Certification report for patches 2969 and 2970

Introduction

These patches were certified against the current gLite production as well as VOMS-CORE patch 2771 and its 64-bit client counterpart 2908 (which are currently in pre-production). Thus the new LFC server was tested with the old and new LFC clients and both clients and server with the old and new VOMS API.

The production gLite 3.2 WN was tested against the new LFC server.

YAIM-CORE Patch 2981 was used for the certification (this patch depends on it).

A problem with the LFC YAIM module for the Oracle backend was observed for new nodes deployment. The location of the SQL script for database deployment has changed and does not correspond to the YAIM module expectations. YAIM Module update follows in patch 2988.

Installed RPMS

Current LFC patches

LFC-32bit, ORACLE
======================================================================================
 Package                           Arch       Version          Repository        Size
======================================================================================

Installing:
 cert-glite-LFC_oracle            i386       3.1.0-0          LFC-PATCH         3.0 k

Installing for dependencies:
 LFC-client                       i386       1.7.2-4sec.slc4  LFC-PATCH         1.9 M
 LFC-interfaces                   i386       1.7.2-4sec.slc4  LFC-PATCH         705 k
 LFC-interfaces2                  i386       1.7.2-4sec.slc4  LFC-PATCH         394 k
 LFC-server-oracle                i386       1.7.2-4sec.slc4  LFC-PATCH         643 k
 bdii                             noarch     4.0.1-4          LFC-PROD           22 k
 edg-mkgridmap                    noarch     3.0.0-1          LFC-PROD           37 k
 fetch-crl                        noarch     2.6.3-1          LFC-PROD           15 k
 glite-info-generic               noarch     2.0.2-3          LFC-PROD          5.4 k
 glite-info-templates             noarch     1.0.0-8          LFC-PROD          8.6 k
 glite-security-voms-api          i386       1.8.8-1.slc4     LFC-PROD           12 k
 glite-security-voms-api-cpp      i386       1.8.8-3.slc4     LFC-PROD           10 M
 glite-security-voms-api-noglobus i386       1.8.8-2.slc4     LFC-PROD          1.9 M
 glite-version                    i386       3.1.0-1.slc4     LFC-PROD          1.9 k
 glite-yaim-core                  noarch     4.0.8-2          PATCH-YAIM        116 k
 glite-yaim-lfc                   noarch     4.0.1-1          LFC-PROD           11 k
 glue-schema                      noarch     1.3.0-5          LFC-PROD           30 k
 lcg-dm-common                    i386       1.7.2-4sec.slc4  LFC-PATCH          76 k
 lcg-vomscerts                    noarch     5.4.0-1          LFC-PROD           17 k
 vdt_globus_essentials            i386       VDT1.6.1x86_rhas_4-9  LFC-PROD      16 M

======================================================================================


LFC-64bit, ORACLE
=====================================================================================
 Package                          Arch       Version          Repository        Size
=====================================================================================

Installing:
 cert-glite-LFC_oracle            x86_64     3.1.0-0          LFC-PATCH         3.1 k

Installing for dependencies:
 LFC-client                       x86_64     1.7.2-4sec.slc4  LFC-PATCH         2.1 M
 LFC-interfaces                   x86_64     1.7.2-4sec.slc4  LFC-PATCH         774 k
 LFC-interfaces2                  x86_64     1.7.2-4sec.slc4  LFC-PATCH         443 k
 LFC-server-oracle                x86_64     1.7.2-4sec.slc4  LFC-PATCH         698 k
 bdii                             noarch     4.0.1-4          LFC-PROD           22 k
 edg-mkgridmap                    noarch     3.0.0-1          LFC-PROD           37 k
 fetch-crl                        noarch     2.6.3-1          LFC-PROD           15 k
 glite-info-generic               noarch     2.0.2-3          LFC-PROD          5.4 k
 glite-info-templates             noarch     1.0.0-8          LFC-PROD          8.6 k
 glite-security-voms-api          x86_64     1.8.8-1.slc4     LFC-PROD           12 k
 glite-security-voms-api-c        x86_64     1.8.8-2.slc4     LFC-PROD           11 M
 glite-security-voms-api-cpp      x86_64     1.8.8-3.slc4     LFC-PATCH          11 M
 glite-security-voms-api-noglobus x86_64     1.8.8-2.slc4     LFC-PROD          2.0 M
 glite-version                    x86_64     3.1.0-1.slc4     LFC-PROD          1.9 k
 glite-yaim-core                  noarch     4.0.8-2          PATCH-YAIM        116 k
 glite-yaim-lfc                   noarch     4.0.1-1          LFC-PROD           11 k
 glue-schema                      noarch     1.3.0-5          LFC-PROD           30 k
 lcg-dm-common                    x86_64     1.7.2-4sec.slc4  LFC-PATCH          79 k
 lcg-vomscerts                    noarch     5.4.0-1          LFC-PROD           17 k
 vdt_globus_essentials            x86_64     VDT1.6.1x86_64_rhas_4-9  LFC-PROD   27 M

