|
Updates to this release will
be announced regularly. Sites are urged to keep their installations up
to date with respect to these releases. The instructions to upgrade your
node can be found in the installation guide
here. Details on what needs to be done for a given node type and
update can be found on the individual node update pages.
10.08.2010 - 3.1 Update 66
This update contains multiple bug fixes in various areas.
Please see below for the individual service updates and list of patches.
Besides others, the following middleware service updates are included:
glite-SE_dpm_mysql
New version of DPM mysql
This release provides a fix for the following bugs:
- Avoid srmv2.2 daemon crash when permission denied on a GetSpaceMetadata?
- Avoid rfio_lseek64 error after hitting eof in pre-read mode
- Avoid crashes in some methods when using Python 2.5
glite-SE_dpm_disk
New version of DPM disk
This release provides a fix for the following bugs:
- Avoid rfio_lseek64 error after hitting eof in pre-read mode
- Avoid crashes in some methods when using Python 2.5
glite-LFC_mysql
New version of LFC mysql
This release provides a fix for the following bugs:
- Avoid crashes in some methods when using Python 2.5
glite-LFC_oracle
New version of LFC oracle
This release provides a fix for the following bugs:
- Avoid crashes in some methods when using Python 2.5
| Patch # |
Description |
|
4285
|
R3.1/SLC4/x86_64: DPM_mysql v1.7.4-8
|
|
4295
|
R3.1/SLC4/x86_64: DPM_disk v1.7.4-8
|
|
4296
|
R3.1/SLC4/x86_64: LFC_mysql v1.7.4-8
|
|
4297
|
R3.1/SLC4/x86_64: LFC_oracle v1.7.4-8
|
05.07.2010 - 3.1 Update 65
This update contains multiple bug fixes in various areas.
Please see below for the individual service updates and list of patches.
Besides others, the following middleware service updates are included:
glite-SE_dpm_mysql
New version of DPM mysql v1.7.4
Bug fix release with two new features:
- Allow setting of RFIO buffersize on client side.
- Periodic cleanup of historic put, get, copy requests from the dpm database.
- It also allows an easier installation of 32 and 64 bits libraries on 64 bits platforms.
glite-SE_dpm_disk
New version of DPM disk v1.7.4
Bug fix release with one new feature:
- Allow setting of RFIO
buffersize on client side.
glite-LFC_mysql
New version of LFC mysql v1.7.4
Bug fix release with two new features:
- SURLs bulk lookup.
- It also allows an easier installation of 32 and 64 bits libraries on 64 bits platforms.
glite-LFC_oracle
New version of LFC oracle v1.7.4
Bug fix release with one new feature:
There is also an important bug fix:
- Number of DB connections can exceed the number of configured threads because of a missing ROLLBACK WORK
RELEASE in closedb.
| Patch # |
Description |
|
3967
|
R3.1/SLC4/x86_64: DPM v1.7.4
|
|
4134
|
R3.1/SLC4/x86_64: DPM v1.7.4
|
|
4038
|
R3.1/SLC4/x86_64: LFC v1.7.4
|
|
4130
|
R3.1/SLC4/x86_64: LFC v1.7.4
|
03.06.2010 - 3.1 Update 64
This update contains multiple bug fixes in various areas.
Please see below for the individual service updates and list of patches.
Besides others, the following middleware service updates are included:
glite-FTA_oracle
New version of glite-FTA_oracle
It is a bugfix release. The most important bugfixes:
- Savannah bug #66744: Wrong context when aborting request in case of corrupted destination file
- Savannah bug #66507: Checksum comparison is case sensitive
- Savannah bug #65664: SRM status update/timeout problem
Detailed release notes:
https://svnweb.cern.ch/trac/glitefts/wiki/FTSRelease_2_2_4
| Patch # |
Description |
|
4084
|
FTS 2.2.4 SLC4/x86_64
|
16.03.2010 - 3.1 Update 62
This update contains multiple bug fixes in various areas.
Please see below for the individual service updates and list of patches.
Besides others, the following middleware service updates are included:
glite-FTS_oracle, glite-LFC_mysql, glite-LFC_oracle, glite-SE_dcache_admin_gdbm, glite-SE_dcache_admin_postgres, glite-SE_dcache_info, glite-SE_dpm_mysql
New version of glite-info-templates
Upgrade of GlueCluster.template to add a new Glue attribute,
GlueHostProcessorOtherDescription, needed by the lcg CE. This
affects the 64bit services who use the templates since they should
update to the last version although in practice they are not
affected by the change.
glite-SE_dpm_mysql
New version of glite-info-provider-service (for the lcg CE)
New version of glite-info-provider to publish the gatekeeper and
the RTEpublisher services. This doesn't directly affect any 64bit
services but the version has to be also updated in the 64bit
repo.
glite-SE_dpm_mysql, glite-SE_dpm_disk, glite-WN, glite-UI, glite-VOBOX, glite-LFC_mysql, glite-LFC_oracle
New version of LFC and DPM
- Bug 53568, which could cause the DPM's SRM 2.2 server to crash.
- Bug 50686, which meant a malformed request could crash the LFC or the DPNS.
- The xrootd plugin for ALICE for the DPM has been upgraded to version 2.1.0.in order to increase the stability of the service.
- WARNING: There are known issues upgrading from DPM 1.6.x (please check service release notes).
glite-WN
New version of lcg-ManageVOTag
New lcg-ManageVOTag version solving the bug #52878
| Patch # |
Description |
|
3036
|
New version of glite-info-templates x86_64
|
|
3037
|
New version of glite-info-provider-service (for the lcg CE) x86_64
|
|
3271
|
R3.1/SL4/x86_64: DPM/LFC v1.7.3
|
|
3570
|
new lcg-ManageVOTag version solving the bug #52878 SL4/x86_64
|
18.02.2010 - 3.1 Update 61
This update contains multiple bug fixes in various areas.
Please see below for the individual service updates and list of patches.
Besides others, the following middleware service updates are included:
glite-FTA_oracle, glite-FTS_oracle, glite-LFC_mysql, glite-LFC_oracle, glite-SE_dpm_disk, glite-SE_dpm_mysql, glite-TORQUE_client, glite-WN
New version of Yaim Core
New site-info variables
- UNPRIVILEGED_GRIDMAPFILE per VO: This variable was before
defined per site and now it can be configured per VO.
- USER_HOME_PREFIX per VO: This variable was before defined per
site and now it can be configured per VO.
- EDG_HOME_DIR, EDGINFO_HOME_DIR and BDII_HOME_DIR: The home
directories of system accounts can be now be configured. The
suggestion is to define them as /var/lib/user_name but YAIM has
left the default under /home.
- GRIDFTP_CONNECTIONS_MAX: It has been increased from 50 to
150.
- Variables that were wrongly implemented in previous yaim
releases are now fixed: CONFIG_GRIDMAPDIR and
USER_HOME_PREFIX.
New functions
- config_myproxy_libs: new function to be able to configure the
new myproxy server and clients.
- New SAGA adapters: There's a new function called
config_glite_saga that configures the SAGA gLite adapters.
Fixes
- Some libraries have been added to LD_LIBRARY_PATH and
ld.so.conf to be able to configure lcg CE and cream CE in
SL5.
- grid environment cleaning mechanism to be able to install
different WN tarball versions in the same machine.
- YAIM doesn't fail when gLite version package is not
installed. This is useful for non gLite software using YAIM.
- siteinfo packaging is now fixed (-p option).
glite-WN
New version of Yaim Clients
New features
There's now a new tag:
tarball-installations
that can be used in WN_LIST as follows:
tarball-installations:subcluster-id
If a WN tarball is being installed:
1) and the tag is present in wn-list.conf, then the
subcluster-id will be retrieved from there.
2) the tag is not present, the subcluster-id will be deduced
from CE_HOST.
Introducing gLExec tests to glite-swat-client
glite-swat (Site Wide Area Testing) is a replacement for grid-cm
(Grid Configuration Monitoring). Couple of RPMs for client are
merged and directory names are changed to reflect the name
change.
This update include new test for glexec and a bugfix of
grid_voname test for VOs that have dots or dashes in their
name.
New version of FTS Clients
See the FTS release notes for more details
New version of dCache srmclient
New version of srmclient that removes the WARNING messages. New
version of dcap with override to allow forcing active or passive
behavior at the environment variable level.
Consistency when passing passive/active server_mode flag to
srmcp.
