A new release of the CA certificates is available at
http://software.grid.iu.edu/pacman/cadist/.
This is version 1.13 and uses IGTF 1.34 as the basis.
Tarball Version: 1.13
RPM Version: 1.13-0
===== Version 1.13 =================
Released 18 Feb 2010
IGTF 1.34 - current hash format
Updated edca0fc0 CESNET-CA-Root to fix a broken signing_policy file
Note that this release fixes the problem in OSG Ticket 8136.
Thursday, February 18, 2010
OSG DocDB Access Problem
The OSG DocDB, which is hosted at FNAL is currently not available via certificate access. Administrators are currently investigating this issue.
Wednesday, February 17, 2010
FNAL Power Outage - Update
Investigation at FNAL continues as to the cause and possible fixes or remediation.
Power was lost at 3:49 AM
UPS was restored 6:42 AM
The "OSG Services" operated by FermiGrid at Fermilab have been automatically restored.
Fermilab is cautiously re-enabling services.
- Core/Critical services have been restarted,
- Limited business services have been restarted,
- Scientific services are not being restarted at the present time.
Power was lost at 3:49 AM
UPS was restored 6:42 AM
The "OSG Services" operated by FermiGrid at Fermilab have been automatically restored.
Fermilab is cautiously re-enabling services.
- Core/Critical services have been restarted,
- Limited business services have been restarted,
- Scientific services are not being restarted at the present time.
FNAL Power Outage
Beginning at 10:49 UTC Fermilab Computing experienced power problems
at the Feynman Computing Center. Diagnosis and recovery is ongoing and
services may need to be shutdown to perform additional repairs.
OSG Services hosted at FNAL include Gratia, ReSS, VOMS based at FNAL,
the OSG Document Database, and OSG mailing lists.
at the Feynman Computing Center. Diagnosis and recovery is ongoing and
services may need to be shutdown to perform additional repairs.
OSG Services hosted at FNAL include Gratia, ReSS, VOMS based at FNAL,
the OSG Document Database, and OSG mailing lists.
Tuesday, February 16, 2010
Upcoming Gratia Maintenance
Over the next two weeks, the FNAL-provided OSG Gratia services will be migrated to new hardware. The following will occur:
1) On Thursday, 2/18 data collection and DB updates will be suspended at 09:00 CST (15:00 UTC) to allow a copy of the live DB. Reports will still be available at this time, but obviously will not include data not received. This procedure will take 4-6 hours, during which time data will be backlogged by probes and sent when service resumes. Interested system administrators may note a build-up of files under $VDT_LOCATION/gratia/var: this will decrease once more when contact is re-established with the collector.
2) On Thursday, 2/25 at 09:00 CST (1500 UTC) the migration will occur. Since this will involve a migration of service IPs to the already set-up and operating new systems, the outage for each service is expected to be under 5 minutes barring unforeseen circumstances. Any probes attempting to contact during this time will backlog the data and re-send as before upon resumption of service.
The services affected by this change are:
- GRATIA-OSG-PROD (gratia-osg-prod.opensciencegrid.org:80/443)
- GRATIA-OSG-ITB (gratia-osg-itb.opensciencegrid.org:80/443)
- GRATIA-OSG-DAILY (gratia-osg-daily.opensciencegrid.org:80/443)
- GRATIA-OSG-TRANSFER (gratia-osg-transfer.opensciencegrid.org:80/443)
Each service mentioned above will gain its own new reporting URL by appending -reports to the address, viz:
- gratia-osg-prod-reports.opensciencegrid.org/
- gratia-osg-itb-reports.opensciencegrid.org/
- gratia-osg-daily-reports.opensciencegrid.org/
- gratia-osg-transfer-reports.opensciencegrid.org/
The standard URLs will continue to work due to service redirection but for efficiency reasons, please update your browser bookmarks to use the new URLS for the reporting GUI.
In addition, we propose to retire the unused "GRATIA-OSG-ITB-PERM" ("permanent ITB") reporting-only service at this time (2010/02/25 09:00 CST). There are no known users of this service. This was originally instituted to take replication of a subset ("permanent ITB") of the data received by the GRATIA-OSG-ITB service but to the best of our knowledge has never been used for same, and has anyway been dormant (available but not receiving data) for several months now without complaint. Since the service is unused, we expect the impact to be zero. People who wish the service to be resumed should notify us via GOC prior to 2010/02/25.
We do not expect any impact whatsoever at the, "Production" level: reporting to WLCG will take place as normal and we expect the out-of-date reporting on 2/18 and the momentary outages on 2/25 to be no more than a minor inconvenience to a very few people.
Please note especially: RSV services will *NOT* be affected by this migration.
1) On Thursday, 2/18 data collection and DB updates will be suspended at 09:00 CST (15:00 UTC) to allow a copy of the live DB. Reports will still be available at this time, but obviously will not include data not received. This procedure will take 4-6 hours, during which time data will be backlogged by probes and sent when service resumes. Interested system administrators may note a build-up of files under $VDT_LOCATION/gratia/var: this will decrease once more when contact is re-established with the collector.
