gLite VOMS Server and Administration Tools (MySQL)
This release contains the MySQL version of the gLite VOMS Server and Administration Tools module v. 2.1.0. The following sections provide additional information about the release content, the module dependencies, the know bugs and issues and a list of bugs closed since the previous release. For information about installing and using the gLite VOMS Server and Administration Tools, please refer to the gLite Installation and User Guides.
This deployment module replaces the deployment module glite-voms-server.
Installation changes:
Service changes:
· The new 'voms.readonly' option allows you to set up a read-only VOMS Admin server, in which all update operations are denied.
· The request scheduler is now enabled by default. This means that old requests are now deleted from the database by a periodically running background thread. Expired requests and requests which are explicitly deleted on the web interface are _completely_removed_ from the database after a short delay. See voms-admin release notes for details.
· The three database connection pools (for Updates, Queries and DirectUpdates) have been consolidated into a single pool to reflect that the suggested deployment method has been changed to use a single database account. The database connection handling layer has been rewritten accordingly.
· The list of known CAs is now always kept in memory. This greatly reduces (in some cases, halves) the number of SQL queries necessary for most SOAP operations.
· The overall performance of the service has been radically improved by limited caching of queried data across transactions. See voms-admin release notes for details.
· The performance of the ACL checking module has been greatly enhanced in the common case when there is no deny rule and so we can shortcut on the first allow rule found. See voms-admin release notes for details.
Web interface changes:
· The HTML VO welcome page at https://server:8443/voms/VONAME/ is now generated dynamically. It shows the VO name and your login information.
· You can now remove users from groups or roles using the web interface. The previous release removed users from the VO instead by mistake.
· The included ".pp" content files have been reorganized to follow the URLs that are currently used by the service. This means that there is again a default boilerplate text on the request submission page, and other pages.
Database changes
· The service is now fully capable of running on an Oracle database.
· Removal of separate c-api
· Using of MySQL c api instead of mysql++
· Changes of error messages and logging system
The configuration of the module has changed. Please update your configuration if you upgrade from a previous version of the VOMS server.
The following configuration parameters have been added:
File: glite-voms-server.cfg.xml |
||
Parameter |
Default value |
Description |
User-defined Parameters |
||
voms.db.host
|
|
Hostname of the database server. Put 'localhost' if you run the database on the same machine. This parameter can be specified also separately per VO. Example: localhost [Type: 'string'] |
voms.admin.smtp.
|
|
Host to which voms-admin-service-generated emails should be submitted. Use 'localhost' if you have a fully configured SMTP server running on this host. Otherwise specify the hostname of a working SMTP submission service. This parameter can be specified also separately per VO. Example: localhost [Type: 'string'] |
voms.mysql.admin.
|
|
Administrator login password for the MySQL database. This parameter can be specified also separately per VO. Example: 'verySecret' [Type: 'string'] |
Advanced Parameters |
||
rgma.servicetool.
|
true |
Turn on/off servicetool for the node. Example: true [Type: 'boolean'] |
voms.mysql.admin.
|
root |
Administrator login name for the MySQL database. This parameter can be specified also separately per VO. Example: 'root' [Type: 'string'] |
voms.db.mysql.port
|
3306 |
Port number of the database server for mysql. This parameter can be specified also separately per VO. Example: 3306 [Type: 'integer'] |
voms.db.oracle.port
|
1521 |
Port number of the database server for oracle. This parameter can be specified also separately per VO. Example: 1521 [Type: 'integer'] |
System Parameters |
||
voms.db.oracle.library
|
${GLITE_LOCATION}/lib/libvomsoracle.so |
Location of the oracle voms libraries. Example: ${GLITE_LOCATION}/lib/libvomsoracle.so [Type: 'string'] |
|
||
VO Instances parameters |
||
voms.db.name |
|
Database name to be used to store VOMS information. If you are upgrading from a release before 1.4, the default value up to release 1.3 was voms_${voms.vo.name}. Example: VOMS_EGEE [Type: 'string'] |
voms.db.user.name |
|
Name of database user. This parameter can be specified also separately per VO. If you are upgrading from a release before 1.4, the default value up to release 1.3 was vo_adm. Example: voUser [Type: 'string'] |
voms.db.user.password
|
|
Password of database user defined in 'voms.db.user.name'. This parameter can be specified also separately per VO. If you are upgrading from a release before 1.4, the default value up to release 1.3 was the mysql root password. Example: verySecret [Type: 'string'] |
VOMS admin specific parameters If you have decided not to run the voms-admin by setting 'voms.admin.install' to false you can leave these parameters empty or remove them. |
||
voms.admin.