=====================================================================================


LFC-32bit, MySQL
======================================================================================
 Package                           Arch       Version          Repository        Size
======================================================================================

Installing:
 cert-glite-LFC_mysql              i386       3.1.0-0          LFC-PATCH         3.0 k

Installing for dependencies:
 LFC-client                        i386       1.7.2-4sec.slc4  LFC-PATCH         1.9 M
 LFC-interfaces                    i386       1.7.2-4sec.slc4  LFC-PATCH         705 k
 LFC-interfaces2                   i386       1.7.2-4sec.slc4  LFC-PATCH         394 k
 LFC-server-mysql                  i386       1.7.2-4sec.slc4  LFC-PATCH         635 k
 bdii                              noarch     4.0.1-4          LFC-PROD           22 k
 edg-mkgridmap                     noarch     3.0.0-1          LFC-PROD           37 k
 fetch-crl                         noarch     2.6.3-1          LFC-PROD           15 k
 glite-info-generic                noarch     2.0.2-3          LFC-PROD          5.4 k
 glite-info-templates              noarch     1.0.0-8          LFC-PROD          8.6 k
 glite-security-voms-api           i386       1.8.8-1.slc4     LFC-PROD           12 k
 glite-security-voms-api-cpp       i386       1.8.8-3.slc4     LFC-PROD           10 M
 glite-security-voms-api-noglobus  i386       1.8.8-2.slc4     LFC-PROD          1.9 M
 glite-version                     i386       3.1.0-1.slc4     LFC-PROD          1.9 k
 glite-yaim-core                   noarch     4.0.8-2          PATCH-YAIM        116 k
 glite-yaim-lfc                    noarch     4.0.1-1          LFC-PROD           11 k
 glue-schema                       noarch     1.3.0-5          LFC-PROD           30 k
 lcg-dm-common                     i386       1.7.2-4sec.slc4  LFC-PATCH          76 k
 lcg-vomscerts                     noarch     5.4.0-1          LFC-PROD           17 k
 vdt_globus_essentials             i386       VDT1.6.1x86_rhas_4-9  LFC-PROD      16 M

======================================================================================


LFC-64bit, MySQL
======================================================================================
 Package                           Arch       Version          Repository        Size 
======================================================================================

Installing:
 cert-glite-LFC_mysql              x86_64     3.1.0-0          LFC-PATCH         3.1 k

Installing for dependencies:
 LFC-client                        x86_64     1.7.2-4sec.slc4  LFC-PATCH         2.1 M
 LFC-interfaces                    x86_64     1.7.2-4sec.slc4  LFC-PATCH         774 k
 LFC-interfaces2                   x86_64     1.7.2-4sec.slc4  LFC-PATCH         443 k
 LFC-server-mysql                  x86_64     1.7.2-4sec.slc4  LFC-PATCH         684 k
 bdii                              noarch     4.0.1-4          LFC-PROD           22 k
 edg-mkgridmap                     noarch     3.0.0-1          LFC-PROD           37 k
 fetch-crl                         noarch     2.6.3-1          LFC-PROD           15 k
 glite-info-generic                noarch     2.0.2-3          LFC-PROD          5.4 k
 glite-info-templates              noarch     1.0.0-8          LFC-PROD          8.6 k
 glite-security-voms-api           x86_64     1.8.8-1.slc4     LFC-PROD           12 k
 glite-security-voms-api-c         x86_64     1.8.8-2.slc4     LFC-PROD           11 M
 glite-security-voms-api-cpp       x86_64     1.8.8-3.slc4     LFC-PATCH          11 M
 glite-security-voms-api-noglobus  x86_64     1.8.8-2.slc4     LFC-PROD          2.0 M
 glite-version                     x86_64     3.1.0-1.slc4     LFC-PROD          1.9 k
 glite-yaim-core                   noarch     4.0.8-2          PATCH-YAIM        116 k
 glite-yaim-lfc                    noarch     4.0.1-1          LFC-PROD           11 k
 glue-schema                       noarch     1.3.0-5          LFC-PROD           30 k
 lcg-dm-common                     x86_64     1.7.2-4sec.slc4  LFC-PATCH          79 k
 lcg-vomscerts                     noarch     5.4.0-1          LFC-PROD           17 k
 vdt_globus_essentials             x86_64     VDT1.6.1x86_64_rhas_4-9  LFC-PROD   27 M

======================================================================================

Additional updates for PPS VOMS-CORE

The test against the VOMS-CORE patches 2771 and 2908 was performed after the following updates on the server side and similar on the client UI.

