LIGO/LSC Account Management System (LAMS) User Guide

Directory

  1. Overview
  2. Importing/Loading Certificate into browser
  3. Control Flow Diagrams
  4. Using LAMS
  5. Links

Overview

LAMS has been developed to give a single point of access to all account applications to the LIGO/LSC computing facilities. PIs (Principal Investigators) can view and update status of applications using this system.

Back to TOP

Importing/Loading Certificate into browser

In order to access LAMS, you must have your Grid certificate imported in your browser. When accessing the site, it will prompt your for your Grid certificate password (unless the password has been saved in your browser). Access to LAMS is determined based on your certificate.

Browsers (including Internet Explorer, Netscape and Mozilla) use a different format for certificates to LCG grid software. Browsers require a format called PKCS12 whereas grid software uses PEM format. If your certificate was issued to you in PEM format then you can use the following command on a machine with the openssl package installed to convert from PEM to PKCS12.

openssl pkcs12 -export -inkey userkey.pem -in usercert.pem -out my_cert.p12 -name "My certificate"

Where:

userkey.pem

The path to your private key file. (typically ~/.globus/userkey.pem)

usercert.pem

The path to your certificate file. (typically ~/.globus/usercert.pem)

my_cert.p12

The path for the PKCS12 format file output. (example: john_doe.p12)

"My certificate"

An optional name which can be used to select this certificate in the browser after you have loaded it if you have more than one loaded. (example: "John Doe")

Instructions to load certificates into some common browsers are given below.

Firefox

  1. Start Firefox
  2. Go to the Tools menu and select "Options...".
  3. Select "Advanced".
  4. Scroll down to "Certficates/Client Certificate Selection" and check "Ask Every Time".
  5. Click on "Manage Certificates".
  6. Click on "Import".
  7. Give the path to the file my_cert.p12. You will be asked for the master password for the Software Security Device and the password used to encrypt the certificate backup.

Mozilla or Netscape

  1. Start Mozilla or Netscape
  2. Go to the Edit menu and select "Preferences -> Privacy & Security -> Certificates -> Manage Certificates"
  3. Choose Import Certificate option
  4. Give the path to the file my_cert.p12.
  5. Go to the Edit menu and select "Preferences -> Privacy & Security -> Certificates -> Master Passw...
  6. At the "Master Password Timeout" box, check "Every time it is needed". Note that this step is needed to prevent webservers to extract your credentials from your browser without your endorsement.

Internet Explorer

  1. Start Internet Explorer
  2. Go to the Tools menu and select "Internet Options".
  3. Choose the Content tab and click on Certificates which will open a dialogue box.
  4. Click on Import to start the Import wizard and follow the instructions. In the password dialog box, type the password for your private key and check "Enable strong private key protection". Note that this step is needed to prevent webservers to extract your credentials from your browser without your endorsement. The certificate should go into the "Personal'' certificate store and you should also select "high security" to prevent Internet Explorer saving your pass phrase.

Back to TOP

Control Flow Diagram

Creating Application Flow Diagram

Processing an Application Flow Diagram

Back to TOP

Using LAMS

All changes made to an application will cause an email to be sent to the Applicant informing him/her of the old status, new status, and expiration of new status. The Applicant will be provided an RT email address to raise any issues.

When a new application arrives, an email will be sent to the LAMS Account Administrators that the applicant belongs to. The LAMS Account Administrators have been designated as *super PIs* can view and update all applications in the system.

There are 3 textboxes in the LAMS interface

  1. Notes/Log: This is an internal log. Information stored here will be available only to LAMS Account Administrators
  2. Message to User: (checkbox) This is for comments that a LAMS Account Administrator wishes to intimate an applicant in addition to old/new status and expiration that are included, by default, in all emails to the applicant.
  3. Message to Site Admins: (checkbox) This is for comments that a LAMS Account Administrator wishes to intimate the site admins in addition to the default message in emails sent upon action to the applicant.

Vertical TABs

MyRequests (not implemented)

This tab show applications of users from your institution.

AllRequests

This tab show applications of all users. However, this feature is available only to certain members of the LSCCompComm.

Horizontal TABs

This works in conjunctions with the Vertical TABs.

CURRENT STATUS

DESCRIPTION

NEW STATUS

Pending

Lists PENDING applications.

APPROVE, REJECT, HOLD

Approved

Lists APPROVED applications.

MODIFY (Approve), REJECT, HOLD

Rejected

Lists REJECTED applications.

APPROVE, MODIFY (Reject), HOLD

On Hold

Lists HELD applications.

APPROVE, REJECT, MODIFY (Hold)

Expired

Lists EXPIRED applications.

APPROVE, REJECT, HOLD

Search

Search the application database. (feature coming soon)

Back to TOP

Links

  1. Account Application Form
  2. LAMS

Back to TOP