|
|
E-mail address that is used to send notification mails from the VOMS-admin. Example: name.surname@domain.org [Type: 'string']" |
voms.admin.
|
|
The certificate file (in pem format) of an initial VO administrator. The VO will be set up so that this user has full VO administration privileges. Remove parameter or leave parameter empty if you don't want to create an initial VO administrator. Example: '/your/path/admincert.pem' [Type: 'string'] |
The following configuration parameters have been removed:
File: glite-voms-server.cfg.xml |
|
Parameter |
Comment |
User defined parameters |
|
vo.admin.e-mail |
Replaced by parameter ‘voms.admin. |
voms.mysql.passwd |
Replaced by parameter ‘voms.mysql.admin. |
Advanced parameters |
|
vo.ca.URI |
Not used anymore. |
System parameters |
|
voms-admin.install |
Replaced by parameter ‘voms.admin.install’ (now advanced parameter) |
The following parameters have changed:
File: glite-voms-server.cfg.xml |
|||
Parameter |
Default value |
Description |
Changes in parameter |
Advanced Parameters |
|||
voms.db.type
|
|
Database type to be used. Can be 'mysql|oracle'. This parameter cannot be specified separately per VO. Example: mysql [Type: 'string'] |
· The parameter has been moved from advanced to user defined. · The parameter has no default value any more. |
The gLite VOMS Server (MySQL) module installs/uses the following set of gLite deployment modules:
Please see the corresponding release notes of these modules for details.
The gLite VOMS Server MySQL module is composed of the following gLite components (list includes the gLite components of the other used gLite deployment modules listed in section 3.1):
Component name |
Description |
Version |
File |
glite-config |
gLite configuration scripts |
1.4.2 |
../../../../../../../glite-web/egee/packages/R1.4/R20050916/bin/rhel30/noarch/RPMS/glite-config-1.4.2-1.noarch.rpm |
glite-rgma-api-java |
Java API for R-GMA |
4.1.5 |
../../../../../../../glite-web/egee/packages/R1.4/R20050916/bin/rhel30/noarch/RPMS/glite-rgma-api-java-4.1.5-1.noarch.rpm |
glite-rgma-base |
R-GMA basic configuration and documentation |
4.1.19 |
../../../../../../../glite-web/egee/packages/R1.4/R20050916/bin/rhel30/noarch/RPMS/glite-rgma-base-4.1.19-1.noarch.rpm |
glite-rgma-common-config |
gLite rgma common configuration items installation |
5.0.0 |
../../../../../../../glite-web/egee/packages/R1.4/R20050916/bin/rhel30/noarch/RPMS/glite-rgma-common-config-5.0.0-1.noarch.rpm |
glite-rgma-servicetool |
R-GMA service tool |
4.1.19 |
../../../../../../../glite-web/egee/packages/R1.4/R20050916/bin/rhel30/noarch/RPMS/glite-rgma-servicetool-4.1.19-3.noarch.rpm |
glite-rgma-servicetool-config |
gLite R-GMA servicetool installation |
5.1.0 |
../../../../../../../glite-web/egee/packages/R1.4/R20050916/bin/rhel30/noarch/RPMS/glite-rgma-servicetool-config-5.1.0-1.noarch.rpm |
glite-rgma-stubs-servlet-java |
Java client implementation stubs for R-GMA |
4.1.13 |
../../../../../../../glite-web/egee/packages/R1.4/R20050916/bin/rhel30/noarch/RPMS/glite-rgma-stubs-servlet-java-4.1.13-1.noarch.rpm |
glite-security-trustmanager |
The java certificate path checkin for proxy certs in SSL with plugins for tomcat and axis. |
1.7.3 |
../../../../../../../glite-web/egee/packages/R1.4/R20050916/bin/rhel30/noarch/RPMS/glite-security-trustmanager-1.7.3-1.noarch.rpm |
glite-security-util-java |
The java utilities library for security |
1.1.2 |
../../../../../../../glite-web/egee/packages/R1.4/R20050916/bin/rhel30/noarch/RPMS/glite-security-util-java-1.1.2-2.noarch.rpm |
glite-security-utils-config |
gLite Security Utilities configuration files |