LFC-32bit, ORACLE
======================================================================================
 Package                           Arch       Version          Repository        Size
======================================================================================

Updating:
 glite-security-voms-api           i386       1.8.12-1.slc4    PATCH-VOMS         12 k
 glite-security-voms-api-cpp       i386       1.8.12-1.slc4    PATCH-VOMS        4.0 M

======================================================================================


LFC-64bit, ORACLE
======================================================================================
 Package                           Arch       Version          Repository        Size
======================================================================================

Updating:
 glite-security-voms-api           x86_64     1.8.12-1.slc4    PATCH-VOMS         12 k
 glite-security-voms-api-c         x86_64     1.8.12-1.slc4    PATCH-VOMS        4.2 M
 glite-security-voms-api-cpp       x86_64     1.8.12-1.slc4    PATCH-VOMS        4.2 M
 
======================================================================================


LFC-32bit, MySQL
======================================================================================
 Package                           Arch       Version          Repository        Size
======================================================================================

Updating:
 glite-security-voms-api           i386       1.8.12-1.slc4    PATCH-VOMS         12 k
 glite-security-voms-api-cpp       i386       1.8.12-1.slc4    PATCH-VOMS        4.0 M

======================================================================================


LFC-64bit, MySQL
======================================================================================
 Package                           Arch       Version          Repository        Size
======================================================================================

Updating:
 glite-security-voms-api           x86_64     1.8.12-1.slc4    PATCH-VOMS         12 k
 glite-security-voms-api-c         x86_64     1.8.12-1.slc4    PATCH-VOMS        4.2 M
 glite-security-voms-api-cpp       x86_64     1.8.12-1.slc4    PATCH-VOMS        4.2 M

======================================================================================

Configurations used

Oracle

MY_DOMAIN=cern.ch

USERS_CONF=/opt/glite/yaim/etc/users.conf
GROUPS_CONF=/opt/glite/yaim/etc/groups.conf

SITE_EMAIL=Admin.Email.Test@cern.ch
SITE_CRON_EMAIL=$SITE_EMAIL
SITE_SUPPORT_EMAIL=$SITE_EMAIL
SITE_NAME=SITE-1
SITE_LOC="Geneva, Switzerland"
SITE_LAT=3.14
SITE_LONG=2.71
SITE_WEB="http://www.cern.ch"
SITE_TIER="TIER 1"
SITE_SUPPORT_SITE="SITE-1"

ORACLE_LOCATION="/usr/lib/oracle/10.2.0.3"

LFC_HOST=ctb-generic-16.cern.ch
LFC_DB_PASSWORD="who_knows"
LFC_DB_HOST="LFC32DB"
LFC_DB=LFC32
LFC_CENTRAL="TEST ORG.GLITE.VOMS-TEST"
LFC_LOCAL=""

VOS="test org.glite.voms-test"

VO_TEST_VOMS_SERVERS='vomss://ctb-generic-3.cern.ch:8443/voms/test?/test/'
VO_TEST_VOMSES="'test ctb-generic-3.cern.ch 15001 /DC=ch/DC=cern/OU=computers/CN=ctb-generic-3.cern.ch test'"
VO_TEST_VOMS_CA_DN="'/DC=ch/DC=cern/CN=CERN Trusted Certification Authority' '/DC=ch/DC=cern/CN=CERN Trusted Certification Authority'"

VO_ORG_GLITE_VOMS_TEST_VOMS_SERVERS='vomss://ctb-generic-3.cern.ch:8443/voms/org.glite.voms-test?/org.glite.voms-test/'
VO_ORG_GLITE_VOMS_TEST_VOMSES="'org.glite.voms-test ctb-generic-3.cern.ch 15002 /DC=ch/DC=cern/OU=computers/CN=ctb-generic-3.cern.ch org.glite.voms-test'"
VO_ORG_GLITE_VOMS_TEST_VOMS_CA_DN="'/DC=ch/DC=cern/CN=CERN Trusted Certification Authority' '/DC=ch/DC=cern/CN=CERN Trusted Certification Authority'"

MySQL

Similar to the previous one. MySQL database deployed on the LFC HOST.

