Announcing OSG Software versions 3.2.31 and 3.3.5

We are pleased to announce OSG Software versions 3.2.31 and 3.3.5.

This special release contains several important updates and fixes;
considering updating affected packages very soon.

Both OSG 3.2.31 and 3.3.5 contain:
* Fix a leak in LCMAPS that caused HTCondor CE to use excessive memory
* Fixed a crash when osg-configure attempted to contact ReSS servers
* Small improvements in HTCondor CE
* RSV: Corrected log rotation configuration

OSG 3.3.5 also contains:
* HTCondor 8.4.2

OSG 3.2.31 also contains:
* HTCondor 8.2.10

Release notes and pointers to more documentation can be found at:

https://www.opensciencegrid.org/bin/view/Documentation/Release3/Release3231
https://www.opensciencegrid.org/bin/view/Documentation/Release3/Release335

Need help? Let us know:

https://www.opensciencegrid.org/bin/view/Documentation/Release3/HelpProcedure

We welcome feedback on this release!

Announcing OSG Software versions 3.2.29 and 3.3.3

We are pleased to announce OSG Software versions 3.2.29 and 3.3.3.

The only updates in this special release are the CA certificates
based on IGTF 1.69 including the CILogon OSG CA.



WHAT IS CHANGING

A new IGTF Certificate Bundle (v1.69) has just been released.
This release has a very important change and we would like our
sites to install it as soon as they can.



WHO IS IMPACTED BY THIS CHANGE:

All OSG sites and users need to install the new CA bundle.
Especially US-Atlas and US-CMS sites should install the bundle
as soon as possible since their VOs will go under the transition
in November/December timeframe.



WHY THIS CHANGE IS HAPPENING:

The OSG CA is changing its backend service support from Digicert
to CILogon HSM. As a result, a new OSG CA is created and just
recently been accredited by IGTF. The official name of the new
OSG CA in the IGTF bundle is CILogon OSG CA. Starting in November
we will transition our VOs to start using the new OSG CA (CMS and
Atlas being first ones). If a site has not installed the CA bundle
by then, they will have authentication failures.



WHAT YOU SHOULD DO:

Install the new CA bundle as soon as possible. The latest CA bundle
will NOT be distributed in OSG Software v 3.1 because OSG no longer
supports it.

For Linux servers (including worker nodes), ensure that the
certificate bundle RPM is at version osg-ca-certs-1.50-1 or
igtf-ca-certs-1.69-1 or greater.

Instructions for installing server CA certificate bundles are at
https://twiki.grid.iu.edu/bin/view/Documentation/Release3/InstallCertAuth

We also highly recommend that you use the CA Cert automatic updater
https://twiki.grid.iu.edu/bin/view/Documentation/Release3/OsgCaCertsUpdater
but note that you need to be using a current OSG software distribution
for that to work, that is, OSG 3.2 or 3.3.



OTHER INFORMATION:

If you have the CA certificate bundle installed on a server with OSG 3.1,
you need to upgrade to OSG 3.2 or greater. Follow these instructions:
https://twiki.grid.iu.edu/bin/view/Documentation/Release3/OSGReleaseSeries#Updating_from_OSG_3_1_or_3_2_to

Please email OSG Security Team with questions or comments

Both OSG 3.2.28 and 3.3.2 contain:
   * CA certificates based on IGTF 1.69 including the OSG CILogon CA

Release notes and pointers to more documentation can be found at:

https://www.opensciencegrid.org/bin/view/Documentation/Release3/Release3229
https://www.opensciencegrid.org/bin/view/Documentation/Release3/Release333

Need help? Let us know:

https://www.opensciencegrid.org/bin/view/Documentation/Release3/HelpProcedure

We welcome feedback on this release!

GOC Service Update - Tuesday, November 10, 2015 at 14:00 UTC

The GOC will upgrade the following services beginning Tuesday, November 10, 2015 at 14:00 UTC. The GOC reserves 8 hours in the unlikely event that unexpected problems are encountered.