2) On Thursday, 2/25 at 09:00 CST (1500 UTC) the migration will occur. Since this will involve a migration of service IPs to the already set-up and operating new systems, the outage for each service is expected to be under 5 minutes barring unforeseen circumstances. Any probes attempting to contact during this time will backlog the data and re-send as before upon resumption of service.
The services affected by this change are:
- GRATIA-OSG-PROD (gratia-osg-prod.opensciencegrid.org:80/443)
- GRATIA-OSG-ITB (gratia-osg-itb.opensciencegrid.org:80/443)
- GRATIA-OSG-DAILY (gratia-osg-daily.opensciencegrid.org:80/443)
- GRATIA-OSG-TRANSFER (gratia-osg-transfer.opensciencegrid.org:80/443)
Each service mentioned above will gain its own new reporting URL by appending -reports to the address, viz:
- gratia-osg-prod-reports.opensciencegrid.org/
- gratia-osg-itb-reports.opensciencegrid.org/
- gratia-osg-daily-reports.opensciencegrid.org/
- gratia-osg-transfer-reports.opensciencegrid.org/
The standard URLs will continue to work due to service redirection but for efficiency reasons, please update your browser bookmarks to use the new URLS for the reporting GUI.
In addition, we propose to retire the unused "GRATIA-OSG-ITB-PERM" ("permanent ITB") reporting-only service at this time (2010/02/25 09:00 CST). There are no known users of this service. This was originally instituted to take replication of a subset ("permanent ITB") of the data received by the GRATIA-OSG-ITB service but to the best of our knowledge has never been used for same, and has anyway been dormant (available but not receiving data) for several months now without complaint. Since the service is unused, we expect the impact to be zero. People who wish the service to be resumed should notify us via GOC prior to 2010/02/25.
We do not expect any impact whatsoever at the, "Production" level: reporting to WLCG will take place as normal and we expect the out-of-date reporting on 2/18 and the momentary outages on 2/25 to be no more than a minor inconvenience to a very few people.
Please note especially: RSV services will *NOT* be affected by this migration.
OSG Ticket Exchange 1.1 - Bug Patched
OSG Ticket Exchange Users,
The GOC has identified a bug in the current ticket exchange between OSG and GGUS. The full description from tickets opened on the OSG side may not be populated fully to the GGUS ticket system. We are releasing this bug patch immediately. This will not affect any ongoing exchange or any exchange started at GGUS.
The GOC has identified a bug in the current ticket exchange between OSG and GGUS. The full description from tickets opened on the OSG side may not be populated fully to the GGUS ticket system. We are releasing this bug patch immediately. This will not affect any ongoing exchange or any exchange started at GGUS.
OSG CA Distribution Release 1.12 - GOC Ticket # 8126
OSG CA Distribution 1.12 has been released, which includes IGTF 1.33.
Please note the following:
-------------------------
* There was no production release 1.11 for the CA Distribution. The previous production CA Distribution version was 1.10.
* This OSG release does NOT include the changes from the
IGTF 1.33 "new" area to handle openssl V1 hash names. These features
will be included in a future OSG release.
Changes from 1.32 to 1.33
-------------------------
(16 February 2010)
* Added accredited MICS TCS eScience Personal CA and hierarchy (EU)
* Updated AustrianGrid root cert with extended life time (AT)
* Updated PolishGrid CA with new contact and extended root CA life time (PL)
* Removed expired CNRS-Grid-FR CA (has been superseded by CNRS2-Grid-FR) (FR)
* Removed obsolete CNRS, CNRS-Projets CA (superceded by CNRS2 hierarchy) (FR)
* Corrected namespaces file for BEGrid2008 (BE)
* Added comment line to REUNA CA signing_policy file (CL)
* Added new classic CESNET hierarchy "CESNET-CA-Root" and "CESNET-CA-3" (CZ)
Please see ticket 8126 at:
https://ticket.grid.iu.edu/goc/viewer?id=8126
Please note the following:
-------------------------
* There was no production release 1.11 for the CA Distribution. The previous production CA Distribution version was 1.10.
* This OSG release does NOT include the changes from the
IGTF 1.33 "new" area to handle openssl V1 hash names. These features
will be included in a future OSG release.
Changes from 1.32 to 1.33
-------------------------
(16 February 2010)
* Added accredited MICS TCS eScience Personal CA and hierarchy (EU)
* Updated AustrianGrid root cert with extended life time (AT)
* Updated PolishGrid CA with new contact and extended root CA life time (PL)
* Removed expired CNRS-Grid-FR CA (has been superseded by CNRS2-Grid-FR) (FR)
* Removed obsolete CNRS, CNRS-Projets CA (superceded by CNRS2 hierarchy) (FR)
* Corrected namespaces file for BEGrid2008 (BE)
* Added comment line to REUNA CA signing_policy file (CL)
* Added new classic CESNET hierarchy "CESNET-CA-Root" and "CESNET-CA-3" (CZ)
Please see ticket 8126 at:
https://ticket.grid.iu.edu/goc/viewer?id=8126
Subscribe to:
Posts (Atom)
Posts
Copyright 2009 Indiana University - Developed for Open Science Grid