Thursday, August 29, 2013

OSG Software SHA-2 Compliance Update

OSG VO and Site Administrators,

As of October 1st, 2013, Certificate Authorities (CAs) that are part of the International Grid Trust Federation (IGTF) will begin issuing certificates signed with the new SHA-2 hash algorithms. By this date you will need to update some components of the OSG middleware package to be SHA-2 compliant. At this point all software has been updated in the OSG software stack. To be fully compliant in all packages you will need to be updated to OSG 3.1.22 or greater. A full table of packages and the OSG version they are compliant at is available at https://www.opensciencegrid.org/bin/view/Documentation/Release3/SHA2Compliance. It is very important that you review this list and determine if commonly used software at your site needs to be updated.

The OSG Release Team is looking for early SHA2 adopters to help with the transition. If you have interest in being ahead of the SHA-2 curve and providing feedback to help during this transition please contact Tim Theisen at tim@cs.wisc.edu.

The OSG Production and Software Teams are available to answer your questions and support you during upgrade. Please open a ticket at http://ticket.grid.iu.edu/goc/submit if you have any questions or need assistance.

Tuesday, August 20, 2013

GOC Services Update - Tuesday, August 27th at 13:00 UTC

The GOC will upgrade the following services beginning Tuesday, August 27th, 2013 at 13:00 UTC. The GOC reserves 8 hours in the unlikely event that unexpected problems are encountered. We encourage users to test affected services before the production release.


MyOSG 2.15
* Update perfsonar mesh config parameters to match that of WLCG mesh config.


GratiaWeb v1.2-12
* (v1.2-9) Modification made to resolve GOC ticket 15719 titled "Unable to retrieve transfer data for USCMS-FNAL-WC1-SE
* (v1.2-10) Changes were made to resolve GratiaWeb-35 (^Batch$)
* (v1.2-11) Final changes made to resolve jira ticket Request-56, titled 'Need Gratia query that shows usage by ProjectName across OSG sites'. The changes required to replace '@' for ',' in the final data result set.
* (v1.2-12) These changes resolve GOC ticket 15713, titled "BNL disappears from data transfer gratia report'.


All Services
* There will be OS updates; reboots will be required. Downtime should be minimal, and the usual high-availability mechanisms will be used to reduce service downtime even further and eliminate it in most cases. However, services may experience degraded performance, and the services without HA mechanisms (OIM and Twiki) will still experience brief downtimes.

Initial production release of osg-control

The OSG Software team will be cutting an initial production release of
osg-control this Friday. The initial osg-control announcement is included
below if you missed it.

Please send any feedback you may have this week to
or and we
will attempt to incorporate it into the release.

---

The OSG Software team would like to announce a beta release of
osg-control, a new software tool for managing OSG services. Many thanks
to Tony Tiradani for writing and contributing this software to OSG!

In OSG 1.2, most OSG services could be managed with a tool called
vdt-control, providing an easy way to view services and enable/disable
them. To provide some of this functionality to OSG 3.x, osg-control was
written as a wrapper around osg-configure and the services it manages. The
new tool allows querying the status, starting/stopping, and
enabling/disabling OSG services individually or all at once.

We have released a beta version of osg-control in the osg-testing
repository and are inviting community testing and feedback. If you
currently use osg-configure for OSG services, it should be an easy
install:

yum install --enablerepo=osg-testing osg-control

For more background and discussion on this topic, see:

https://jira.opensciencegrid.org/browse/SOFTWARE-607
https://jira.opensciencegrid.org/browse/SOFTWARE-1156

We welcome any feedback at or
.

Wednesday, August 14, 2013

osg-control announcement

The OSG Software team would like to announce a beta release of osg-control, a new software tool for managing OSG services. Many thanks to Tony Tiradani for writing and contributing this software to OSG!

In OSG 1.2, most OSG services could be managed with a tool called vdt-control, providing an easy way to view services and enable/disable them. To provide some of this functionality to OSG 3.x, osg-control was written as a wrapper around osg-configure and the services it manages. The new tool allows querying the status, starting/stopping, and enabling/disabling OSG services individually or all at once.

We have released a beta version of osg-control in the osg-testing repository and are inviting community testing and feedback. If you currently use osg-configure for OSG services, it should be an easy install:

yum install --enablerepo=osg-testing osg-control


For more background and discussion on this topic, see:

https://jira.opensciencegrid.org/browse/SOFTWARE-607
https://jira.opensciencegrid.org/browse/SOFTWARE-1156


We welcome any feedback at or .