Fixed bug in srm-get-permissions.
Support ':' as globus port range separator
Better format "srmcp -help" output.
Need java >= 1.5
glite-FTA_oracle
New version of Proxy Renewal
The following bugs has been fixed:
#28167 (WMS doesn't renew user proxy VOMS extension)
#3369 (proxy renewal should try all configured VOMS servers per VO)
#43326 (proxy-renewal does not build with VDT 1.10)
#46658 (Timestamp in proxy renewal log file)
#48025 (Proxy renewal problem (WMS node) when using short FQANs)
After installation of the patch the renewal must be restarted
using: /opt/glite/etc/init.d/glite-proxy-renewald restart
glite-FTA_oracle, glite-FTS_oracle
New version of FTS
Fix for bug #59955: FTS: agent crash when picking up a job (glite-data-agents-common v1.1.1-1 2009-12-08)
Fix for bug #60095: FTS: Couldn't set the private key (glite-data-transfer-fts v3.7.0-3 2010-01-18)
Updates for more liberal checksum handling and to relax
requirements on how long an SRM TURL is kept valid.
Finalization of the checksum support.
The database schema has changed, one has to follow the
instructions of the Yaim script to do the upgrade.
The ABI between the transfer-agents and transfer-url-copy has
changed, so one has to stop and drain the channels before doing an
upgrade.
glite-FTA_oracle, glite-FTS_oracle, glite-LFC_mysql, glite-LFC_oracle, glite-SE_dpm_disk, glite-SE_dpm_mysql, glite-WN
New version of lcg-vomscerts
This patch introduces a new version of lcg-vomscerts that adds the next cert for lcg-voms.cern.ch and
removes old certs for cclcgvomsli01.in2p3.fr and
vo.racf.bnl.gov
| Patch # |
Description |
|
3105
|
[ yaim-core ] yaim-core 4.0.10 SL4/x86_64
|
|
3111
|
[ yaim-clients ] yaim clients 4.0.9 SL4/x86_64
|
|
3190
|
[ yaim-core ] yaim-core 4.0.11 SL4/x86_64
|
|
3315
|
dcache-srmclient-1.9.5-1 bug fixes SL4/x86_64
|
|
3316
|
Proxy renewal update for SLC4/x86_64
|
|
3325
|
FTS 2.2.1 SL4/x86_64
|
|
3327
|
dcache-srmclient-1.9.5-2 bug fixes SL4/x86_64
|
|
3352
|
FTS 2.2.2 SL4/x86_64
|
|
3362
|
dcap 1.9.3-5 dcache-srmclient 1.9.5-3 upgrades for SL 4 x86_64
|
|
3509
|
FTS 2.2.3 SL4/x86_64
|
|
3609
|
SL4/x86_64 introducing gLExec tests to glite-swat-client
|
|
3680
|
lcg-vomscerts-5.8.0 adds next cert for lcg-voms.cern.ch x86_64
|
11.01.2010 - 3.1 Update 60
This update contains multiple bug fixes in various areas.
Please see below for the individual service updates and list of patches.
Besides others, the following middleware service updates are included:
glite-TORQUE_client
Update of TORQUE
This update fixes a security vulnerability. Please read the advisory from the GSVG:
Advisory 42652.
This update also contains new versions of Torque.
glite-TORQUE_client
New YAIM for TORQUE configuration
- ssh configuration has been updated in Torque client.
glite-FTA_oracle, glite-FTS_oracle, glite-LFC_mysql, glite-LFC_oracle, glite-SE_dpm_disk, glite-SE_dpm_mysql, glite-WN
lcg-vomscerts-5.7.0 adds next certs for
cclcgvomsli01.in2p3.fr and vo.racf.bnl.gov
| Patch # |
Description |
|
2590
|
New Torque (2.3.6) and Maui Packages for x86_64
|
|
2709
|
[ yaim-torque-client ] yaim-torque-client x86_64
|
|
3051
|
[ yaim-torque ] 2nd YAIM release for torque client x86_64/SLC4
|
|
3602
|
lcg-vomscerts-5.7.0 adds next certs for 2 servers x86_64
|
05.11.2009 - 3.1 Update 59
This update contains multiple bug fixes in various areas.
Please see below for the individual service updates and list of patches.
Besides others, the following middleware service updates are included:
glite-WN
New version of lcg-infosites:
The new patch is solving the bug 37572. it allows therefore the query to multiple BDIIs
| Patch # |
Description |
|
3285
|
new lcg-infosites version solving the bug #37572 SL4/x86_64
|
28.10.2009 - 3.1 Update 58
This update re-introduces some of the features and bug fixes previously proposed with Update 57 and subsequently rolled-back.
The individual service updates and complete list of patches are available below. Among others, the following changes are included:
glite-FTS_oracle, glite-FTA_oracle, glite-FTM, glite-WN
New version of FTS and Clients:
FTS 2.2 is a major FTS version update. The main changes are:
- SRM-gridftp split
- Logging to syslog according to Middleware Security Audit Logging Guidelines
- Logging IP addresses in SRM calls
- Removed obsolete commands: glite-transfer-placement-submit and glite-transfer-discovery
- Added site group management tools: glite-transfer-group-addmember glite-transfer-group-list glite-transfer-group-removemember
- Added channel management methods for new channel parameters
- Merged transfer-api-c into transfer-cli.
- DB maintenance packages are part of the core FTS package: history, purge
- Compliant with the WLCG SRM MoU for spaces
glite-FTA_oracle, glite-FTS_oracle, glite-LFC_mysql, glite-LFC_oracle, glite-SE_dpm_disk, glite-SE_dpm_mysql, glite-WN
New version of lcg-vomscerts:
lcg-vomscerts-5.6.0 adds new cert for voms.fnal.gov and removes
old certs for voms.fnal.gov, voms.cern.ch and voms-pilot.cern.ch
| Patch # |
Description |
|
2404
|
R3.1/SLC4/x86_64: FTS 2.2
|
|
3280
|
lcg-vomscerts-5.6.0 adds new cert for voms.fnal.gov x86_64
|
22.10.2009 - 3.1 Update 57 (rolled-back)
Update 57 introduced critical bugs for the BDII.
For this reason, the SA3/SA1 release management team has decided to rollback the production repository to the previous Update 56. Those sites that already upgraded the BDIIs with Update 57 should follow these guidelines to roll back the BDII:
Remove the following rpms:
glite-BDII-3.1.19-0.i386.rpm
bdii-5.0.4-1.noarch.rpm
glite-info-provider-service-1.1.5-0.noarch.rpm
glue-schema-2.0.1-1.noarch.rpm
The versions which you should have after removing these packages are:
glite-BDII-3.1.18-0.i386.rpm
bdii-4.0.1-4.noarch.rpm
glite-info-provider-service-1.1.4-0.noarch.rpm
glue-schema-1.3.0-5.noarch.rpm
These rpms can be found in the production gLite 3.1 repository of Update 58.
glite-FTS_oracle, glite-FTA_oracle, glite-FTM, glite-WN
New version of FTS and Clients:
- SRM-gridftp split
- Logging to syslog according to Middleware Security Audit Logging Guidelines
- Logging IP addresses in SRM calls
- Removed obsolete commands: glite-transfer-placement-submit and glite-transfer-discovery
- Added site group management tools: glite-transfer-group-addmember glite-transfer-group-list glite-transfer-group-removemember
- Added channel management methods for new channel parameters
- Merged transfer-api-c into transfer-cli.
- DB maintenance packages are part of the core FTS package: history, purge
- Compliant with the WLCG SRM MoU for spaces
glite-FTS_oracle, glite-LFC_mysql, glite-LFC_oracle, glite-SE_dcache_admin_gdbm, glite-SE_dcache_admin_postgres, glite-SE_dcache_info, glite-SE_dpm_disk, glite-SE_dpm_mysql
New version of the BDII:
This updated version of the BDII contains support for GLUE 2.0 information. The GLUE 2.0 LDAP schema file has been added to the glue-schema package and the slapd.conf file used by the BDII has been modified to include the new file. A new root o=glue has been added in the slapd.conf file and the BDII has be modified to manage multiple roots. glite-FTA_oracle, glite-FTS_oracle, glite-LFC_mysql, glite-LFC_oracle, glite-SE_dpm_disk, glite-SE_dpm_mysql, glite-WN
New version of lcg-vomscerts:
lcg-vomscerts-5.6.0 adds new cert for voms.fnal.gov and removes
old certs for voms.fnal.gov, voms.cern.ch and voms-pilot.cern.ch
| Patch # |
Description |
|
2404
|
R3.1/SLC4/x86_64: FTS 2.2
|
|
3208
|
GLUE 2.0 Enabled BDII SL4/x86_64
|
|
3280
|
lcg-vomscerts-5.6.0 adds new cert for voms.fnal.gov x86_64
|
06.10.2009 - 3.1 Update 56
This update didn't affect any 64 bit service since it was containing patches for 32 bit services only.
