Certification Report For Patch 2913

Installed software

glite-VOMS_oracle

=============================================================================
 Package                 Arch       Version          Repository        Size
=============================================================================

Installing:
 glite-VOMS_oracle       i386       3.1.20-0         VOMS-PROD         3.4 k
    
Installing for dependencies:
 ZSI                                  noarch     2.0-1.py2.3      VOMS-PROD         358 k
 bdii                                 noarch     4.0.1-4          VOMS-PROD          22 k
 edg-mkgridmap                        noarch     3.0.0-1          VOMS-PROD          37 k
 edg-mkgridmap-conf                   noarch     3.0.0-1          VOMS-PROD          21 k
 fetch-crl                            noarch     2.6.3-1          VOMS-PROD          15 k
 glite-config                         i386       3.1.3-3.slc4     VOMS-PROD          55 k
 glite-info-generic                   noarch     2.0.2-3          VOMS-PROD         5.4 k
 glite-info-templates                 noarch     1.0.0-8          VOMS-PROD         8.6 k
 glite-security-trustmanager          noarch     1.8.16-3         VOMS-PROD         1.6 M
 glite-security-util-java             noarch     1.4.0-1          VOMS-PROD         140 k
 glite-security-utils-config          i386       3.1.0-1.slc4     VOMS-PROD         8.1 k
 glite-security-voms-admin-client     noarch     2.0.10-1         VOMS-PATCH         27 k
 glite-security-voms-admin-interface  noarch     2.0.2-1          VOMS-PROD         9.2 k
 glite-security-voms-admin-server     noarch     2.0.18-1         VOMS-PATCH         44 M
 glite-security-voms-api-cpp          i386       1.8.12-1.slc4    VOMS-PROD         4.0 M
 glite-security-voms-api-noglobus     i386       1.8.8-2.slc4     VOMS-PROD         1.9 M
 glite-security-voms-clients          i386       1.8.12-1.slc4    VOMS-PROD         706 k
 glite-security-voms-config           i386       1.8.12-1.slc4    VOMS-PROD         4.6 k
 glite-security-voms-oracle           i386       3.1.4-3.slc4     VOMS-PROD         144 k
 glite-security-voms-server           i386       1.8.12-1.slc4    VOMS-PROD         440 k
 glite-version                        i386       3.1.0-1.slc4     VOMS-PROD         1.9 k
 glite-voms-server-config             i386       3.1.5-3.slc4     VOMS-CONFIG        16 k
 glue-schema                          noarch     1.3.0-5          VOMS-PROD          30 k
 gpt                                  i386       VDT1.6.0x86_rhas_4-1 VOMS-PROD     854 k
 lcg-expiregridmapdir                 noarch     2.0.0-1          VOMS-PROD         5.4 k
 lcg-vomscerts                        noarch     5.4.0-1          VOMS-PROD          17 k
 vdt_globus_essentials                i386       VDT1.6.1x86_rhas_4-9 VOMS-PROD      16 M
 xalan-c                              i686       1.10.0-1.slc4    VOMS-PROD         1.9 M
 xerces-c                             i686       2.7.0-1.slc4     VOMS-PROD         2.4 M

=============================================================================

glite-VOMS_mysql

=============================================================================
 Package                 Arch       Version          Repository        Size
=============================================================================

Installing:
 glite-VOMS_mysql        i386       3.1.20-0         VOMS-PROD         3.4 k
    
