Certification Report for Patch 4435 (glite-PX 3.2.0, SL5, 64-bit)

Origins

Build Report	http://etics-repository.cern.ch/repository/reports/id/126992d8-cc71-4cb3-a771-493e9bd47031/sl5_x86_64_gcc412/-/reports/index.html
YUM repo file	http://etics-repository.cern.ch/repository/pm/registered/repomd/id/126992d8-cc71-4cb3-a771-493e9bd47031/sl5_x86_64_gcc412
Patch	Originally https://savannah.cern.ch/patch/?4435
Task	https://savannah.cern.ch/task/?17518
Status	Done but Unofficial
Duration	—

Clean installation

Environment

Clean SL5 installation according to gLite guidelines (CA certificates, ...).

Process

cd /etc/yum.repos.d
wget http://etics-repository.cern.ch/repository/pm/registered/repomd/id/126992d8-cc71-4cb3-a771-493e9bd47031/sl5_x86_64_gcc412/etics-registered-build-by-id.repo
yum -y install glite-PX

cd ~/
mkdir -m 700 yaim
cd yaim

cat << EOF > site-info.def
SITE_NAME=krakonosovo
PX_HOST=delwin.fi.muni.cz
GRID_AUTHORIZED_RETRIEVERS="\*"
EOF

/opt/glite/yaim/bin/yaim -c -s ./site-info.def -n glite-PX

Full output of the installation

[root@delwin ~]# cd /etc/yum.repos.d
[root@delwin yum.repos.d]# wget http://etics-repository.cern.ch/repository/pm/registered/repomd/id/126992d8-cc71-4cb3-a771-493e9bd47031/sl5_x86_64_gcc412/etics-registered-build-by-id.repo
--2010-12-23 13:39:26--  http://etics-repository.cern.ch/repository/pm/registered/repomd/id/126992d8-cc71-4cb3-a771-493e9bd47031/sl5_x86_64_gcc412/etics-registered-build-by-id.repo
Resolving etics-repository.cern.ch... 128.142.130.60
Connecting to etics-repository.cern.ch|128.142.130.60|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 871
Saving to: `etics-registered-build-by-id.repo'

100%[======================================>] 871         --.-K/s   in 0s      

2010-12-23 13:39:26 (18.9 MB/s) - `etics-registered-build-by-id.repo' saved [871/871]

[root@delwin yum.repos.d]# yum -y install glite-PX
Loaded plugins: kernel-module
CA                                                       |  951 B     00:00     
ETICS-registered-build-126992d8-cc71-4cb3-a771-493e9bd47 |  764 B     00:00     
ETICS-registered-build-126992d8-cc71-4cb3-a771-493e9bd47 | 8.5 kB     00:00     
ETICS-registered-build-126992d8-cc71-4cb3-a771-493e9bd47031-sl5_x86_64_gc 16/16
sl-base                                                  | 1.1 kB     00:00     
sl-security                                              | 1.9 kB     00:00     
sl-security/primary_db                                   | 1.7 MB     00:01     
Setting up Install Process
Resolving Dependencies
--> Running transaction check
---> Package glite-PX.x86_64 0:3.2.0-1.sl5 set to be updated
--> Processing Dependency: vdt_globus_essentials >= VDT1.10.1x86_64_rhap_5 for package: glite-PX
--> Processing Dependency: myproxy >= VDT1.10.1x86_64_rhap_5 for package: glite-PX
--> Processing Dependency: gpt >= 3.2autotools2004_NMI_9.0_x86_64_rhap_5 for package: glite-PX
--> Processing Dependency: glue-schema >= 2.0.6 for package: glite-PX
--> Processing Dependency: glite-version >= 3.2.3 for package: glite-PX
--> Processing Dependency: glite-px-myproxy-yaim >= 4.1.0 for package: glite-PX
--> Processing Dependency: glite-px-myproxy-config >= 2.1.0 for package: glite-PX
--> Processing Dependency: glite-info-provider-service >= 1.4.3 for package: glite-PX
--> Processing Dependency: fetch-crl >= 2.7.0 for package: glite-PX
--> Processing Dependency: bdii >= 5.0.9 for package: glite-PX
--> Running transaction check
---> Package bdii.noarch 0:5.0.9-1 set to be updated
--> Processing Dependency: openldap-servers for package: bdii
--> Processing Dependency: openldap-clients for package: bdii
--> Processing Dependency: expect for package: bdii
---> Package fetch-crl.noarch 0:2.7.0-2 set to be updated
---> Package glite-info-provider-service.noarch 0:1.4.3-0 set to be updated
---> Package glite-px-myproxy-config.noarch 0:2.1.0-1 set to be updated
---> Package glite-px-myproxy-yaim.x86_64 0:4.1.0-1.sl5 set to be updated
--> Processing Dependency: glite-yaim-core >= 4.0.13 for package: glite-px-myproxy-yaim
---> Package glite-version.noarch 0:3.2.3-1 set to be updated
---> Package glue-schema.noarch 0:2.0.6-1 set to be updated
---> Package gpt.x86_64 0:3.2autotools2004_NMI_9.0_x86_64_rhap_5-1 set to be updated
---> Package myproxy.x86_64 0:VDT1.10.1x86_64_rhap_5-4.2 set to be updated
---> Package vdt_globus_essentials.x86_64 0:VDT1.10.1x86_64_rhap_5-4 set to be updated
--> Running transaction check
---> Package expect.x86_64 0:5.43.0-5.1 set to be updated
---> Package glite-yaim-core.noarch 0:4.0.13-2 set to be updated
---> Package openldap-clients.x86_64 0:2.3.43-12.el5_5.1 set to be updated
---> Package openldap-servers.x86_64 0:2.3.43-12.el5_5.1 set to be updated
CA/filelists                                             | 6.4 kB     00:00     
ETICS-registered-build-126992d8-cc71-4cb3-a771-493e9bd47 |  11 kB     00:00     
sl-security/filelists_db                                 | 6.8 MB     00:04     
--> Processing Dependency: libltdl.so.3()(64bit) for package: openldap-servers
--> Running transaction check
---> Package libtool-ltdl.x86_64 0:1.5.22-7.el5_4 set to be updated
--> Finished Dependency Resolution
Beginning Kernel Module Plugin
Finished Kernel Module Plugin