22.09.2009 - 3.1 Update 55
This update contains multiple bug fixes in various areas.
Please see below for the individual service updates and list of patches.
Besides others, the following middleware service updates are included:
glite-WN
A new version of GFAL fixing several bugs is available.
For details please have a look at the corresponding gLite 3.2 release for SL5 (Update 05).
| Patch # |
Description |
|
3198
|
GFAL bugfix release v1.11.8-2 SL4/x86_64
|
31.08.2009 - 3.1 Update 54
This update contains multiple bug fixes in various areas.
Please see below for the individual service updates and list of patches.
Besides others, the following middleware service updates are included:
glite-FTA_oracle, glite-FTS_oracle, glite-LFC_mysql, glite-LFC_oracle, glite-SE_dcache_admin_gdbm, glite-SE_dcache_admin_postgres, glite-SE_dcache_info, glite-SE_dcache_pool, glite-SE_dpm_disk, glite-SE_dpm_mysql, glite-TORQUE_client, glite-WN
New version of yaim core
- Configuration changes needed for a new version of trustmanager and util-java. These changes are included in a new function not used yet by any yaim module.
The idea is that any service configuring tomcat will use this function in the future.
- The creation of users specifying a home directory wasn't working. This is fixed now.
- GLOBUS_TCP_PORT_RANGE is not defined for the WN and it's properly defined for the TAR UI. MYPROXY_TCP_PORT_RANGE is not defined any more.
- YAIM checks whether fetch-crl is installed and fails otherwise.
- groups.d/ structure is now available for all the node types.
- gridview is configured only if it's installed.
- New site-info.pre and .post variables:
- BDII_ARCHIVE_SIZE: It is the number of dumps of the database to keep for debugging purposes. Default is 0.
- BDII_BREATHE_TIME: It is the time in seconds between updates of the bdii. Default is 120.
- BDII_PASSWD: This is the password for the LDAP database used by the bdii. Default is $(mkpasswd -s 0).
- BDII_READ_TIMEOUT: It is the amount of time to wait until an information is assumed to have timed out. Default is 300.
- CONFIG_GRIDMAPDIR: It enables or disables the creation of the gridmap file. If set to yes, it creates it. If set to no,
it doesn't create the gridmap file. Default is yes.
- TRUSTMANAGER_CRL_UPDATE_INTERVAL: This variable is used in the trustmanager configuration and it defines how often the
X509_CERT_DIR is polled for changes in the files. It's a number followed by h,m or s time units. Default is 2h.
- TOMCAT_HOSTCERT_LOCATION: path of the tomcat host certificate. Default is /etc/grid-security/tomcat-cert.pem.
- TOMCAT_HOSTKEY_LOCATION: path of the tomcat host key. Default is /etc/grid-security/tomcat-key.pem.
- TOMCAT_USER: tomcat user. Default is "tomcat".
glite-WN, glite-SE_dcache_admin_gdbm, glite-SE_dcache_admin_postgres, glite-SE_dcache_info, glite-SE_dcache_pool
New version of dcache and dcap clients
Upgrade solving some internal coding errors and fixing SRM client command line changes.
glite-LFC_mysql, glite-LFC_oracle, glite-SE_dpm_mysql
New dependency on glite-info-provider-release
The package glite-info-provider-release has been added as a dependency. It's an information provider that gives information about the gLite release version.
glite-WN
New version of GFAL and lcg_util
New version containing a set of bug fixes.
New version of lcg-infosites
The new patch is solving the bug 38922 which includes the use of AccessControlBaseRule
| Patch # |
Description |
|
3158
|
new lcg-infosites version solving bug 38922 SLC4/x86_64
|
|
2981
|
[ yaim-core ] yaim-core 4.0.8 SLC4/x86_64
|
|
3048
|
GFAL 1.11.7 x86_64/SLC4
|
|
3058
|
dCache 1.9.3 Client and dCap client dcache-dcap-1.9.3-0 release x64 SL4
|
|
3065
|
Add glite-info-provider-release package as a dependency SLC4/x86_64
|
|
3120
|
R3.1/SLC4/x86_64: gfal v1.11.8-1 and lcg_util v1.7.6-1
|
24.08.2009 - 3.1 Update 53
This update contains multiple bug fixes in various areas.
Please see below for the individual service updates and list of patches.
Besides others, the following middleware service updates are included:
glite-WN
New WMS 3.2 clients
There's a new WMS 3.2 release that also contains new WMS clients. Check the 32bit Update page for more details on the new 3.2 WMS service.
| Patch # |
Description |
|
2954
|
WMS 3.2 for SLC4 x86_64
|
29.07.2009 - 3.1 Update 52
This update contains multiple bug fixes in various areas.
Please see below for the individual service updates and list of patches.
Besides others, the following middleware service updates are included:
glite-WN
New dependencies on the WN
python-ldap is now required by the glite-WN. The default OS package is normally used to satisfy this dependency.
glite-FTA_oracle, glite-FTS_oracle, glite-LFC_mysql, glite-LFC_oracle, glite-SE_dpm_disk, glite-SE_dpm_mysql, glite-WN
New version of lcg-vomscerts
- Adds next certificates for voms.cern.ch and voms-pilot.cern.ch
- Removes old certificate for lcg-voms.cern.ch
| Patch # |
Description |
|
3025
|
3.1 / x86_64 - Addition of python-ldap as dependency to WN.
|
|
3094
|
R3.1 lcg-vomscerts-5.5.0 adds next cert for voms.cern.ch x86_64
|
15.07.2009 - 3.1 Update 51
This update contains multiple bug fixes in various areas.
Please see below for the individual service updates and list of patches.
Besides others, the following middleware service updates are included:
glite-FTS_oracle, glite-FTA_oracle, glite-SE_dpm_disk, glite-SE_dpm_mysql,
glite-WN
New version of gridsite rpms
The gridsite rpms have been rebuilt to put libraries into /usr/lib64.
glite-WN
New release of yaim clients
New site-info.def variable:
- GLITE_LOCAL_CUSTOMISATION_DIR: This is an optional variable to define a scratch area for pool accounts via EDG_WL_SCRATCH.
For more information please check
glite-WN-3.0.15-3 Update.
glite-SE_dpm_mysql, glite-SE_dpm_disk, glite-FTA_oracle, glite-FTS_oracle, glite-WN
New version of DPM
- DPM gridftp v1.7.1-2: saves the calculated checksum (via gridftp CKSM) to the name server, e.g. for later reporting via srmLs.
The dpm-gridftp is able to calculate Adler32, Crc32 and MD5 checksums.
- Improved the error reporting of 'dpm-drain'.
- Clear the saved namespace checksum, if file as changed.
- Using libvomsapi, instead of the deprecated libvomsc.
- Avoiding /etc/services for rfio port lookup (wrong value).
- rfio bugfixes and improvements
- The DPM/LFC sources, configuration and init scripts have been improved for portability to SL5, Debian, OS X and Solaris.
glite-LFC_mysql, glite-LFC_oracle, glite-WN
New version of LFC
- The LFC sources, configuration and init scripts have been improved for portability to SL5, Debian, OS X and Solaris.
- Two new methods have been added to the LFC server and the API: lfc_delreplicasbysfn() and lfc_registerfiles(), for the bulk removal or addition of entries.
glite-LFC_mysql, glite-LFC_oracle
New version of yaim LFC
Update of LFC YAIM configuration scripts to work with LFC 1.7.2-4 and later.
| Patch # |
Description |
|
2634
|
Update of gridsite on x86_64
|
|
2961
|
[ yaim-clients ] yaim-clients 4.0.8 SLC4/x86_64
|
|
2968
|
R3.1/SLC4/x86_64: DPM v1.7.2
|
|
2970
|
R3.1/SLC4/x86_64: LFC v1.7.2
|
|
2992
|
LFC yaim configuration update to 4.0.3-1 x86_64
|
14.07.2009 - 3.1 Update 50
This update contains multiple bug fixes in various areas.