Installing for dependencies:
 ZSI                                  noarch     2.0-1.py2.3      VOMS-PROD         358 k
 bdii                                 noarch     4.0.1-4          VOMS-PROD          22 k
 edg-mkgridmap                        noarch     3.0.0-1          VOMS-PROD          37 k
 edg-mkgridmap-conf                   noarch     3.0.0-1          VOMS-PROD          21 k
 fetch-crl                            noarch     2.6.3-1          VOMS-PROD          15 k
 glite-config                         i386       3.1.3-3.slc4     VOMS-PROD          55 k
 glite-info-generic                   noarch     2.0.2-3          VOMS-PROD         5.4 k
 glite-info-templates                 noarch     1.0.0-8          VOMS-PROD         8.6 k
 glite-security-trustmanager          noarch     1.8.16-3         VOMS-PROD         1.6 M
 glite-security-util-java             noarch     1.4.0-1          VOMS-PROD         140 k
 glite-security-utils-config          i386       3.1.0-1.slc4     VOMS-PROD         8.1 k
 glite-security-voms-admin-client     noarch     2.0.10-1         VOMS-PATCH         27 k
 glite-security-voms-admin-interface  noarch     2.0.2-1          VOMS-PROD         9.2 k
 glite-security-voms-admin-server     noarch     2.0.18-1         VOMS-PATCH         44 M
 glite-security-voms-api-cpp          i386       1.8.12-1.slc4    VOMS-PROD         4.0 M
 glite-security-voms-api-noglobus     i386       1.8.8-2.slc4     VOMS-PROD         1.9 M
 glite-security-voms-clients          i386       1.8.12-1.slc4    VOMS-PROD         706 k
 glite-security-voms-config           i386       1.8.12-1.slc4    VOMS-PROD         4.6 k
 glite-security-voms-mysql            i386       3.1.0-1.slc4     VOMS-PROD         144 k
 glite-security-voms-server           i386       1.8.12-1.slc4    VOMS-PROD         440 k
 glite-version                        i386       3.1.0-1.slc4     VOMS-PROD         1.9 k
 glite-voms-server-config             i386       3.1.5-3.slc4     VOMS-CONFIG        16 k
 glue-schema                          noarch     1.3.0-5          VOMS-PROD          30 k
 gpt                                  i386       VDT1.6.0x86_rhas_4-1 VOMS-PROD     854 k
 lcg-expiregridmapdir                 noarch     2.0.0-1          VOMS-PROD         5.4 k
 lcg-vomscerts                        noarch     5.4.0-1          VOMS-PROD          17 k
 vdt_globus_essentials                i386       VDT1.6.1x86_rhas_4-9 VOMS-PROD      16 M
 xalan-c                              i686       1.10.0-1.slc4    VOMS-PROD         1.9 M
 xerces-c                             i686       2.7.0-1.slc4     VOMS-PROD         2.4 M

=============================================================================

glite-UI

=============================================================================
 Package                 Arch       Version          Repository        Size
=============================================================================
Updating:
 glite-security-voms-admin-client  noarch     2.0.10-1         VOMS-PATCH         27 k

=============================================================================

glite-VOBOX

=============================================================================
 Package                 Arch       Version          Repository        Size
=============================================================================
Updating:
 glite-security-voms-admin-client  noarch     2.0.10-1         VOMS-PATCH         27 k

=============================================================================

VOMS Server node installation notes

VOMS Server installation was tested with both JPackage 1.7 and JPackage 5 enables as well as with only JPackage 5.

In the first case, conflicts were observed between

• sun-jaf and geronimo-jaf
• sun-mail and classpathx-mail

To resolve this one could install

yum install geronimo-jaf-1.1-api classpathx-mail.noarch

prior to running

yum install glite-VOMS_{mysql,oracle}

When only JPackage 5 is enabled, no conflicts were observed. However no JavaMail implementation was installed. This results in the following error in catalina.out:

java.io.FileNotFoundException: /usr/share/tomcat5/common/lib/[javamail].jar (No such file or directory)
        at java.io.FileInputStream.open(Native Method)
        at java.io.FileInputStream.<init>(FileInputStream.java:106)
        at org.apache.catalina.util.ExtensionValidator.addSystemResource(ExtensionValidator.java:209)
        at org.apache.catalina.util.ExtensionValidator.addFolderList(ExtensionValidator.java:410)
        at org.apache.catalina.util.ExtensionValidator.<clinit>(ExtensionValidator.java:105)
        at org.apache.catalina.core.StandardContext.start(StandardContext.java:4064)
        at org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase.java:760)
        at org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:740)
        at org.apache.catalina.core.StandardHost.addChild(StandardHost.java:544)
        at org.apache.catalina.startup.HostConfig.deployDescriptor(HostConfig.java:626)
        at org.apache.catalina.startup.HostConfig.deployDescriptors(HostConfig.java:553)
        at org.apache.catalina.startup.HostConfig.deployApps(HostConfig.java:488)
        at org.apache.catalina.startup.HostConfig.start(HostConfig.java:1150)
        at org.apache.catalina.startup.HostConfig.lifecycleEvent(HostConfig.java:311)
        at org.apache.catalina.util.LifecycleSupport.fireLifecycleEvent(LifecycleSupport.java:120)
        at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1022)
        at org.apache.catalina.core.StandardHost.start(StandardHost.java:736)
        at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1014)
        at org.apache.catalina.core.StandardEngine.start(StandardEngine.java:443)
        at org.apache.catalina.core.StandardService.start(StandardService.java:448)
        at org.apache.catalina.core.StandardServer.start(StandardServer.java:700)
        at org.apache.catalina.startup.Catalina.start(Catalina.java:552)
        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
        at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
        at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
        at java.lang.reflect.Method.invoke(Method.java:585)
        at org.apache.catalina.startup.Bootstrap.start(Bootstrap.java:295)
        at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:433)

Despite the above, Tomcat starts successfully and VOMS-ADMIN runs as expected. Its mail support is bundled as part of the voms-admin RPM.

