Announcing OSG Software version 3.2.5 - GOC Ticket # 19799

We are pleased to announce OSG Software version 3.2.5. This is a high-
priority update to the OSG 3.2 release series.

In OSG 3.2, we dropped CE-Monitor in favor of osg-info-services, which
provides the same core functionality in a simpler package. But until
now, a default installation of osg-configure, osg-info-services, and gip
were not well integrated, and in some environments osg-configure even
failed to run. This release corrects the known issues with and improves
integration of the information services components.

Use this new release if (a) you tried OSG 3.2, but reverted to OSG 3.1
because of problems with these components, or (b) you are avoiding OSG
3.2 because you have heard that these components were not ready.

Release notes and pointers to more documentation can be found at:

https://www.opensciencegrid.org/bin/view/Documentation/Release3/Release325

Need help? Let us know:

https://www.opensciencegrid.org/bin/view/Documentation/Release3/HelpProcedure

We welcome feedback on this release!

Please see ticket 19799 at:
https://ticket.grid.iu.edu/19799

GOC Services Update - Tuesday, February 25 at 14:00 UTC

The GOC will upgrade the following services beginning Tuesday, February 25, 2014 at 14:00 UTC. The GOC reserves 8 hours in the unlikely event that unexpected problems are encountered. We encourage users to test affected services before the production release.


OSG Planet (https://blogs.opensciencegrid.org)
* Adding OSG Homepage newsletters to the aggregator.


OSG Display
* Updating to osg-display-data-1.0.9-1 so that it calculates 12 month numbers similar to gratiaweb (SOFTWARE-1400)


All Services
* There will be OS updates; reboots will be required. Downtime should be minimal, and the usual high-availability mechanisms will be used to reduce service downtime even further and eliminate it in most cases. However, services may experience degraded performance, and the services without HA mechanisms (OIM and Twiki) will still experience brief downtimes.

Announcing OSG Software versions 3.1.30 and 3.2.4

We are pleased to announce OSG Software versions 3.1.30 and 3.2.4.

The 3.2.4 version contains the following change:

* Update to Globus Toolkit 5.2.5 (many minor bug fixes and performance improvements)

In addition, both 3.1.30 and 3.2.4 versions contain the following changes:

* Update to xrootd version 3.3.5 (pick up bug fixes from 3.3.4 and 3.3.5)
* Update to VO Package v51 (DigiCert: Fermilab, SBGrid; GOC VOMS server reference)
* Update to RSV version 3.7.14 (provide support for contributed zabbix consumer)

Release notes and pointers to more documentation can be found at:

https://www.opensciencegrid.org/bin/view/Documentation/Release3/Release3130
https://www.opensciencegrid.org/bin/view/Documentation/Release3/Release324

Need help? Let us know:

https://www.opensciencegrid.org/bin/view/Documentation/Release3/HelpProcedure

We welcome feedback on this release!

CORRECTION: HTCondor delegates proxies as 512-bit proxies by default

WLCG glexec tests have uncovered an issue with the effective default size of HTCondor delegated proxies. Sites should be aware that if they allow HTCondor to delegate proxies, the delegated proxies will be 512-bit proxies, even if the original proxy was 1024-bits or greater.

The issue is an incompatibility with 512-bit proxies and OpenSSL versions >= 1.0.1. Glexec calls and SSL communication will fail.

As stated in the OSG release documentation, sites should disable delegation entirely by inserting the following line into their HTCondor configuration:

DELEGATE_JOB_GSI_CREDENTIALS = False

More information can be found at https://twiki.grid.iu.edu/bin/view/Documentation/Release3/InstallComputeElement#5_1_If_you_are_using_Condor

HTCondor delegates proxies as 512-bit proxies by default

The following announcement from Tony Tiradani applies only to HTCondor sites:

WLCG glexec tests have uncovered an issue with the effective default size of HTCondor delegated proxies.  Sites should be aware that if they allow HTCondor to delegate proxies, the delegated proxies will be 512-bit proxies, even if the original proxy was 1024-bits or greater.

The issue is an incompatibility with 512-bit proxies and OpenSSL versions >= 1.0.1.  Glexec calls and SSL communication will fail.

Sites may disable delegation entirely by inserting the following line into their HTCondor configuration:

DELEGATE_JOB_GSI_CREDENTIALS = False

Alternatively, sites may specify to HTCondor the bit size to use for delegating proxies by inserting the following line into their HTCondor configuration:

GSI_DELEGATION_KEYBITS = 1024

The actual value may be increased.  However, from the HTCondor manual, "Setting the value greater than 4096 is likely to cause long compute times."

Additionally, the default for GSI_DELEGATION_KEYBITS will be changed to 1024-bits in the upcoming HTCondor 8.0.6 release.

REMINDER: OSG PKI Update to SHA-2 - Tomorrow, February 11th, 2014

As a reminder, tomorrow, February 11th all newly issued certificates will be signed with the new SHA-2 hash algorithm. To be fully compliant in all packages OSG resources will need to be updated to OSG 3.1.22 or greater. Release 3.1.22 has been available since August, 2013. A full table of packages and the OSG version they are compliant at is available at https://twiki.opensciencegrid.org/bin/view/Documentation/Release3/SHA2Compliance. It is very important that you review this list and determine if commonly used software at your site needs to be updated.

The OSG Production and Software Teams are available to answer your questions regarding the SHA-2 update. Please open a ticket at http://ticket.grid.iu.edu/goc/submit if you have any questions or need assistance.

GOC Services Update - Tuesday, February 11th at 14:00 UTC

The GOC will upgrade the following services beginning Tuesday, February 11th, 2014 at 14:00 UTC. The GOC reserves 8 hours in the unlikely event that unexpected problems are encountered. We encourage users to test affected services before the production release.

GratiaWeb v1.2-24
* Rebuilding with RHEL6 image (new version may require python2.6)
* Moved all external ‘URL’s into a single file location for easier update and tracking.
* Reworked WLCG Reporting (Overview) to contain all summary pledge and capacity information by Federation Name and Resource Group
* Reworked WLCG Reporting (Detailed) to contain detailed resources supplied information by Federation Name and Resource Group

GOC Ticket 1.72
* Removing /goc prefix inside GOC Ticket URL (/goc will be redirected to /)
* Added ticket list statistics info back to ticket list view (TICKET-92)
* Replaced obsolete version of jquery autocomplete plugin with jquery-ui native autocomplete (TICKET-94)
* Fixed the checkbox display issue on notification form (rss / sign checkboxes)
* Removed group ticket page (deprecated). the group.xml will remain for ticket viewer page
* (already released) fixed issue where attachment handler won't insert new attachment on ticket that has never had attachment

OIM
* Switching configuration to start issuing user/host certificate in SHA-2

VOMS
* Doing a full-system backup of voms.grid.iu.edu, during which the VM must be powered down.