OSG Operations and Integration are pleased to announce the release of OSG version 1.2.7.
This is a medium priority security update that corrects issues in several components. The fixes include updates to several components to properly handle null bytes in a DN handle and a fix for a DOS attack on squid.
This release also updates several software components, see the complete list below.
* wget
* osg-config
* osg-version
* Java 1.5
* Java 1.6
* OpenLDAP
* GFAL and lcg-utils (no version change, but it was rebuilt to match the security update for OpenLDAP)
The components that have been updated may also include bugfixes. Please see the VDT release notes for more details: http://vdt.cs.wisc.edu/releases/2.0.0/release-p14.html
Complete update instructions can be found at https://twiki.grid.iu.edu/bin/view/ReleaseDocumentation/OSG127UpdateInstructions
If you are updating from a version prior to 1.2.0 or installing the OSG stack for the first time see the full installation instructions at https://twiki.grid.iu.edu/bin/view/ReleaseDocumentation/
Monday, March 8, 2010
Friday, March 5, 2010
New VO Package Available - GOC Ticket # 8092
A new VO package is now available.
There are three changes. The DayaBay VO has been added, VOMS ports for NYSGRID and GRACE, and the FNAL VO GUMS configuration information has been updated.
A detailed list of changes is available at
https://twiki.grid.iu.edu/bin/view/Operations/PackageV31
The GOC suggests backing up your installation before running any
update commands.
To pull the new VO Package for an OSG 1.0.x or 1.2.0 Resource please
use:
# cd $VDT_LOCATION
# source setup.sh
# pacman -update vo-package
Please remember a UNIX account for 'dayabay' will need to be set up.
To pull the new VO Package for the OSG Client 1.0.x or 1.2.0 please use:
# cd $VDT_LOCATION
# source setup.sh
# pacman -update vo-client
Please see ticket 8092 at:
https://ticket.grid.iu.edu/goc/viewer?id=8092
There are three changes. The DayaBay VO has been added, VOMS ports for NYSGRID and GRACE, and the FNAL VO GUMS configuration information has been updated.
A detailed list of changes is available at
https://twiki.grid.iu.edu/bin/view/Operations/PackageV31
The GOC suggests backing up your installation before running any
update commands.
To pull the new VO Package for an OSG 1.0.x or 1.2.0 Resource please
use:
# cd $VDT_LOCATION
# source setup.sh
# pacman -update vo-package
Please remember a UNIX account for 'dayabay' will need to be set up.
To pull the new VO Package for the OSG Client 1.0.x or 1.2.0 please use:
# cd $VDT_LOCATION
# source setup.sh
# pacman -update vo-client
Please see ticket 8092 at:
https://ticket.grid.iu.edu/goc/viewer?id=8092
Thursday, February 18, 2010
New release 1.13 of CA Certificates
A new release of the CA certificates is available at
http://software.grid.iu.edu/pacman/cadist/.
This is version 1.13 and uses IGTF 1.34 as the basis.
Tarball Version: 1.13
RPM Version: 1.13-0
===== Version 1.13 =================
Released 18 Feb 2010
IGTF 1.34 - current hash format
Updated edca0fc0 CESNET-CA-Root to fix a broken signing_policy file
Note that this release fixes the problem in OSG Ticket 8136.
http://software.grid.iu.edu/pacman/cadist/.
This is version 1.13 and uses IGTF 1.34 as the basis.
Tarball Version: 1.13
RPM Version: 1.13-0
===== Version 1.13 =================
Released 18 Feb 2010
IGTF 1.34 - current hash format
Updated edca0fc0 CESNET-CA-Root to fix a broken signing_policy file
Note that this release fixes the problem in OSG Ticket 8136.
OSG DocDB Access Problem
The OSG DocDB, which is hosted at FNAL is currently not available via certificate access. Administrators are currently investigating this issue.
Wednesday, February 17, 2010
FNAL Power Outage - Update
Investigation at FNAL continues as to the cause and possible fixes or remediation.
Power was lost at 3:49 AM
UPS was restored 6:42 AM
The "OSG Services" operated by FermiGrid at Fermilab have been automatically restored.
Fermilab is cautiously re-enabling services.
- Core/Critical services have been restarted,
- Limited business services have been restarted,
- Scientific services are not being restarted at the present time.
Power was lost at 3:49 AM
UPS was restored 6:42 AM
The "OSG Services" operated by FermiGrid at Fermilab have been automatically restored.
Fermilab is cautiously re-enabling services.
- Core/Critical services have been restarted,
- Limited business services have been restarted,
- Scientific services are not being restarted at the present time.
FNAL Power Outage
Beginning at 10:49 UTC Fermilab Computing experienced power problems
at the Feynman Computing Center. Diagnosis and recovery is ongoing and
services may need to be shutdown to perform additional repairs.
OSG Services hosted at FNAL include Gratia, ReSS, VOMS based at FNAL,
the OSG Document Database, and OSG mailing lists.
at the Feynman Computing Center. Diagnosis and recovery is ongoing and
services may need to be shutdown to perform additional repairs.
OSG Services hosted at FNAL include Gratia, ReSS, VOMS based at FNAL,
the OSG Document Database, and OSG mailing lists.