To get rid of this error one could install classpathx-mail from JPackage 5.

Tests passed

Results from the VOMS testsuite are below. Run on both backends with plain and DNS-like VO names.

The tests were run from the UI using the old and new voms-admin client and on the VOMS server as well.

Test VOMS-addMember     - OK
Test VOMS-assignRole    - OK
Test VOMS-crAttribute   - OK
Test VOMS-crGroup       - OK
Test VOMS-crRole        - OK
Test VOMS-crUser        - OK
Test VOMS-crUserNocert  - OK
Test VOMS-delAttribute  - OK
Test VOMS-delGroup      - OK
Test VOMS-delGroupAttribute     - OK
Test VOMS-delRole       - OK
Test VOMS-delRoleAttribute      - OK
Test VOMS-delUser       - OK
Test VOMS-delUserAttribute      - OK
Test VOMS-dismissRole   - OK
Test VOMS-listAttributes        - OK
Test VOMS-listGroupAttributes   - OK
Test VOMS-listGroups    - OK
Test VOMS-listMembers   - OK
Test VOMS-listRoleAttributes    - OK
Test VOMS-listRoles     - OK
Test VOMS-listSubGroups - OK
Test VOMS-listUserAttributes    - OK
Test VOMS-listUserGroups        - OK
Test VOMS-listUserRoles - OK
Test VOMS-listUsers     - OK
Test VOMS-listUsrWithRol        - OK
Test VOMS-removeMember  - OK
Test VOMS-setGroupAttribute     - OK
Test VOMS-setRoleAttribute      - OK
Test VOMS-setUserAttribute      - OK
Test VOMS-pr-attr       - OK
Test VOMS-pr-bits       - OK
Test VOMS-pr-cert       - OK
Test VOMS-pr-conf       - OK
Test VOMS-pr-dbg        - OK
Test VOMS-pr-genattr    - OK
Test VOMS-pr-hlp        - OK
Test VOMS-pr-hours      - OK
Test VOMS-pr-ign        - OK
Test VOMS-pr-key        - OK
Test VOMS-pr-limit      - OK
Test VOMS-pr-list       - OK
Test VOMS-pr-noreg      - OK
Test VOMS-pr-order      - OK
Test VOMS-pr-out        - OK
Test VOMS-pr-pver       - OK
Test VOMS-pr-pwst       - OK
Test VOMS-pr-quiet      - OK
Test VOMS-pr-RoleOrder  - OK
Test VOMS-pr-usg        - OK
Test VOMS-pr-valid      - OK
Test VOMS-pr-verify     - OK
Test VOMS-pr-vers       - OK
Test VOMS-pr-vlf        - OK
Test VOMS-pr-vomses     - OK
Test VOMS-pr-warn       - OK

Bugs attached to this patch

new VO user request expiration time (bug #39626, Fix certified)

Fix certified. The default value in voms.service.properties is now respected. Non-default values work as expected.

voms-admin --help-commands has output that is too wide (bug #39785, Fix certified)

Fix certified.

Illegal whitespace in address error in VOMS when one of the admins has more than one e-mail address (bug #40372, Fix certified)

Fix certified. The certificate attached to the bug was used to reproduce the problem and verify it's fixed.

voms-admin CLI argument parsing not failure resilient (bug #42536, Fix certified)

Fix certified.

[VOMS-ADMIN] upgrade procedure needs workaround (bug #42939, Fix certified)

Fix certified.

voms-admin to easily allow browsing of users/groups/roles for authorised users even when registration is disabled (bug #43173, Fix certified)

Fix certified. When the web registration is disabled, one has to click on the logo in order get to the users list.

Add a --skip-voms-core to voms-admin-configure (bug #44332, Fix certified)

Fix certified. --skip-voms-core is now available and will be used by the YAIM module for VOMS.

[VOMS ADMIN] NullPointerException caught when setting a user generic attribute value (bug #46144, Fix certified)

Fix certified. The problem in question is fixed. However some other problems were observed. See bugs below.

Problems found during certification

Bug #51654: [VOMS-ADMIN] generic attributes manipulations

• When an unique attribute has a NULL value for an entry, uniqueness is not enforced any more.

• When trying to set a value for a unique attribute that already exists, voms-admin displays an empty page with the error: "Database access error! Check the voms admin logs for more detailed information."

Bug #51657: [VOMS-ADMIN] delete-user does not treat Email= and emailAddress= as equivalent

To reproduce, create and then try to delete a user which certificate has an emailAddress in the subject (without using the --nousercert option).

Problems not fixed (bugs detached from the patch)

bug #42430: Proxy file gets the precedence over environment variable in voms-admin clients

Fix is lost. Confirmed by the developer.

-- DimitarShiyachki - 11 Jun 2009