Tuesday, March 15, 2011

GOC Service Update - Tuesday, March 22 at 14:00 UTC

The GOC will upgrade the following services beginning at Tuesday, March 22nd, 2011 at 14:00 UTC. The GOC reserves four hours (14:00 - 18:00 UTC) in the unlikely event that unexpected problems are encountered. We encourage users to test affected services before the production release.

GOC Ticket 1.34 (https://ticket.grid.iu.edu)

ITB version is now available for testing at https://ticket-itb.grid.iu.edu

* Added a new REST interface for ticket search (used by MyOSG for now)
* Fixed the formatting of metadata.

MyOSG 1.33 (https://myosg.grid.iu.edu)

ITB version is now available for testing at https://myosg-itb.grid.iu.edu

* Added GOC Ticket for search target via GOC Ticket REST interface. Also added OIM contact's primary email for search target (only available for registered OIM users)

GOC Ticket Synchronizer 1.17 (GOC-TX)

* Added filter for RT accessor so that invalid XML character won't be introduced to GOC-TX system.

TWiki (http://twiki.grid.iu.edu)
ITB version is now available for testing at https://twiki-itb.grid.iu.edu; we encourage users to test this service before the production release.

* Increased SSL renegotiation buffer size in order to allow larger attachments.

All Services
We are making various backend changes that should make all services run more smoothly.

* Changes to Puppet server management software configuration: Puppet will no longer run as a daemon in the background but as a cron job on a similar schedule. This should free up memory for more important processes.

* Change to how GOC servers share public SSH host keys with each other: The Puppet server will generate a flat file, and Puppet clients will pull it, rather than using Puppet's 'storeconfig' database, which was losing track of keys somehow.

* New Puppet rules: Puppet will ensure that the GOC's existing nscd and sshd custom configurations are uniformly applied across all servers -- nscd restarts daily to keep it from locking up, and sshd only logs inactive users out after an extraordinarily long period of time. Note that these changes are already on most servers and have been for some time; this will simply ensure that they are on all.