New VO Package - New VOs ENRM and Darkside

A new VO package is now available. This package includes newly enabled VOs ENMR and Darkside. The NWICG VO has also been removed from the package. It also includes updates to the NYSGrid and Belle VOs.

A detailed list of changes is available at:
https://twiki.grid.iu.edu/bin/view/Operations/PackageV46

This release is part of the OSG 3.1.22 Software Release, which was released yesterday 8/13/2013. Instructions are available at:
https://twiki.grid.iu.edu/bin/view/Documentation/Release3/ReleaseNotes

A change log is available at:
https://twiki.opensciencegrid.org/bin/view/Operations/PackageV46

With the recent deprecation of Pacman, we will no longer release a Pacman version of the update files. Though for legacy reasons the raw configuration files can still be found at:
http://software.grid.iu.edu/pacman/tarballs/vo-package/

Tuesday, August 13, 2013

Announcing OSG Software version 3.1.22

We are pleased to announce OSG Software version 3.1.22!

This release affects most OSG installations. Changes include:

* All known issues with OSG Software and SHA-2 certificates have been fixed
* In the Upcoming series, all Java packages are built & tested on OpenJDK 7
* Update to CVMFS 2.1.14
* VO package v46
* RSV has many improvements and bug fixes, plus a new Java reporting probe
* SLURM is supported as a resource management system via PBS emulation
* osg-configure has many improvements and bug fixes
* HDFS 2 packaging was fixed (available in Upcoming series)

SHA-2:
Early adopters are already using SHA-2 signed certificates.
Our CAs may issue SHA-2 signed certificates starting October 1st.

OpenJDK 7:
Early adopters have already replaced their Java installations with
OpenJDK 7. We plan to fold the OpenJDK 7 changes into the 3.1
repository in the next release on September 10th.

Release notes and pointers to more documentation can be found at:

https://www.opensciencegrid.org/bin/view/Documentation/Release3/Release3122

As a reminder, the OSG Software 3.1 is available as RPMs or client tarballs
for Enterprise Linux versions 5 and 6.

Need help? Let us know:

https://www.opensciencegrid.org/bin/view/Documentation/Release3/HelpProcedure

We welcome feedback on this release!

Wednesday, August 7, 2013

GOC Services Update - Tuesday, August 13th at 13:00 UTC

The GOC will upgrade the following services beginning Tuesday, August 13th, 2013 at 13:00 UTC. The GOC reserves 8 hours in the unlikely event that unexpected problems are encountered.  We encourage users to test affected services before the production release.

OSG Homepage (www.opensciencegrid.org)

Current twiki homepage will be replaced by a dedicated OSG homepage. You can see the ITB version of the new OSG homepage at http://www-itb.opensciencegrid.org.
The OSG homepage will have following URL redirections for backward compatibilities with existing twiki URLs.
* https://www.opensciencegrid.org/bin/view > https://twiki.opensciencegrid.org/bin/view
* https://www.opensciencegrid.org/twiki/bin/view > https://twiki.opensciencegrid.org/bin/view
(similar for http:// URLs)
All other URLs will be served by new OSG homepage.


GOC Ticket 1.67

* Switching spam filter to Akismet. Added submitter IP/Agent to submission metadata to better filtering
* Updating a label on ticket submit form to include “Others” (GOC Ticket 14610)
* Updated to the latest bootstrap lib
* Added submitter IP/Agent to submission metadata.


OIM 3.21

* PKI / Updated user certificate renew process to re-key user certificate issued using user provided password. Also updated REST API to require password field and return pkcs12 output (OSGPKI-387)
* PKI / Hide disabled VO inside user certificate request form, and GridAdmin request form (OSGPKI-388)
* Releasing Project Registration forms (https://twiki.grid.iu.edu/bin/view/Accounting/FOSAccounting) (OIM-68)
* Updating to the latest bootstrap CSS library in order to fix IE10 GridAdmin dialog box issue.
* Hidden certificate request counter for contact that has no DN associated.Added support for java.sql.Date as well as java.util.Date for RecordBase
* Fixed an issue reported by Alain Deximo where fiu.edu matches GridAdmin for iu.edu.
* Fixed incorrect wording of invalid date range warning


MyOSG 2.14

* Added project page to export OIM’s project registration (ref. OIM-68)


OSG BDII (is1/is2.grid.iu.edu)

* Enabling LVS. is.grid.iu.edu will be a LVS alias to vip-is.grid.iu.edu