Please see below for the individual service updates and list of patches.
Besides others, the following middleware service updates are included:
glite-WN
New version of grid-cm-* packages to remove /opt/glite/lib/python/logging. This is to address GGUS ticket 50148,
only happening in glite-WN version 3.1.18-0. In fact this private logging version was only ever required on SL3 and can cause problems for people using private python 2.5 versions with the supplied
2.3 versions.
| Patch # |
Description |
|
2843
|
gLite 3.1 x86_64 - Update of grid-cm-client-wn to version 0.1.2 on WNs
|
06.07.2009 - 3.1 Update 49
This update didn't affect any 64 bit service since it was containing patches for 32 bit services only.
25.06.2009 - 3.1 Update 48
This update contains multiple bug fixes in various areas.
Please see below for the individual service updates and list of patches.
Besides others, the following middleware service updates are included:
glite-WN
Addition of the grid-cm-* packages in the WN.
grid-cm-* packages provide worker node configuration monitoring. For more information, please check The Worker Node Client Documentation. In this document you can find the instructions about how to disable the publisher, if needed.
glite-FTA_oracle, glite-FTS_oracle, glite-LFC_mysql, glite-LFC_oracle, glite-SE_dpm_disk, glite-SE_dpm_mysql, glite-WN
New version of fetch-crl
- Warnings and errors are now counted. If there are errors in the download or verification process for one or more CRLs, the exit status will be 1;
if there are errors in the local setup or in the script invocation, the exit status will be 2.
- The installed CRLs no longer have the textual representation of the CRL, but only the PEM data blob, thus reducing IO and memory requirements.
- the CRL aging threshold is now set by default to 24 hours. The previous default was 0. The CRL aging threshold is set in the config file using
CRL_AGING_THRESHOLD=<xx>, or with the "-a" command-line argument.
- Default network timeouts reduced to 10 seconds (was 30) and retries to 2.
- Added caching and conditional downloading. When CACHEDIR is set, the original downloads are preserved and wget timestamping mode enabled.
When the content did not change, only the timestamp on the installed CRL is updated. If SLOPPYCRLHASHES is set, the has is calculated based on the
name of the crl_url file, otherwise it is taken from the CRL itself.
- The CACHEDIR must be exclusively writable by the user running fetch-crl.
- Setting CACHEDIR significantly reduced the bandwidth used by fetch-crl.
- Added RESETPATHMODE setting in sysconfig. It defines whether or not to set re-set $PATH to "/bin:/usr/bin" before start. The search for
OpenSSL may be done based on the old path. yes=always replace; searchopenssl=search for openssl first and then reset; no=keep original path, whatever that
me be (may be empty if called from cron) Default="yes". This replaces the hard-coded path in the tool!
- Hidden "FORCE_OVERWRITE" option now has a regular name. This is backwards-compatible. Set FORCE_OVERWRITE=yes if you want files overwritten
that have a CRL-like name and ought to have CRL content, but currently do not.
glite-SE_dcache_info, glite-SE_dcache_pool, glite-SE_dcache_admin_gdbm, glite-SE_dcache_admin_postgres, glite-WN
dCache new features
- Info service and info provider
- Permanent registration of deleted files
- SRM Client Tools
- Log4j Runtime User Interface
- dCacheConfigure Script
| Patch # |
Description |
|
2660
|
x86_64 - Addition of grid-cm to WNs
|
|
2780
|
fetch-crl update x86_64
|
|
2869
|
dCache 1.9.1-7 Sever and 1.9.0-9 Client release x64
|
16.06.2009 - 3.1 Update 47
This update contains a set of new versions for the glite-WN in various areas.
Please see below for the description of the new versions and the list of patches.
glite-WN
- The WN includes the myproxy client that was missing in its dependencies
- Minor release of GFAL 1.11.6-1: Fix of error handling regression bug
- Minor release of lcg_util 1.7.4-1:
- warning in case of mismatch between command line VO and proxy VO
- asynchronous srmLs support (dCache)
- new synchronous function gfal_bringonline() with retrying/polling mechanism
- new lcg-get-checksum command (and corresponding API function)
- SRMv2 is now used by default if available
- support of checksum verification during file transfers
Known Issues for GFAL
- gfal_open segfaults on "connection refused". Tracked in #51230
Known Issues in lcg_utils
- When copying a local file to an SE, checksum checking does not work. (SE -> local and SE -> SE works OK). Will be fixed for the next release.
- The lcg-rf commmand no longer prints the guid on success. The "--verbose" option has to be used in order to obtain the value. See bug #50548
| Patch # |
Description |
|
2849
|
WN needs MyProxy client x86_64
|
|
3015
|
R3.1/SLC4/x86_64: GFAL 1.11.6
|
|
3031
|
R3.1/SLC4/x86_64: lcg_util 1.7.4
|
11.05.2009 - 3.1 Update 46
This update contains multiple bug fixes in various areas.
Please see below for the individual service updates and list of patches.
Besides others, the following middleware service updates are included:
glite-SE_dpm_mysql, glite-SE_dpm_disk, glite-LFC_mysql, glite-LFC_oracle, glite-FTA_oracle, glite-FTS_oracle, glite-WN
The new version of DPM and LFC contains a series of new features. Check the description of the packages below for more details.
Known Issue
bug #49369: There is a known problem
when configuring DPM 1.7.0-6 using YAIM. For more details please visit the DPM disk and the DPM mysql.
LCG-DM 1.7.0-5
- srmCopy has been fully implemented
- WLCG SRM MoU requirements:
- support for multiple groups on spaces
- SRM2.2 srmReleaseFiles can be used without a requestToken
- srmLs can return information about the spaces in which a file resides
- new dpm-listspaces CLI, which will also serve as information provider
Note the 1.7 series of the DPM requires a database schema change with respect to earlier versions. The YAIM script will automatically do this.
However as a precaution the DPM databases should be backed up before doing the upgrade.
Starting with DPM version 1.7.0 the system includes the facility to provide lists of reserved space tokens to the information system. In the past
some user communities needed that information and to provide it the DPM admin may have been asked to add an information provider script.
As these additions were applied by hand an extra step is required to remove them. Therefore if a script was added one should remove it when
upgrading to version 1.7.0. In particular the 'glite-info-dpm-space-tokens' provider was quite commonly used. For that provider one should check
for the following files on the DPM head node and remove if necessary:
- /opt/glite/etc/gip/provider/glite-info-dpm-space-tokens-provider
- /opt/glite/libexec/glite-info-dpm-space-tokens
although the naming, in particular of the file in gip/provider/, may vary according the precise installation procedure that was followed.
DPM-DSI 1.7.0-1
- added ADLER32 and CRC32 checksum algorithms to CKSM handler
- Fixes #42623: DM custom packager creates rpms with invalid name
CGSI_gSOAP-2.7 v1.3.2-2
- Fixes #42623: DM custom packager creates rpms with invalid name
- gSOAP 2.7.10 has introduced a virtual destructor, which inserts
a pointer to the VMT at the beginning of the 'soap' structure,
making the C and C++ versions of the code binary incompatible,
so we need to build C++ flavour of the libraries as well with
_cpp suffix.
- Added new function, export_delegated_credentials(), to make
a delegated credential token available in memory suitable for
storage and later reuse by the user.
- Removed some spurious trailing newlines from error messages.
- Fixed descriptor and connection leak on the client side
when the authenitcation negociation to a server fails.
- Enhanced some error messages to cover more of the error message
recommendations in bug #35320.
glite-data-dpm-httpd-shell v1.2.1-2
- dpm-httpd-cmd, dpm-httpd-cp: fixing X509 environment variable names
X509_USERCERT->X509_USER_CERT ... similiar X509_USERKEY & X509_USERPROXY
- Checking the default proxy location in /tmp/x509up_u* as well.
glite-data-dpm-xrootd v2.0.3-1
- Fixes #42623: DM custom packager creates rpms with invalid name.