Tuesday, February 16, 2010
Upcoming Gratia Maintenance
Over the next two weeks, the FNAL-provided OSG Gratia services will be migrated to new hardware. The following will occur:
1) On Thursday, 2/18 data collection and DB updates will be suspended at 09:00 CST (15:00 UTC) to allow a copy of the live DB. Reports will still be available at this time, but obviously will not include data not received. This procedure will take 4-6 hours, during which time data will be backlogged by probes and sent when service resumes. Interested system administrators may note a build-up of files under $VDT_LOCATION/gratia/var: this will decrease once more when contact is re-established with the collector.
2) On Thursday, 2/25 at 09:00 CST (1500 UTC) the migration will occur. Since this will involve a migration of service IPs to the already set-up and operating new systems, the outage for each service is expected to be under 5 minutes barring unforeseen circumstances. Any probes attempting to contact during this time will backlog the data and re-send as before upon resumption of service.
The services affected by this change are:
- GRATIA-OSG-PROD (gratia-osg-prod.opensciencegrid.org:80/443)
- GRATIA-OSG-ITB (gratia-osg-itb.opensciencegrid.org:80/443)
- GRATIA-OSG-DAILY (gratia-osg-daily.opensciencegrid.org:80/443)
- GRATIA-OSG-TRANSFER (gratia-osg-transfer.opensciencegrid.org:80/443)
Each service mentioned above will gain its own new reporting URL by appending -reports to the address, viz:
- gratia-osg-prod-reports.opensciencegrid.org/
- gratia-osg-itb-reports.opensciencegrid.org/
- gratia-osg-daily-reports.opensciencegrid.org/
- gratia-osg-transfer-reports.opensciencegrid.org/
The standard URLs will continue to work due to service redirection but for efficiency reasons, please update your browser bookmarks to use the new URLS for the reporting GUI.
In addition, we propose to retire the unused "GRATIA-OSG-ITB-PERM" ("permanent ITB") reporting-only service at this time (2010/02/25 09:00 CST). There are no known users of this service. This was originally instituted to take replication of a subset ("permanent ITB") of the data received by the GRATIA-OSG-ITB service but to the best of our knowledge has never been used for same, and has anyway been dormant (available but not receiving data) for several months now without complaint. Since the service is unused, we expect the impact to be zero. People who wish the service to be resumed should notify us via GOC prior to 2010/02/25.
We do not expect any impact whatsoever at the, "Production" level: reporting to WLCG will take place as normal and we expect the out-of-date reporting on 2/18 and the momentary outages on 2/25 to be no more than a minor inconvenience to a very few people.
Please note especially: RSV services will *NOT* be affected by this migration.
1) On Thursday, 2/18 data collection and DB updates will be suspended at 09:00 CST (15:00 UTC) to allow a copy of the live DB. Reports will still be available at this time, but obviously will not include data not received. This procedure will take 4-6 hours, during which time data will be backlogged by probes and sent when service resumes. Interested system administrators may note a build-up of files under $VDT_LOCATION/gratia/var: this will decrease once more when contact is re-established with the collector.
2) On Thursday, 2/25 at 09:00 CST (1500 UTC) the migration will occur. Since this will involve a migration of service IPs to the already set-up and operating new systems, the outage for each service is expected to be under 5 minutes barring unforeseen circumstances. Any probes attempting to contact during this time will backlog the data and re-send as before upon resumption of service.
The services affected by this change are:
- GRATIA-OSG-PROD (gratia-osg-prod.opensciencegrid.org:80/443)
- GRATIA-OSG-ITB (gratia-osg-itb.opensciencegrid.org:80/443)
- GRATIA-OSG-DAILY (gratia-osg-daily.opensciencegrid.org:80/443)
- GRATIA-OSG-TRANSFER (gratia-osg-transfer.opensciencegrid.org:80/443)
Each service mentioned above will gain its own new reporting URL by appending -reports to the address, viz:
- gratia-osg-prod-reports.opensciencegrid.org/
- gratia-osg-itb-reports.opensciencegrid.org/
- gratia-osg-daily-reports.opensciencegrid.org/
- gratia-osg-transfer-reports.opensciencegrid.org/
The standard URLs will continue to work due to service redirection but for efficiency reasons, please update your browser bookmarks to use the new URLS for the reporting GUI.
In addition, we propose to retire the unused "GRATIA-OSG-ITB-PERM" ("permanent ITB") reporting-only service at this time (2010/02/25 09:00 CST). There are no known users of this service. This was originally instituted to take replication of a subset ("permanent ITB") of the data received by the GRATIA-OSG-ITB service but to the best of our knowledge has never been used for same, and has anyway been dormant (available but not receiving data) for several months now without complaint. Since the service is unused, we expect the impact to be zero. People who wish the service to be resumed should notify us via GOC prior to 2010/02/25.
We do not expect any impact whatsoever at the, "Production" level: reporting to WLCG will take place as normal and we expect the out-of-date reporting on 2/18 and the momentary outages on 2/25 to be no more than a minor inconvenience to a very few people.
Please note especially: RSV services will *NOT* be affected by this migration.
Subscribe to:
Posts (Atom)
Posts
Copyright 2009 Indiana University - Developed for Open Science Grid