1.0.4 |
../../../../../../../glite-web/egee/packages/R1.4/R20050916/bin/rhel30/noarch/RPMS/glite-security-utils-config-1.0.4-1.noarch.rpm |
glite-security-voms-admin-client |
gLite VOMS Administration clients |
1.0.7 |
../../../../../../../glite-web/egee/packages/R1.4/R20050916/bin/rhel30/noarch/RPMS/glite-security-voms-admin-client-1.0.7-1.noarch.rpm |
glite-security-voms-admin-interface |
gLite VOMS Administration service (interface) |
1.0.2 |
../../../../../../../glite-web/egee/packages/R1.4/R20050916/bin/rhel30/noarch/RPMS/glite-security-voms-admin-interface-1.0.2-1.noarch.rpm |
glite-security-voms-admin-server |
gLite VOMS Administration service |
1.2.2 |
../../../../../../../glite-web/egee/packages/R1.4/R20050916/bin/rhel30/noarch/RPMS/glite-security-voms-admin-server-1.2.2-1.noarch.rpm |
glite-security-voms-api |
Change me !!! |
1.6.5 |
../../../../../../../glite-web/egee/packages/R1.4/R20050916/bin/rhel30/i386/RPMS/glite-security-voms-api-1.6.5-0.i386.rpm |
glite-security-voms-api-c |
Change me !!! |
1.6.5 |
../../../../../../../glite-web/egee/packages/R1.4/R20050916/bin/rhel30/i386/RPMS/glite-security-voms-api-c-1.6.5-0.i386.rpm |
glite-security-voms-api-cpp |
Change me !!! |
1.6.5 |
../../../../../../../glite-web/egee/packages/R1.4/R20050916/bin/rhel30/i386/RPMS/glite-security-voms-api-cpp-1.6.5-0.i386.rpm |
glite-security-voms-clients |
Change me !!! |
1.6.5 |
../../../../../../../glite-web/egee/packages/R1.4/R20050916/bin/rhel30/i386/RPMS/glite-security-voms-clients-1.6.5-0.i386.rpm |
glite-security-voms-config |
Change me !!! |
1.6.5 |
../../../../../../../glite-web/egee/packages/R1.4/R20050916/bin/rhel30/i386/RPMS/glite-security-voms-config-1.6.5-0.i386.rpm |
glite-security-voms-mysql |
Change me !!! |
1.1.1 |
../../../../../../../glite-web/egee/packages/R1.4/R20050916/bin/rhel30/i386/RPMS/glite-security-voms-mysql-1.1.1-0.i386.rpm |
glite-security-voms-server |
Change me !!! |
1.6.5 |
../../../../../../../glite-web/egee/packages/R1.4/R20050916/bin/rhel30/i386/RPMS/glite-security-voms-server-1.6.5-0.i386.rpm |
glite-voms-server-mysql-config |
gLite VOMS Server and Admin Tools node configuration files |
2.1.0 |
../../../../../../../glite-web/egee/packages/R1.4/R20050916/bin/rhel30/noarch/RPMS/glite-voms-server-mysql-config-2.1.0-0.noarch.rpm |
The gLite Computing Element module has the following dependencies:
Component name |
Version |
RPM file name |
GPT |
VDT 1.2.2 |
../../../../../../../glite-web/egee/packages/externals/bin/rhel30/RPMS/gpt-VDT1.2.2rh9-1.i386.rpm |
VDT Globus Essentials |
VDT 1.2.2 |
|
MySQL-server |
4.1.11 |
../../../../../../../glite-web/egee/packages/externals/bin/rhel30/RPMS/MySQL-server-4.1.11-0.i386.rpm |
MySQL-client |
4.1.11 |
../../../../../../../glite-web/egee/packages/externals/bin/rhel30/RPMS/MySQL-client-4.1.11-0.i386.rpm |
perl-Crypt-SSLeay |
0.51 |
|
perl-Authen-SASL |
2.08 |
|
perl-Digest-HMAC |
1.01 |
|
perl-Digest-SHA1 |
2.01 |
|
perl-MIME-Lite |
2.117 |
|
perl-Net-Jabber |
2.0 |
|
perl-Net-XMPP |
1.0 |
|
perl-SOAP-Lite |
0.60a |
|
perl-XML-Stream |
1.22 |
|
Tomcat5 |
5.0.28 |
../../../../../../../glite-web/egee/packages/externals/bin/rhel30/RPMS/tomcat5-5.0.28-10_EGEE.noarch.rpm |
Java SDK/JRE |
1.4.2 |
This release has the following bugs and issues. Bug numbers refer to the gLite Bug Tracking system database hosted on the CERN Savannah system at https://savannah.cern.ch/bugs/?group=jra1mdw .
This release fixes the following bugs and issues. Bug numbers refer to the gLite Bug Tracking system database hosted on the CERN Savannah system at https://savannah.cern.ch/bugs/?group=jra1mdw