- Improving stability: initialise a couple of pointers in case DPM calls fail
- fix in logrotation script to check if dpm-xrd is actually configured
before sourcing the config file.
glite-SE_dpm_mysql, glite-SE_dpm_disk, glite-LFC_mysql, glite-LFC_oracle, glite-FTA_oracle, glite-FTS_oracle, glite-WN, glite-UI, glite-VOBOX
This is an update of the DPM and LFC patch fixing some outstading issues:
- Fix memory leak in dpm_get_max_get_lifetime()
- Correct problem with bug fix 40553 (dpm-drain)
- update dpm-listspaces to v1.3.1-4
glite-FTA_oracle, glite-FTS_oracle, glite-LFC_mysql, glite-LFC_oracle, glite-SE_dpm_disk, glite-SE_dpm_mysql, glite-WN
New version of the VOMS Java APIs to fix some bugs. Please, check the list of bugs in the specific service update pages for more information.
| Patch # |
Description |
|
2564
|
R3.1/x86_64/SLC4: DPM/LFC v1.7.0
|
|
2737
|
R3.1/x86_64/SLC4: DPM/LFC v1.7.0 update
|
|
2908
|
[VOMS] patch 2771 for clients on x86_64
|
29.04.1009 - 3.1 Update 45
This update contains multiple bug fixes in various areas.
Please see below for the individual service updates and list of patches.
Besides others, the following middleware service updates are included:
glite-WN
Addition of the glite-wn-info command
============================
The glite-wn-info command is designed to be executed on the WN by a job submitter. It returns information about that worker node in a
grid context. Initially the following in particular is supported:
$ glite-wn-info -n GlueSubClusterUniqueId MySubCluster
The unique GlueSubCluster the batch worker is located in is returned.
The configuration file default location is ${GLITE_LOCATION:-/opt/glite}/etc/glite-wn-info.conf.
However the hard coded location /etc/glite-wn-info.conf is also supported and will override $GLITE_LOCATION/etc/glite-wn-info.conf.
This last configuration is particularly useful to sites working with the a TAR_WN and allows them to configure their WNs individually.
YAIM support for glite-wn-info:
- A new function, config_wn_info, will create the configuration file needed by glite-wn-info. Please, check the description of the
WN_LIST variable in the YAIM guide since a new syntax has been introduced to be able to configure glite-wn-info.
More details in the relevant section of the YAIM guide.
- A new default YAIM variable has been introduced for the WN/TAR WN configuration to define the glite-wn-info configuration file.
WN_INFO_CONFIG_FILE. Since a default value is provided, the sys admins don't need to worry about it unless they want a non standard configuration.
More details in:
section on WN variables in the YAIM guide.
Major release of GFAL 1.11.4 and lcg_util 1.7.2
======================================
- failover to other replicas, if an SE is not available
- adjustable timeouts for each type of remote operation
- SULR canonicalization can be disabled (for VOs without BDII)
- improved Python interface (Posix I/O, error handling)
- checksum is displayed in lcg-ls
- accepting negative request ID (dCache)
- using single gridftp session (CASTOR)
- obsoletes RMC/LRC functionality (not removed yet)
- and a number of bug fixes
- lcg-del fails when specifying the LFN and the SE, a simple workaround consists in specifying the corresponding SURL.
Please note that the location of the Python libraries has changed from
/opt/lcg/lib/python to /opt/lcg/lib/python2.3/site-packages,
so you have to adjust your PYTHON_PATH accordingly, unless you use yaim-core
to configure it!
glite-FTA_oracle, glite-FTS_oracle, glite-LFC_mysql, glite-LFC_oracle, glite-SE_dcache_admin_gdbm, glite-SE_dcache_admin_postgres, glite-SE_dcache_info, glite-SE_dcache_pool, glite-SE_dpm_disk, glite-SE_dpm_mysql, glite-TORQUE_client, glite-WN
Updates for YAIM
=============
This release contains an update for yaim clients and yaim core. Both have been updated from version 4.0.5 to version 4.0.7,
but they contain also all the bug fixes made available in 4.0.6.
The release pages only highlight the bugs fixed in yaim core 4.0.7. If you also want to know the list of bugs fixed in 4.0.6,
please look at the list of attached bugs in the
yaim core patch (#2636) and
yaim client patch (#2757).
Summary of the bug fixes
The most relevant bug fixes due to the severity of the bug (major or critical) are:
- #43278: config_users is now always creating the cleanup-grid-accounts cron job, no matter i
f CONFIG_USERS is yes or no.
New siteinfo variables
- UNPRIVILEGED_MKGRIDMAP: In case you want to create a grid-map file which only contains mappings to ordinary users.
Values are 'yes' or 'no'. 'no' will create a grid-map file with special users as well, if defined in groups.conf.
yes, will create a grid-mapfile containing only mappings to ordinary pool accounts. This variable is defined in site-info.pre.
Default is 'no'. You can redefine it in your site-info.def.
- BDII_LIST: This variable already appeared in the previous yaim core release 4.0.5-7. However, due to a bug it was
recommened not to use it. It's an optional variable to define a list of top level BDIIs to support the automatic failover in the GFAL
clients. The syntax is my-bdii1.$MY_DOMAIN:port1[,my-bdii22.$MY_DOMAIN:port2[...]]. Be aware that lcg-infosites doesn't work with multiple
BDIIs. So it's better you don't define this variable if you need to use lcg-infosites. However gfal, lcg_utils, lcg-info and
glite-sd-query work fine with multiple BDIIs.
- SE_MOUNT_INFO_LIST: This YAIM variable is used to set the GlueCESEBindMountInfo attribute for each defined SE. The variable
is a space separated list of SE hosts from SE_LIST with the export directory from the Storage Element and the mount directory
common to worker nodes part of the Computing Element like SE1:export_dir1,mount_dir1. If any SE from SE_LIST doesn't support
the mount concept, don't define anything for that SE in this variable. If this is the case for all the SEs in SE_LIST,
put the value 'none'. The GlueCESEBindMountInfo will be in both cases 'n.a'.
Summary of new features
- fetch-crl runs now on reboot. A init.d script has been created for it.
- Tomcat configuration is now defined in yaim core to be used by all the modules that need tomcat.
- grid-env.sh doesn't leave garbage in the environment. It's also possible to run the -r option in the yaim command without messing
up the grid-env.sh file.
- Old lcas/lcmaps configuration files are no longer created in config_mkgridmap.
- Multiple BDIIs can now be defined for GFAL clients. See the section above for the description of BDII_LIST.
- Update of yaim clients in order to avoid duplication of PYTHONPATH/PERL5LIB definitions.
so that the grid environment has coherent values for 32bit and 64bit platforms.
- With the previous yaim core version, PYTHONPATH/PERL5LIB used to contain a mix of 32bit and 64bit grid libraries after configuring
a node type (specially WNs). This is wrong since Python/perl, unlike the dynamic linker, seems not to be able to find the good library when 32bit and 64bit libraries
appear in PYTHONPATH/PERL5LIB.The fix consists of:
- If the machine is 64bit and middleware is 64bit, PYTHONPATH/PERL5LIB only contains 64bit paths.
- If the machine is 64bit and middleware is 32bit, PYTHONPATH/PERL5LIB only contains 32bit paths.
- If the machine is 32bit, PYTHONPATH/PERL5LIB only contains 32bit paths.
- Python version specific directories have also been added in PYTHONPATH when they are installed.
- A typo has also been fixed in config_mkgridmap so that the grid-map file generation for LFC and DPM works fine now.
- The .lsc files (files specifying the trusted VOMS servers with their DNs and CA DNs) are now created in the tarball configurations.
| Patch # |
Description |
|
2758
|
Addition of glite-wn-info to return information about a WN x86_64
|
|
2766
|
[ YAIM ] glite-yaim-core 4.0.7 x86_64
|
|
2785
|
R3.1/SLC4/x86_64: GFAL 1.11.4 and lcg_util 1.7.2
|
|
2796
|
[ yaim-clients ] yaim-clients 4.0.7 x86_64
|
14.03.2009 - 3.1 Update 44
This update didn't affect any 64 bit service since it was containing patches for WMS, CREAM CE, UI and VOBOX
currently released only in 32 bit.
06.04.2009 - 3.1 Update 43
This update contains multiple bug fixes in various areas.
Please see below for the individual service updates and list of patches.
Besides others, the following middleware service updates are included:
glite-WN
* New version of YAIM clients enabling configuration of Service Discovery
glite-LFC_mysql, glite-LFC_oracle, glite-SE_dpm_disk, glite-SE_dpm_mysql, glite-WN, glite-FTA_oracle, glite-FTS_oracle
* VOMS: various bug fixes. Please have a look into the corresponding patch.
| Patch # |
Description |
|
2652
|
Fixes for FQAN order, short FQANs + miscellaneous [4] x86_64
|
|
2672
|
[ YAIM ] glite-yaim-clients 4.0.5 for x86_64
|
27.03.2009 - 3.1 Update 42
This update can be summarised as: new version of lcg-vomscerts, BDII, WN, FTS and FTA updates, and finally new version of VDT.
