OSG Operations and Integration are pleased to announce the release of OSG version 1.2.19
******************************
OSG 1.2.19 Update Notification
******************************
Affected Components
The following components are affected:
* All RSV installations
* CE installations
* GUMS installations
Summary
This release contains the following updates:
* A new version of RSV with fixes for a race condition that may cause a site to go into the unknown status on MyOSG in rare instances. There is also a fix that allows probes to run correctly if RSV is started in a directory where the RSV user doesn't have read permissions
* Security and bug fixes to Tomcat, Java, MySQL
* Updates to PHP and Apache
* Configure-osg update which allows BDII or cemon configuration to be ignored as well a minor bugfix
This release fixes all the RSV bugs that were present in the previous release and should be appropriate for sites that report to the WLCG.
Update Instructions
Update instructions can be found on the OSG Twiki under the OSG 1.2 update instructions ( https://twiki.grid.iu.edu/bin/view/ReleaseDocumentation/OSG12UpdateInstructions ).
Additional Information
The release notes for the VDT 2.0.0p26 release underlying this release can be found here ( http://vdt.cs.wisc.edu/releases/2.0.0/release-p26.html ).
Tuesday, March 29, 2011
New VO Package
A new VO package is now available. This package adds the CSIU VO and updates the gums.template for Engage VO and CMS VO.
A detailed list of changes is available at:
https://twiki.grid.iu.edu/bin/view/Operations/PackageV35
The GOC suggests backing up your installation before running any
update commands.
To pull the new VO Package for an OSG 1.0.x or 1.2.0 Resource please
use:
# cd $VDT_LOCATION
# source setup.sh
# pacman -update vo-package
Please remember a UNIX account for 'csiu' will need to be set up and pool accounts for engage-ucsdgrid if you plan on supporting these VOs.
To pull the new VO Package for the OSG Client 1.0.x or 1.2.0 please use:
# cd $VDT_LOCATION
# source setup.sh
# pacman -update vo-client
A detailed list of changes is available at:
https://twiki.grid.iu.edu/bin/view/Operations/PackageV35
The GOC suggests backing up your installation before running any
update commands.
To pull the new VO Package for an OSG 1.0.x or 1.2.0 Resource please
use:
# cd $VDT_LOCATION
# source setup.sh
# pacman -update vo-package
Please remember a UNIX account for 'csiu' will need to be set up and pool accounts for engage-ucsdgrid if you plan on supporting these VOs.
To pull the new VO Package for the OSG Client 1.0.x or 1.2.0 please use:
# cd $VDT_LOCATION
# source setup.sh
# pacman -update vo-client
Tuesday, March 15, 2011
GOC Service Update - Tuesday, March 22 at 14:00 UTC
The GOC will upgrade the following services beginning at Tuesday, March 22nd, 2011 at 14:00 UTC. The GOC reserves four hours (14:00 - 18:00 UTC) in the unlikely event that unexpected problems are encountered. We encourage users to test affected services before the production release.
GOC Ticket 1.34 (https://ticket.grid.iu.edu)
ITB version is now available for testing at https://ticket-itb.grid.iu.edu
* Added a new REST interface for ticket search (used by MyOSG for now)
* Fixed the formatting of metadata.
MyOSG 1.33 (https://myosg.grid.iu.edu)
ITB version is now available for testing at https://myosg-itb.grid.iu.edu
* Added GOC Ticket for search target via GOC Ticket REST interface. Also added OIM contact's primary email for search target (only available for registered OIM users)
GOC Ticket Synchronizer 1.17 (GOC-TX)
* Added filter for RT accessor so that invalid XML character won't be introduced to GOC-TX system.
TWiki (http://twiki.grid.iu.edu)
ITB version is now available for testing at https://twiki-itb.grid.iu.edu; we encourage users to test this service before the production release.
* Increased SSL renegotiation buffer size in order to allow larger attachments.
All Services
We are making various backend changes that should make all services run more smoothly.
* Changes to Puppet server management software configuration: Puppet will no longer run as a daemon in the background but as a cron job on a similar schedule. This should free up memory for more important processes.
* Change to how GOC servers share public SSH host keys with each other: The Puppet server will generate a flat file, and Puppet clients will pull it, rather than using Puppet's 'storeconfig' database, which was losing track of keys somehow.
* New Puppet rules: Puppet will ensure that the GOC's existing nscd and sshd custom configurations are uniformly applied across all servers -- nscd restarts daily to keep it from locking up, and sshd only logs inactive users out after an extraordinarily long period of time. Note that these changes are already on most servers and have been for some time; this will simply ensure that they are on all.
GOC Ticket 1.34 (https://ticket.grid.iu.edu)
ITB version is now available for testing at https://ticket-itb.grid.iu.edu
* Added a new REST interface for ticket search (used by MyOSG for now)
* Fixed the formatting of metadata.
