache2 on
[root]# service apache2 restart
    5. Create a password for the user moab to be used with the MAM Web GUI.
      6. [root]# su - moab
[moab]$ gchpasswd

    You can now access the GUI at https://<hostname>/cgi-bin/mam by logging in as moab and using the password you set.

  17. You can define users, accounts, charge rates, etc., as needed for your site (for more information, see the "Getting Started" section of the Moab Accounting Manager Administrator Guide). An initialization script has been provided that can set up a sample initial environment (with some dummy users, accounts, charge rates, etc.) To initialize your database with this sample data, execute the script as the moab user:
    18. [moab]$ cd src/mam-7.5.0
[moab]$ test/hpc-allocation-enforcement.sh

    If you want to be able to access the Moab Accounting Manager GUI via Viewpoint, please see Configuring Moab Accounting Manager in Viewpoint.

Related topics