Please check below for more details on the individual service updates and list of patches.
IMPORTANT NOTE: This update has priority HIGH for the lcg-vomscerts patch. The other patches have priority NORMAL.
glite-FTA_oracle, glite-FTS_oracle, glite-LFC_mysql, glite-LFC_oracle, glite-SE_dpm_disk, glite-SE_dpm_mysql, glite-WN
- New version of lcg-vomscerts-5.4.0: it adds next certificate for lcg-voms.cern.ch (old one expires on 07/04/2009); and removes old certs of cclcgvomsli01.in2p3.fr and vo.racf.bnl.govi.
glite-FTS_oracle, glite-LFC_mysql, glite-LFC_oracle, glite-SE_dcache_info, glite-SE_dpm_mysql
- Upgrade of BDII. The main change is that the starting cache size used for the Berkeley Database in the BDII has been reduced from 1 GB to 50 MB. This should significantly reduce the memory footprint and still provide the necessary performance.
- DB_CONFIG now has "set_lk_max_locks 10000" (10k) to fix GGUS ticket 43230 ("gLite 3.1u34: lcg-cp failing on a BDII error in a MPI job").
glite-FTA_oracle, glite-FTS_oracle, glite-LFC_mysql, glite-LFC_oracle, glite-SE_dpm_disk, glite-SE_dpm_mysql, glite-WN
- New version of VDT that introduces GridFTP2 support.
glite-WN
- Which is added as a dependency in the WN.
glite-FTS_oracle
- FTS job submission sometimes ends up with an invalid delegated proxy certificate in the FTS service, thus transfers will fail. This update fixes the FTS web service's delegation code that the delegated proxy certificates should not be corrupted.
The fix is transparent for the clients and there is no configuration change on the server side. One only needs to restart the FTS web service (Tomcat) after upgrading the glite-data-transfer-fts package.
| Patch # |
Description |
|
2679
|
x86_64 - Default DB cache size reduced to 50Mb
|
|
2681
|
VDT 1.6.1 Release 9 SL4/x86_64
|
|
2702
|
Adding which dependency to glite-WN x86_64
|
|
2761
|
R3.1/FTS 2.1: delegation fix x86_64
|
|
2859
|
R3.1 lcg-vomscerts-5.4.0 adds next cert for lcg-voms.cern.ch x86_64
|
25.02.2009 - 3.1 Update 41
This update didn't affect any 64 bit service since it was containing patches for WMS and CREAM CE,
currently released only in 32 bit.
04.02.2009 - 3.1 Update 40
This update contains a new version of the lcg-vomscerts rpm. Please see below for more details on the new version and on the individual service updates.
glite-FTA_oracle, glite-FTS_oracle, glite-LFC_mysql, glite-LFC_oracle, glite-SE_dpm_disk, glite-SE_dpm_mysql, glite-WN
Upgrade of lcg-vomscerts-5.3.0. It adds 3 certificates:
- next cert for cclcgvomsli01.in2p3.fr (biomed + egeode);
- next cert for vo.racf.bnl.gov (atlas);
- cert for voms.fnal.gov (cms).
| Patch # |
Description |
|
2746
|
R3.1 lcg-vomscerts-5.3.0 adds new certificates x86_64
|
22.01.2009 - 3.1 Update 39
This update didn't affect any 64 bit service since it was only containing a patch for CREAM CE,
currently released only in 32 bit.
16.12.2008 - 3.1 Update 38
This update contains multiple bug fixes in various areas.
Please see below for the individual service updates and list of patches.
Besides others, the following middleware service updates are included:
glite-WN
For instructions on how to use JPackage with gLite R3.1 and Hydra see
https://twiki.cern.ch/twiki/bin/view/EGEE/DMEDS#installation_of_the_service
for Hydra test configurations.
Major features in glite-data-hydra-service v1.3.0-1 and
glite-data-hydra-cli v3.1.0-1:
o split-key support using Shamir's Secret Sharing Scheme
o using GFAL for I/O (replacing gLite I/O)
Known issues:
When running yaim for the first time an error message is displayed:
ERROR 1045 (28000): Access denied for user 'hydra1'@'localhost' (using password: YES)
The error message disappears when running yaim a second time. This issue is tracked in bug #43945.
Major features in glite-data-hydra-service v1.3.0-1 and
glite-data-hydra-cli v3.1.0-1:
o split-key support using Shamir's Secret Sharing Scheme
o using GFAL for I/O (replacing gLite I/O)
Known bugs:
o glite-eds-put doesn't work as documented. It cannot use lfc's GUID:s,
so "-i keyname" must be specified on the command line
glite-FTA_oracle
- Changes to make the package build on 64b systems
- fix for #38820 (glite-proxy-renewd crashes when trying to renew proxies with a short FQAN)
- After installation of the patch the renewal must be restarted
using: /opt/glite/etc/init.d/glite-proxy-renewald restart
glite-WN
Major features in glite-data-hydra-service v1.3.0-1 and
glite-data-hydra-cli v3.1.0-1:
o split-key support using Shamir's Secret Sharing Scheme
o using GFAL for I/O (replacing gLite I/O)
Known bugs:
o glite-eds-put doesn't work as documented. It cannot use lfc's GUID:s, so "-i keyname"
must be specified on the command line
glite-FTA_oracle glite-FTS_oracle glite-LFC_mysql glite-LFC_oracle glite-SE_dpm_disk glite-SE_dpm_mysql glite-WN
lcg-vomscerts-5.2.0:
- renamed all certificates with ".pem" suffixes because of bug 43395
- removed expired certificate of voms.cern.ch
glite-FTS_oracle glite-WN
This is a simple fix for the library moving problem.
If the service is working, this change has no effect. When the service is next time reconfigured
or if there is a clean install this change has an effect and will use the algorithm described in
the original submission comment.
It is recommended to run the config script again to get the additional link
to the /usr/share/java/bcprov.jar even though it doesn't exist to prepare for the eventual update
to bouncycastle 1.41. That's why it's better to reconfigure the services that run on tomcat.
But the WN doesn't have services running on tomcat, thus this is just a synchronization update
to be in sync with other components
glite-FTS_oracle glite-LFC_mysql glite-LFC_oracle glite-SE_dcache_admin_gdbm
glite-SE_dcache_admin_postgres glite-SE_dcache_info glite-SE_dpm_disk glite-SE_dpm_mysql
This fixes the GGUS ticket : https://gus.fzk.de/ws/ticket_info.php?ticket=44201
| Patch # |
Description |
|
2344
|
R3.1/SLC4/x86_64: Proxy renewal 1.3.6
|
|
2522
|
R3.1/SLC4/x86_64: Hydra client
|
|
2599
|
R3.1 lcg-vomscerts-5.2.0 renames certificates x86_64
|
|
2645
|
trustmanager configure.sh fix for new bouncycastle (64bit)
|
|
2706
|
Removing Multivalue SE from GlueCESEBind x86_64
|
28.11.2008 - 3.1 Update 37
This update contains multiple bug fixes in various areas.
Please see below for the individual service updates and list of patches.
Besides others, the following middleware service updates are included:
glite-SE_dcache_info
The information provider glite-info-provider-ldap has been updated. This version has improved logging and the protection for recursion has been re-enabled after accidentally being removed in a previous release.
| Patch # |
Description |
|
2651
|
Updated information provider: glite-info-provider-ldap x86_64
|
26.11.2008 - 3.1 Update 36
This update contains multiple bug fixes in various areas.
Please see below for the individual service updates and list of patches.
Besides others, the following middleware service updates are included:
glite-FTA, glite-FTS , glite-FTM
This update fixes problems when upgrading bouncycastle as provided by jpackage from version 1.37 to version 1.41. Next to this, the problem with the logrotate has been fixed.
NOTE:After the upgrade of bouncycastle happened the service has to be reconfigured.
| Patch # |
Description |
|
2551
|
R3.1/SCL4/FTS2.1: error message and logrotate update
|
|
2417
|
[ YAIM ] YAIM-CREAM-CE 2nd update
|
|
2643
|
FTS 2.1: configuration fixes
|
14.11.2008 - 3.1 Update 35
This update contains multiple bug fixes in various areas.
