Announcing OSG Software versions 3.2.31 and 3.3.5

We are pleased to announce OSG Software versions 3.2.31 and 3.3.5.

This special release contains several important updates and fixes;
considering updating affected packages very soon.

Both OSG 3.2.31 and 3.3.5 contain:
* Fix a leak in LCMAPS that caused HTCondor CE to use excessive memory
* Fixed a crash when osg-configure attempted to contact ReSS servers
* Small improvements in HTCondor CE
* RSV: Corrected log rotation configuration

OSG 3.3.5 also contains:
* HTCondor 8.4.2

OSG 3.2.31 also contains:
* HTCondor 8.2.10

Release notes and pointers to more documentation can be found at:

https://www.opensciencegrid.org/bin/view/Documentation/Release3/Release3231
https://www.opensciencegrid.org/bin/view/Documentation/Release3/Release335

Need help? Let us know:

https://www.opensciencegrid.org/bin/view/Documentation/Release3/HelpProcedure

We welcome feedback on this release!

Announcing OSG Software versions 3.2.29 and 3.3.3

We are pleased to announce OSG Software versions 3.2.29 and 3.3.3.

The only updates in this special release are the CA certificates
based on IGTF 1.69 including the CILogon OSG CA.



WHAT IS CHANGING

A new IGTF Certificate Bundle (v1.69) has just been released.
This release has a very important change and we would like our
sites to install it as soon as they can.



WHO IS IMPACTED BY THIS CHANGE:

All OSG sites and users need to install the new CA bundle.
Especially US-Atlas and US-CMS sites should install the bundle
as soon as possible since their VOs will go under the transition
in November/December timeframe.



WHY THIS CHANGE IS HAPPENING:

The OSG CA is changing its backend service support from Digicert
to CILogon HSM. As a result, a new OSG CA is created and just
recently been accredited by IGTF. The official name of the new
OSG CA in the IGTF bundle is CILogon OSG CA. Starting in November
we will transition our VOs to start using the new OSG CA (CMS and
Atlas being first ones). If a site has not installed the CA bundle
by then, they will have authentication failures.



WHAT YOU SHOULD DO:

Install the new CA bundle as soon as possible. The latest CA bundle
will NOT be distributed in OSG Software v 3.1 because OSG no longer
supports it.

For Linux servers (including worker nodes), ensure that the
certificate bundle RPM is at version osg-ca-certs-1.50-1 or
igtf-ca-certs-1.69-1 or greater.

Instructions for installing server CA certificate bundles are at
https://twiki.grid.iu.edu/bin/view/Documentation/Release3/InstallCertAuth

We also highly recommend that you use the CA Cert automatic updater
https://twiki.grid.iu.edu/bin/view/Documentation/Release3/OsgCaCertsUpdater
but note that you need to be using a current OSG software distribution
for that to work, that is, OSG 3.2 or 3.3.



OTHER INFORMATION:

If you have the CA certificate bundle installed on a server with OSG 3.1,
you need to upgrade to OSG 3.2 or greater. Follow these instructions:
https://twiki.grid.iu.edu/bin/view/Documentation/Release3/OSGReleaseSeries#Updating_from_OSG_3_1_or_3_2_to

Please email OSG Security Team with questions or comments

Both OSG 3.2.28 and 3.3.2 contain:
   * CA certificates based on IGTF 1.69 including the OSG CILogon CA

Release notes and pointers to more documentation can be found at:

https://www.opensciencegrid.org/bin/view/Documentation/Release3/Release3229
https://www.opensciencegrid.org/bin/view/Documentation/Release3/Release333

Need help? Let us know:

https://www.opensciencegrid.org/bin/view/Documentation/Release3/HelpProcedure

We welcome feedback on this release!

GOC Service Update - Tuesday, November 10, 2015 at 14:00 UTC

The GOC will upgrade the following services beginning Tuesday, November 10, 2015 at 14:00 UTC. The GOC reserves 8 hours in the unlikely event that unexpected problems are encountered.

*perfSONAR
Some unused packages will be removed to stop MadDash from forwarding visitors to the toolkit, and the OMD/MadDash servers will be rebooted. HA mechanisms will be used to minimize end user impact.

* Ticket Blog Feed
The ticket RSS feed will change to use Oauth authentication for blog posts.

* Ticket Exchange Certificate
The Fermi certificate on tx2 will be updated to be ready for tx2 to serve as backup.