gLite Security Utilities

1. Release Description

This release contains the gLite Security Utilities module v. 1.0.3. The following sections provide additional information about the release content, the module dependencies, the know bugs and issues and a list of bugs closed since the previous release. For information about installing and using the gLite Security Utilities please refer to the gLite Installation and User Guides.

2. Changes In This Release

This release fixes a number of bugs found in v. 1.0.3. In particular:

• The mkgridmap script has been updated to v. 2.4.2 as used by LCG
• The location of the mkgridmap script and conf file are now configurable in the configuration file, so if a different version is installed, it can be used
• The configuration script now has a new --configure command line switch to execute the configuration steps only without starting the services. The --start switch must be used to start the services. Running the script without options print usage instructions
• Bug fixes

3. Release contents

The gLite Security Utilities v. 1.0.3 is composed of the following gLite components:

Component name		Version	File
glite-config	gLite configuration scripts	1.2.1	../../../../../../../glite-web/egee/packages/R1.2/R20050715/bin/rhel30/noarch/RPMS/glite-config-1.2.1-1.noarch.rpm
org.glite.security-utils.config	gLite Security Utilities configuration files	1.0.2	../../../../../../../glite-web/egee/packages/R1.2/R20050715/bin/rhel30/noarch/RPMS/glite-security-utils-config-1.0.2-2.noarch.rpm

4. Dependencies

The gLite Security Utilities v. 1.0.3 has the following external dependencies (the dependencies are distributed with the installer script):

Component name	Version	RPM file name
CA Certificates	Automatic	../../../../../../../glite-web/egee/packages/externals/bin/rhel30/RPMS/ca_*-xxx-1.noarch.rpm
fetch-crl	2.0	../../../../../../../glite-web/egee/packages/externals/bin/rhel30/RPMS/fetch-crl-2.0-1.noarch.rpm
perl-IO-Socket-SSL	0.94	../../../../../../../glite-web/egee/packages/externals/bin/rhel30/RPMS/perl-IO-Socket-SSL-0.94-0.dag.rhel3.noarch.rpm
perl-Net-LDAP	0.2701	../../../../../../../glite-web/egee/packages/externals/bin/rhel30/RPMS/perl-Net-LDAP-0.2701-0.dag.rhel3.noarch.rpm
perl-Net-SSLeay	1.23	../../../../../../../glite-web/egee/packages/externals/bin/rhel30/RPMS/perl-Net-SSLeay-1.23-0.dag.rhel3.i386.rpm
perl-Crypt-SSLeay	0.51	../../../../../../../glite-web/egee/packages/externals/bin/rhel30/RPMS/perl-Crypt-SSLeay-0.51-4.i386.rpm
perl-Term-ReadKey	2.20	../../../../../../../glite-web/egee/packages/externals/bin/rhel30/RPMS/perl-Term-ReadKey-2.20-12.i386.rpm
perl-Convert-ASN1	0.18	../../../../../../../glite-web/egee/packages/externals/bin/rhel30/RPMS/perl-Convert-ASN1-0.18-0.dag.rhel3.noarch.rpm
mkgridmap script	2.4.2	../../../../../../../glite-web/egee/packages/externals/bin/rhel30/RPMS/glite-mkgridmap-2.4.2-1.noarch.rpm
mkgridmap conf file	2.4.2	../../../../../../../glite-web/egee/packages/externals/bin/rhel30/RPMS/glite-mkgridmap-conf-2.4.2-1.noarch.rpm

5. Known bugs and issues

This release has the following known bugs and issues. Bug numbers refer to the gLite Bug Tracking system database hosted on the CERN Savannah system at https://savannah.cern.ch/bugs/?group=jra1mdw .

• No removal procedure is provided with this release apart from the removal of the RPMS. Any account, group or other resource created during the module configuration must be manually cleaned.

• If the mkgridmap cron job is installed, it periodically contacts the servers listed in the glite-mkgridmap.conf files to update the grid-mapfile file. Any custom entry found in the old file is added back to the new file by comparing the old and the new file. However, this also causes obsolete entries to be added back after the updates. This issue will be solved in a future release.

Bug number

Description

The following bugs have been fixed in this or previous releases, but they have not been officially tested yet:

Bug number	Description
#8855	security uitls: configuration upgrade fails to remove mkgridmap.py from cron if previously scheduled to run on CE

6. Bugs closed since last release

This release fixes the following bugs and issues. Bug numbers refer to the gLite Bug Tracking system database hosted on the CERN Savannah system at https://savannah.cern.ch/bugs/?group=jra1mdw

Bug number	Description
#5981	glite-security-utils-config scripts says "succesful" even if hostcerts are not there and had given an error for that
#6324	Security Utilities installation script: Reports success when it has failed.
#6348	The deployment security-utils module should not check for a host certificate
#8799	list voms users with glite-security-mkgridmap-2.1.1-1