Please see below for the individual service updates and list of patches.
Besides others, the following middleware service updates are included:
VOMS
An updated documentation can be found here:
VOMS Core Services User Guide: https://edms.cern.ch/file/973684/1/voms-guide.pdf
VOMS Admin User Guide: https://edms.cern.ch/file/974094/1/voms-admin-user-guide.pdf
VOMS Installation and Configuration Guide: https://edms.cern.ch/file/974982/1/voms-installation-configuration-guide.pdf
Contains a fix for bug #38506 (Previous Predictable Order with --voms flags was lost.). Now the order of FQANs in the VOMS proxy follows the order in which FQANs are specified on the command line as values of the "-voms" options. This does _not_ apply to the shorthand "<voname>:/Role=<role>" syntax.
Developer changes:
New API added for the C and C++ APIs. VOMS_SetVerificationTim(time_t time).
As usually, except where noted, everything is backwards-compatible with previous version, both on the protocol level (i.e. client and server versions may be freely mixed) and ABI level (API libraries can be upgraded with newer versions without needing recompilation of the linking parties)
GFAL
glite-data-gfal
- Modify ETICS configuration file template to have dcache-client dependency for SLC4 and dcache-dcap for SLC5
- Experimenting with Python 2.5 support.
- Using --with-swig-prefix to really use ETICS relocated Swig dependency.
- Setting SWIG_LIB, because the one built into the 'swig' binary will not be valid in a userspace build, when Swig is relocated.
- Improve error message in case of soap error different from SOAP_EOF, and with no error string
- added missing libraries to python modules
- The proper fix was using the WITH_NOGLOBAL option instead.
- Added --with-python-location configuration option to be able to build with alternative Python versions.
- SOAP_FMAC3 and SOAP_FMAC5 are used in the generated gSOAP files, however stdsoap2.h uses SOAP_FMAC1, which has to be redefiened as well, when included in these sources.
This should fix the SL5 build.
glite-data-dm-util
- Unregister LFN in lcg_cr function when not able to register SURL in this LFN
- Print error message in lcg_rep function when not able to register SURL in the LFN
- Experimenting with Python 2.5 support.
- Solving library dependies of python module
- using --swig-prefix instead of --swig-location
- Adding 'lib64' variations to the possible SWIG_LIB locations.
- Fixed 'if' tests in configure.ac: [] are removed by m4.
- Setting SWIG_LIB, because the one built into the 'swig' binary will not be valid in a userspace build.
- using relative path to stop libtool being too smart?
- added missing python libraries
- Added --with-python-location configuration option to be able to build with alternative Python versions.
lcg-gt does not return all the information to work with dcache and this causes lcg-sd to fail. For information on how to use the lcg_utils with dCache please have a look at the following web page:
http://trac.dcache.org/trac.cgi/wiki/manuals/lcg_utils_and_dcache
glite-SE_dcache
In order to upgrade, please rerun the yaim configuration, e.g.:
./yaim -c -s site-info.def -n glite-SE_dcache_pool
./yaim -c -s site-info.def -n glite-SE_dcache_admin_postgres
Fixed bugs:
- Error message of SrmSpaceManager command 'reserve' is misleading/useless.
- PinManager fills up log files with SQL queries pool <-> xrootd-door interaction.
- /opt/d-cache/bin/dcache script doesn't start replica manager ( upper case lower case issue)
- FTP Bug, cd (ftp CWD) does not work anymore (RT #3007) busy loop in SpaceSweeper
- gPlazma returns the same FQAN for the same DN even if the FQAN changes for subsequent requests.
- ftp clinet/server checksum format miss match
- undefied NAMESPACE did not fall back to pnfs
- 'rc onerror fail' doesn't work properly.
- gPlazma web interface to verify correct configuration.
- gsidcap failes if connected to two different doors.
- high pnfs load on srmrm
- Cannot open files with PROOF
- TChain from ROOT not working properly against xrootd
- lcg-ct returns Xrootd:// instead of root://
- SrmSpaceManager : 'ls -l' doesn't report access latency and retention policy of space tokens.
- etc/node_config interpreter problem fixed
- Number of database connections seems not be limited (PinManager)
- Various fixes/improvements in installation system (rt #3082, #3160, #3252)
- File couldn't be unpinned if the disk copy didn't exist any more.
- Pin Manager is leaking db connections
- Permission handler does not respects secondary GID
- Multiple GID support in gPalzma
- globus-url-copy doesn't use the WriteToken tag to select a Space Token
- Size of removed file(s) is not returned to the token using the chimera fs backend.
- (limited) Pin Time after a bring-online start at the time when file touches the disk after a restore.
| Patch # |
Description |
|
1830
|
LCAS/LCMAPS update
|
|
2002
|
First update of CREAM Client UI for slc4/i386 platform
|
|
2063
|
VOMS Admin Server 2.0.15-1, VOMS Admin Client 2.0.8-1
|
|
2072
|
voms configuration for patches 2063 and 2390
|
|
2253
|
New JobManager, Information Dynamic plugin and yaim utils versions for SGE
|
|
2390
|
Fixes for FQAN order, short FQANs + miscellaneous [4]
|
|
2398
|
dcache-server and dcache-client upgrades i386 sl4
|
|
2512
|
R3.1/i386/SLC4: GFAL-client and lcg_util release
|
|
2399
|
dcache-server and dcache-client upgrades x86_64 sl4
|
|
2513
|
R3.1/x86_64/SLC4: GFAL-client and lcg_util release
|
16.10.2008 - 3.1 Update 34
This update contains multiple bug fixes in various areas.
Please see below for the individual service updates and list of patches.
Besides others, the following middleware service updates are included:
glite-FTA and glite-FTS
This patch needs a log4cpp version patched by the project as the bugfix for bug 42387 is not yet available in the official log4cpp release.
- New Release of glite-data-transfer-url-copy
- New Release of glite-data-transfer-agents
| Patch # |
Description |
|
2048
|
R3.1/SLC4/x86_64: FTA SL4 bug fixes for gridftp transfers
|
|
2116
|
R3.1/SLC4/x86_64: FTS SL4 bug fixes
|
08.10.2008 - 3.1 Update 33
This update contains multiple bug fixes in various areas.
Please see below for the individual service updates and list of patches.
Besides others, the following middleware service updates are included:
lcg-CE Improvements
This update introduces a new daemon which is a replacement for multiple grid_monitor_agent processes submitted by Condor to CE. Initially they were introduced to reduce load from jobmanagers polling queued jobs, but in reality with pool accounts they hit the same pitfall - too many concurrent job polls. The performance of LCG CE can be improved by a factor 2.
Four variables are introduced in yaim function config_marshal. If you would like to use a different location for globus accounting logs, you can define GATEKEEPER_DGAS_DIR in site-info.def or service file for the lcg-CE node type to point to your new location. JOB_MANAGER_MARSHAL_LOG_PATH,GASS_CACHE_MARSHAL_LOG_PATH and GMA_LOG_PATH are used to define different log file location and name for marshal and globus-gma packages if you don't want to use the default one.
The post scripts to start the daemons in globus-gass-cache-marshal and globus-job-manager-marshal rpm packages are removed. Thus these daemons are not started by default when installing them.
Besides, this patch also includes bug fixes for the released job manager and gass cache marshal packages.
glite-BDII
This updated version of the the BDII fixes a number of outstanding issues, improves the configuration and provides some additional features.
The BDII now uses the bdb backend for OpenLDAP as the ldbm backend is now obsolete. The slapd file used to configure the OpenLDAP database is now in the etc directory rather than embedded in the code. The location of this file is a new configuration parameter in the bdii.conf file BDII_SLAPD_CONF.
The default LDAP entries used in the BDII can also be found in a default LDIF file in the etc directory. The location of this file is a new configuration parameter in the bdii.conf file BDII_DEFAULT_LDIF. The var directory used by the BDII is not configurable with the parameter BDII_VAR_DIR
For full details on configuration of the BDII, please take a look at the BDII documentation
This release of the BDII also contains two new features:
- The first in the introduction of the entry, dn: Hostname=ldap://host:2170,o=infosys
This entry gives some monitoring information about the BDII.