*perfSONAR
Some unused packages will be removed to stop MadDash from forwarding visitors to the toolkit, and the OMD/MadDash servers will be rebooted. HA mechanisms will be used to minimize end user impact.

* Ticket Blog Feed
The ticket RSS feed will change to use Oauth authentication for blog posts.

* Ticket Exchange Certificate
The Fermi certificate on tx2 will be updated to be ready for tx2 to serve as backup.

GOC Service Update - Tuesday, October 27, 2015 at 13:00 UTC

GOC Service Update - Tuesday, October 27, 2015 at 13:00 UTC

The GOC will upgrade the following services beginning Tuesday, October 27, 2015 at 13:00 UTC. The GOC reserves 8 hours in the unlikely event that unexpected problems are encountered.

OIM
* Add VO specific messages to certificate renewal email notices (JIRA OSGPKI-399)

All services
* Operating system updates; reboots will be required. The usual HA mechanisms will be used, but some services will experience brief outages. Exceptions added to update script in case of glidein factories to prevent unwanted updates.

* Puppet will clean up some files left behind by recent temporary updates, such as last cycle’s update of the OSG release to 3.2 on machines that were then still running 3.1, and a recent security check.

Fix available for OSG BeStMan installs

OSG software versions 3.2.28 and 3.3.2, released this Tuesday, contained the wrong version of jGlobus.  The plan was to release jglobus-2.1.0-5, but instead jglobus-2.1.0-3 was released (note the 3 instead of 5 in the final digit).

Unfortunately, jglobus-2.1.0-3 has a critical bug that causes the BeStMan 2 service to fail upon start-up.  This failure has been reported at OSG sites that have upgraded since Tuesday's release.

As of late Wednesday night (US Central timezone), jglobus-2.1.0-5 is in the OSG production repositories for the 3.2.28 and 3.3.2 releases - mirrors may still be updating.  If you have any OSG hosts with BeStMan or GUMS (and therefore have jGlobus), please see if you have jglobus-2.1.0-3 installed; if so, update it to jglobus-2.1.0-5 as soon as possible, then restart BeStMan and GUMS services.  OSG tests and updates at some OSG sites indicate that jglobus-2.1.0-5 fixes the observed BeStMan failures.

We apologize for any problems that the release error has caused.  The OSG Software and Release teams are reviewing their development and release procedures to reduce the chances of this kind of mistake.

Announcing OSG Software versions 3.2.28 and 3.3.2

We are pleased to announce OSG Software versions 3.2.28 and 3.3.2.

OSG 3.2.28 and 3.3.2 contain:
* GlideinWMS 3.2.11.2
* XRootD 4.2.3
* HTCondor CE 1.16
* GIP support for multiple SLURM queues
* lcmaps-plugins-mount-under-scratch package
* CA certificates based on IGTF 1.68

In addition, OSG 3.3.2 contains:
* HTCondor 8.4.0
* StashCache improvements

Reminder for OSG 3.3.2:
* Enterprise Linux 7 support is not yet complete

Release notes and pointers to more documentation can be found at:

https://www.opensciencegrid.org/bin/view/Documentation/Release3/Release3228
https://www.opensciencegrid.org/bin/view/Documentation/Release3/Release332

Need help? Let us know:

https://www.opensciencegrid.org/bin/view/Documentation/Release3/HelpProcedure

GOC Service Update - Tuesday, September 22, 2015 at 13:00 UTC

The GOC will upgrade the following services beginning Tuesday, August 25, 2015 at 13:00 UTC. The GOC reserves 8 hours in the unlikely event that unexpected problems are encountered.

GLIDEIN
Enable OSG yum repository and add exclude list for HTCondor and GlideinWMS rpms to prevent yum priority issues with EPEL yum repository

Ticket
nginx config file on ticket2 needs to be changed to point to 8080

All Services
Operating system updates; reboots will be required. The usual HA mechanisms will be used, but some services will experience brief outages.
Exceptions added to update script in case of glidein factories to prevent unwanted updates.