LFC_HOST=ctb-generic-27.cern.ch
LFC_DB_PASSWORD="who_knows"
LFC_DB_HOST=$LFC_HOST
LFC_DB=cns_db
LFC_CENTRAL="TEST ORG.GLITE.VOMS-TEST"
LFC_LOCAL=""

For the verification of bug 48991

Home directories created in /var/home

151:${DPMMGR_USER}:151:${DPMMGR_GROUP}:DPM user:
157:${LFCMGR_USER}:157:${LFCMGR_GROUP}:LFC user:/var/home/lfcmgr
152:${EDG_USER}:152,156:${EDG_GROUP},${INFOSYS_GROUP}:EDG user:/var/home/edguser
153:${EDGINFO_USER}:153,156:${EDGINFO_USER},${INFOSYS_GROUP}:EDG info user:/var/home/edginfo
154:${RGMA_USER}:154,156:${RGMA_GROUP},${INFOSYS_GROUP}:RGMA user:${INSTALL_ROOT}/glite/etc/rgma
155:${GLITE_USER}:155:${GLITE_GROUP}:gLite user:${GLITE_HOME_DIR}
156:${BDII_USER}:158:${BDII_GROUP}:BDII user:

Published entries in the top-level BDII

The entries for both services (lfc and dli) were published successfully in the top-level BDII:

# ctb-generic-27.cern.ch, SITE-1, local, grid
dn: GlueServiceUniqueID=ctb-generic-27.cern.ch,Mds-Vo-name=SITE-1,Mds-Vo-name=
 local,o=grid
objectClass: GlueTop
objectClass: GlueService
GlueServiceUniqueID: ctb-generic-27.cern.ch
GlueServiceName: SITE-1-lfc
GlueServiceType: lcg-file-catalog
GlueServiceEndpoint: ctb-generic-27.cern.ch
GlueServiceURI: ctb-generic-27.cern.ch
GlueServiceAccessPointURL: ctb-generic-27.cern.ch
GlueServiceStatus: OK
GlueServiceStatusInfo: No Problems
GlueServiceWSDL: unset
GlueServiceSemantics: unset
GlueForeignKey: GlueSiteUniqueID=SITE-1
GlueServiceStartTime: 2009-05-01 00:55:21.000000000 +0200
GlueServiceVersion: 1.7.2
GlueServiceOwner: TEST
GlueServiceOwner: ORG.GLITE.VOMS-TEST
GlueServiceAccessControlRule: TEST
GlueServiceAccessControlRule: ORG.GLITE.VOMS-TEST

# http://ctb-generic-27.cern.ch:8085/, SITE-1, local, grid
dn: GlueServiceUniqueID=http://ctb-generic-27.cern.ch:8085/,Mds-Vo-name=SITE-1
 ,Mds-Vo-name=local,o=grid
objectClass: GlueTop
objectClass: GlueService
GlueServiceUniqueID: http://ctb-generic-27.cern.ch:8085/
GlueServiceName: SITE-1-lfc-dli
GlueServiceType: data-location-interface
GlueServiceEndpoint: http://ctb-generic-27.cern.ch:8085/
GlueServiceURI: http://ctb-generic-27.cern.ch:8085/
GlueServiceAccessPointURL: http://ctb-generic-27.cern.ch:8085/
GlueServiceStatus: OK
GlueServiceStatusInfo: No Problems
GlueServiceWSDL: unset
GlueServiceSemantics: unset
GlueForeignKey: GlueSiteUniqueID=SITE-1
GlueServiceStartTime: 2009-05-01 00:55:21.000000000 +0200
GlueServiceVersion: 1.7.2
GlueServiceOwner: TEST
GlueServiceOwner: ORG.GLITE.VOMS-TEST
GlueServiceAccessControlRule: TEST
GlueServiceAccessControlRule: ORG.GLITE.VOMS-TEST

LFC Server certification - testsuite results

Both architectures for both backends were tested. The testsuite was run from the UI with the old LFC client and the new one.