- The second is the availability of the BDII content in a compressed form which is given by the following entry, dn: Hostname=ldap://host:2170,CompressionType=zip,o=infosys
The update order should hot matter however best practice should be followed and the top-level bdii should be updated first, followed by the site-level bdii and finally the resource-level BDII.
glite-yaim-core
This update contains the introduction of a number of new variables:
- VO_<vo_name>_MAP_WILDCARDS
- DN_GRIDMAPFILE
- VOMS_GRIDMAPFILE
- SPECIAL_POOL_ACCOUNTS
- BDII_LIST
- CONFIG_USERS
- LOCAL_GROUPS_CONF
- EDGUSERS
- DPMMGR_USER
- DPMMGR_GROUP
- LFCMGR_USER
- LFCMGR_GROUP
- EDG_USER
- EDG_GROUP
- EDGINFO_USER
- EDGINFO_USER
- RGMA_USER
- RGMA_GROUP
- GLITE_USER
- GLITE_GROUP
- GLITE_HOME_DIR
- INFOSYS_GROUP
- BDII_USER
- BDII_GROUP
For a description of these variables please check:
https://twiki.cern.ch/twiki/bin/view/LCG/Site-info_configuration_variables
New features:
- Wildcards can be now added to the gridmap file and groupmap file for LCMAPS configuration. In order to have the wildcards configured for your VO you have to define VO_<vo_name>_MAP_WILDCARDS=yes. By default these variables are not defined and therefore wildcards are not added. One wildcard will be added per existing FQAN.
- User configuration can be now enabled/disabled by defining CONFIG_USERS=yes/no. The default is 'yes'. If you disable this option, you have to make sure users defined in EDGUSERS file are created in your system. You should also create a set of pool and special accounts and describe them in a file similar to that of USERS_CONF. This variable should then contain the path to your file.
- Note that the files /opt/glite/yaim/examples/groups.conf and /opt/glite/yaim/examples/users.conf are example files that have to be adapted according to the supported VOs.
- groups.conf can be now specified per VO by creating a new directory 'group.d' under the siteinfo directory and creating one groups-<vo-name>.conf file per supported VO. However, the old way of specifying one single groups.conf for all the VOs is also supported. In order to choose one or another option:
- If GROUPS_CONF is defined in site-info.def, then all the groups should be defined for all the supported VOs in the specified file.
- If GROUPS_CONF is NOT defined, then the group.d directory must exist with one groups-<vo-name>.conf file per supported VO.
- A local groups.conf file, that is used only within a specific site and that is independent from the general groups that a VO needs to deploy in a site, can be defined by using the variable LOCAL_GROUPS_CONF where all the special groups for a certain site can be defined.
- Service users like dpmmgr or edguser are no longer hardcoded and can be configured in site-info.def for non standard values. See EDGUSERS file for more information.
- VO_<vo_name>_VOMS_CA_DN is now a mandatory variable to create the lsc files.
glite-UI, glite-WN, glite-VOBOX
Removal of obsoleted packages:
glite-data-api-perl, glite-data-catalog-api-c, glite-data-catalog-api-perl, glite-data-catalog-cli, glite-data-srm-api-perl, glite-data-transfer-api-perl
| Patch # |
Description |
|
1873
|
New updates on LCG CE improvement packages
|
|
2040
|
Updated BDII
|
|
2055
|
[ YAIM ] glite-yaim-core 4.0.5
|
|
2187
|
removal of obsoleted DM packages : glite_WN_ia32
|
|
2188
|
removal of obsoleted DM packages : glite_WN_x86_64
|
|
2189
|
removal of obsoleted DM packages : glite-UI
|
|
2190
|
removal of obsoleted DM packages : glite-VOBOX
|
01.10.2008 - 3.1 Update 32
This update contains the fixes for the glite-FTA on x86_64 platform.
glite-FTA_oracle
- Fixed bug #38561
- Fixed bug #38760
- Fixed bug #38761
- Fixed bug #39617
This service is now fully released and may be installed if required.
| Patch # |
Description |
|
1755
|
CREAM CE for slc4/i386 platform
|
|
1790
|
CREAM Client UI for slc4/i386 platform
|
|
2047
|
R3.1/SLC4/i386: FTS SL4 bug fixes for gridftp transfers
|
|
2048
|
R3.1/SLC4/x86_64: FTS SL4 bug fixes for gridftp transfers
|
|
2201
|
[ YAIM ] YAIM-CREAM-CE 1st update
|
16.09.2008 - 3.1 Update 31
This update contains the latest lcg-vomcerts.
lcg-vomscerts-5.1.0:
- added next cert for voms.cern.ch
- added cert for voms-pilot.cern.ch
- removed cert for voms-test.cern.ch
- removed old cert for vo.racf.bnl.gov
| Patch # |
Description |
|
2298
|
R3.1 lcg-vomscerts-5.1.0 adds next cert for voms.cern.ch
|
01.09.2008 - 3.1 Update 30
This update contains multiple bug fixes in various areas.
Please see below for the individual service updates and list of patches.
Besides others, the following middleware service updates are included:
Globus VDT Update 1.6.1-7
The Globus VDT packages have been updated and fixes the RPATH problems and GLOBUS proxy chain length limitations affecting LHCb and ALICE.
This update addresses the following 'moderate' security issue;
http://www.gridpp.ac.uk/gsvg/advisories/advisory-36901.txt
glite-TORQUE_client
This is the initial release of the Torque client on SLC4/x86_64.
Note that this package is only supported in combination with a installed glite-WN. Please check the generic installation guide (here)
of how to install glite-WN for 64Bit.
For the reconfiguration, please run run yaim.
For the service restart both ways work:
- /etc/init.d/pbs_mom restart
- reboot
dCache
Minor bug fixes and inclusion of the Chimera filesystem which can be configured through new yaim-dcache module.
AMGA C++/Python API
This release includes the AMGA c++ and python APIs to the glite-WN,VOBOX and UI.
gLite YAIM clients update
- VOBOX specific variables are now distributed under services/glite-vobox and defaults/glite-vobox.pre
- The AMGA client configuration function is now included in the UI, WN, TAR UI and TAR WN
- The config_vomsdir function configuring the .lsc files under vomsdir is now included un the UI, WN and VOBOX. There is a known problem with config_vomsdir on the UI_TAR and WN_TAR.
- Please check also the YAIM-Client Known Issues in https://twiki.cern.ch/twiki/bin/view/LCG/YaimGuide400
GFAL / lcg_util
Please check Savannah bugs liked to patch #2056 (also listed below) for all details.
| Patch # |
Description |
|
1703
|
R3.1/SLC4/x86_64: glite-TORQUE_client metapackage
|
|
1781
|
reducing the number of dependencies of edg-mkgridmap on x86_64
|
|
1877
|
dCache 1.8.0-15p5 Plus YAIM upgraded to modular behaviour i386
|
|
1892
|
Include AMGA c++ and Python Client API's into wn, ui and vobox x86
|
|
1893
|
Include AMGA c++ and Python Client API's into glite-WN x86_64
|
|
1894
|
dCache 1.8.0-15p5 Plus YAIM upgraded to modular behaviour amd64
|
|
1979
|
VDT-Globus 1.6.1-7 / x86_64
|
|
1981
|
VDT-Globus 1.6.1-7 / ia32
|
|
1982
|
[ YAIM ] glite-yaim-clients 4.0.4
|
|
2059
|
R3.1/SLC4/x86_64: GFAL/lcg_util bugfix release
|
|
2056
|
R3.1/SLC4/i386: GFAL/lcg_util bugfix release
|
18.08.2008 - 3.1 Update 29
This update contains multiple bug fixes in various areas.
Please see below for the individual service updates and list of patches.
Besides others, the following middleware service updates are included:
glite_DPM & glite_LFC
The updated version of DPM and LFC tool fixes the following bugs:
- return space to pool when removing a replica in a space that no longer exists
- disfavour filling filesystems to more than 98 percent of capacity during selection
- added ctrl-c handling and an option to limit total drain size in dpm-drain
- minor bounds checking changes in dpm, ns and Csec
- return a network time out error to client rather than internal error in some circumstances
- apply castor ns fix for bug #31342, for consistency between lcg-dm and castor
- several small fixes (see patch for more details)
Some of the updated rpms affected also other services, please check below.
| Patch # |
Description |
|
1987
|
R3.1/SLC4/i386: DPM & LFC 1.6.11
|
|
1988
|
R3.1/SLC4/x86_64: DPM & LFC 1.6.11
|
|
Please find former updates here.
|
|
| |
|