MyOSG 1.33 (https://myosg.grid.iu.edu)
ITB version is now available for testing at https://myosg-itb.grid.iu.edu
* Added GOC Ticket for search target via GOC Ticket REST interface. Also added OIM contact's primary email for search target (only available for registered OIM users)
GOC Ticket Synchronizer 1.17 (GOC-TX)
* Added filter for RT accessor so that invalid XML character won't be introduced to GOC-TX system.
TWiki (http://twiki.grid.iu.edu)
ITB version is now available for testing at https://twiki-itb.grid.iu.edu; we encourage users to test this service before the production release.
* Increased SSL renegotiation buffer size in order to allow larger attachments.
All Services
We are making various backend changes that should make all services run more smoothly.
* Changes to Puppet server management software configuration: Puppet will no longer run as a daemon in the background but as a cron job on a similar schedule. This should free up memory for more important processes.
* Change to how GOC servers share public SSH host keys with each other: The Puppet server will generate a flat file, and Puppet clients will pull it, rather than using Puppet's 'storeconfig' database, which was losing track of keys somehow.
* New Puppet rules: Puppet will ensure that the GOC's existing nscd and sshd custom configurations are uniformly applied across all servers -- nscd restarts daily to keep it from locking up, and sshd only logs inactive users out after an extraordinarily long period of time. Note that these changes are already on most servers and have been for some time; this will simply ensure that they are on all.
Friday, March 11, 2011
RSV Warnings for Japan Based CRLs
In light of the tragic events in Japan, the staff at the GOC hopes for the best for all of those affected by the earthquakes and tsunamis.
Specific to OSG Operations and Security we are, and will continue to see, RSV Warnings for the CRL Expiry Probe. This probe is non-critical and will not affect the resource status in OSG or WLCG. But, administrators should be aware that this warning may last until network connectivity is restored at the institutions serving Japanese CRLs. These CRLs include AIST and KEK.
We just learned that NAREGI CA has recovered connectivity. Therefore, this advisory only affects KEK CA and AIST CA.
We have around 80 users with certificates from KEK CA. We found no users
in OSG with a certificate issued by AIST CA. KEK CA CRL is scheduled to
expire on April 9, 2011 and AIST CRL is scheduled to expire on March 26,
2011. Both CA certificates have lifetimes through 2015. If connectivity
is not recovered by CRL expiration dates, our users with KEK and AIST
certificates will not be able to access grid resources due to expired
CRL files. We will give you more information once we understand how long
the recovery will take, and we will seek ways to restore access to
affected users.
Thank you,
OSG Operations
Specific to OSG Operations and Security we are, and will continue to see, RSV Warnings for the CRL Expiry Probe. This probe is non-critical and will not affect the resource status in OSG or WLCG. But, administrators should be aware that this warning may last until network connectivity is restored at the institutions serving Japanese CRLs. These CRLs include AIST and KEK.
We just learned that NAREGI CA has recovered connectivity. Therefore, this advisory only affects KEK CA and AIST CA.
We have around 80 users with certificates from KEK CA. We found no users
in OSG with a certificate issued by AIST CA. KEK CA CRL is scheduled to
expire on April 9, 2011 and AIST CRL is scheduled to expire on March 26,
2011. Both CA certificates have lifetimes through 2015. If connectivity
is not recovered by CRL expiration dates, our users with KEK and AIST
certificates will not be able to access grid resources due to expired
CRL files. We will give you more information once we understand how long
the recovery will take, and we will seek ways to restore access to
affected users.
Thank you,
OSG Operations
Friday, March 4, 2011
OSG DocDB Outage - Thursday, March 10
OSG DocDB may experience a brief outage on Thursday, March 10 between 07:00 and 08:00 CDT while the server reboots. The reboot and accompanying outage are related to work in another database and will not otherwise affect OSG DocDB.
Tuesday, March 1, 2011
GOC Service Update - Tuesday, March 8th at 14:00 UTC
The GOC will upgrade the following services beginning at Tuesday, March 8th, 2010 at 14:00 UTC. The GOC reserves eight hours (14:00 - 22:00 UTC) in the unlikely event that unexpected problems are encountered. We encourage users to test affected services before the production release.
MyOSG 1.32 (https://myosg.grid.iu.edu)
ITB version is now available for testing at https://myosg-itb.grid.iu.edu
Added OIM Search box that allows user to search various OIM entities which returns links to various OSG entities related to each entities. If no result is found, it provide link to OSG custom search provided by Google.
Various cosmetic / efficiency updates.
MyOSG 1.32 (https://myosg.grid.iu.edu)
ITB version is now available for testing at https://myosg-itb.grid.iu.edu
Added OIM Search box that allows user to search various OIM entities which returns links to various OSG entities related to each entities. If no result is found, it provide link to OSG custom search provided by Google.
Various cosmetic / efficiency updates.
Subscribe to:
Posts (Atom)
Posts
Copyright 2009 Indiana University - Developed for Open Science Grid