Results as expected. The output of the testsuite follows:

*Running CLI test set*
Executing LFC-CLI-dchmod
LFC-CLI-dchmod PASSED
Executing LFC-cli-delcom
LFC-cli-delcom PASSED
Executing LFC-CLI-dren
LFC-CLI-dren PASSED
Executing LFC-CLI-fchmod
LFC-CLI-fchmod PASSED
Executing LFC-CLI-fren
LFC-CLI-fren PASSED
Executing LFC-cli-getacl
LFC-cli-getacl PASSED
Executing LFC-cli-ln
LFC-cli-ln PASSED
Executing LFC-cli-mkdir
LFC-cli-mkdir PASSED
Executing LFC-CLI-mkdir
LFC-CLI-mkdir PASSED
Executing LFC-cli-ping
LFC-cli-ping PASSED
Executing LFC-cli-rename
LFC-cli-rename PASSED
Executing LFC-cli-rmdir
LFC-cli-rmdir PASSED
Executing LFC-CLI-rmdir
LFC-CLI-rmdir PASSED
Executing LFC-CLI-rmfile
LFC-CLI-rmfile PASSED
Executing LFC-cli-setacl
LFC-cli-setacl PASSED
Executing LFC-cli-setcom
LFC-cli-setcom PASSED
*Running API_PYTHON test set*
Executing LFC-addreplica
LFC-addreplica PASSED
Executing LFC-addreplicax
LFC-addreplicax PASSED
Executing LFC-chdir
LFC-chdir PASSED
Executing LFC-creatg
LFC-creatg PASSED
Executing LFC-del
LFC-del PASSED
Executing LFC-delcomment
LFC-delcomment PASSED
Executing LFC-fsize
LFC-fsize PASSED
Executing LFC-getacl
LFC-getacl PASSED
Executing LFC-getcwd
LFC-getcwd PASSED
Executing LFC-getreplica
LFC-getreplica PASSED
Executing LFC-getreplicas
LFC-getreplicas FAILED
Executing LFC-ls
LFC-ls PASSED
Executing LFC-mkdir
LFC-mkdir PASSED
Executing LFC-mkdirg
LFC-mkdirg PASSED
Executing LFC-opendir
LFC-opendir PASSED
Executing LFC-opendirg
LFC-opendirg PASSED
Executing LFC-rename
LFC-rename PASSED
Executing LFC-rmdir
LFC-rmdir PASSED
Executing LFC-setacl
LFC-setacl PASSED
Executing LFC-setatime
LFC-setatime PASSED
Executing LFC-setcomment
LFC-setcomment PASSED
Executing LFC-setfsizeg
LFC-setfsizeg PASSED
Executing LFC-stat
LFC-stat PASSED
Executing LFC-statg
LFC-statg PASSED
Executing LFC-statr
LFC-statr PASSED
Executing LFC-statx
LFC-statx PASSED
Executing LFC-undelete
LFC-undelete PASSED
Executing LFC-unlink
LFC-unlink PASSED
Executing LFC-writefile
LFC-writefile PASSED
----------------------------------------------------------------
The following tests failed: LFC-getreplicas
----------------------------------------------------------------
Start test: get  the  replica entries associated 
with a list of GUIDs (lfc_getreplicas)

Test OK:                                                [OK]
Test SE filter:                                         [OK]
Test guid length exeeds CA_MAXGUIDLEN (EINVAL) (bug):   [FAILED]
Test SE name length exeeds CA_MAXNAMELEN (EINVAL):      [OK]
Test existing replica nonexisting file (ENOENT) (bug):  [FAILED]
----------------------------------------------------------------

LFC Clients certification - testsuite results

All affected nodes were tested (both architectures where applicable).

• glite-UI (as part of the server certification)
• glite-WN on SL4 (32-bit and 64-bit)
• glite-WN on SL5 (64-bit)
• glite-VOBOX

The automatic testsuite was run on all of them. With both the old and new LFC client, using the VOMS-CORE API in production and the one that comes with patches 2771 and 2908.

Same output of the testsuite as for the server.

Bugs verified as part of this patch

Bug #49398 - post install script problem in LFC-interfaces

Python API is covered by the automatic testsuite. Fix certified.

Bug #49345 - lfc-chmod takes arbitrary long absolute mode argument

Reproduced in current client. Regression test committed.

FIX CERTIFIED

Bug #49498 - lfc-mkdir -p can segfault when passed an LFN qualified with an LFC hostname.

Reproduced in 1.6. Regression test committed.

FIX CERTIFIED

Bug #49499 - LFC: lfc-dli has an unnecessary rpm & runtime dependency on cgsi-gsoap

CGSI_gSOAP_2.7 and CGSI_gSOAP_2.7-voms are not installed any more on the LFC node type. The lfc-dli daemon starts normally. lfc-dli-client works as expected.

FIX CERTIFIED

Bug #48991 - [YAIM-CORE] needed to change config_edgusers

Tests performed with both used that has home directories defined and such whose home directory has a non-standard location.

FIX CERTIFIED

Regression tests added to the suite

Regression tests were written for bugs 49345 and 49498. Committed in CVS directory /org.glite.testsuites.ctb/regression/.

-- DimitarShiyachki - 03 May 2009