Dependencies Resolved

================================================================================
 Package                 Arch   Version                       Repository   Size
================================================================================
Installing:
 glite-PX                x86_64 3.2.0-1.sl5                   ETICS-registered-build-126992d8-cc71-4cb3-a771-493e9bd47031-sl5_x86_64_gcc412
                                                                          3.2 k
Installing for dependencies:
 bdii                    noarch 5.0.9-1                       ETICS-registered-build-126992d8-cc71-4cb3-a771-493e9bd47031-sl5_x86_64_gcc412
                                                                           16 k
 expect                  x86_64 5.43.0-5.1                    sl-base     160 k
 fetch-crl               noarch 2.7.0-2                       ETICS-registered-build-126992d8-cc71-4cb3-a771-493e9bd47031-sl5_x86_64_gcc412
                                                                           20 k
 glite-info-provider-service
                         noarch 1.4.3-0                       ETICS-registered-build-126992d8-cc71-4cb3-a771-493e9bd47031-sl5_x86_64_gcc412
                                                                           48 k
 glite-px-myproxy-config noarch 2.1.0-1                       ETICS-registered-build-126992d8-cc71-4cb3-a771-493e9bd47031-sl5_x86_64_gcc412
                                                                          4.2 k
 glite-px-myproxy-yaim   x86_64 4.1.0-1.sl5                   ETICS-registered-build-126992d8-cc71-4cb3-a771-493e9bd47031-sl5_x86_64_gcc412
                                                                          6.8 k
 glite-version           noarch 3.2.3-1                       ETICS-registered-build-126992d8-cc71-4cb3-a771-493e9bd47031-sl5_x86_64_gcc412
                                                                          4.7 k
 glite-yaim-core         noarch 4.0.13-2                      ETICS-registered-build-126992d8-cc71-4cb3-a771-493e9bd47031-sl5_x86_64_gcc412
                                                                          124 k
 glue-schema             noarch 2.0.6-1                       ETICS-registered-build-126992d8-cc71-4cb3-a771-493e9bd47031-sl5_x86_64_gcc412
                                                                           33 k
 gpt                     x86_64 3.2autotools2004_NMI_9.0_x86_64_rhap_5-1
                                                              ETICS-registered-build-126992d8-cc71-4cb3-a771-493e9bd47031-sl5_x86_64_gcc412
                                                                          883 k
 libtool-ltdl            x86_64 1.5.22-7.el5_4                sl-security  38 k
 myproxy                 x86_64 VDT1.10.1x86_64_rhap_5-4.2    ETICS-registered-build-126992d8-cc71-4cb3-a771-493e9bd47031-sl5_x86_64_gcc412
                                                                          1.3 M
 openldap-clients        x86_64 2.3.43-12.el5_5.1             sl-security 222 k
 openldap-servers        x86_64 2.3.43-12.el5_5.1             sl-security 2.2 M
 vdt_globus_essentials   x86_64 VDT1.10.1x86_64_rhap_5-4      ETICS-registered-build-126992d8-cc71-4cb3-a771-493e9bd47031-sl5_x86_64_gcc412
                                                                           13 M

Transaction Summary
================================================================================
Install     16 Package(s)         
Update       0 Package(s)         
Remove       0 Package(s)         

Total download size: 18 M
Downloading Packages:
(1/16): glite-PX-3.2.0-1.sl5.x86_64.rpm                  | 3.2 kB     00:00     
(2/16): glite-px-myproxy-config-2.1.0-1.noarch.rpm       | 4.2 kB     00:00     
(3/16): glite-version-3.2.3-1.noarch.rpm                 | 4.7 kB     00:00     
(4/16): glite-px-myproxy-yaim-4.1.0-1.sl5.x86_64.rpm     | 6.8 kB     00:00     
(5/16): bdii-5.0.9-1.noarch.rpm                          |  16 kB     00:00     
(6/16): fetch-crl-2.7.0-2.noarch.rpm                     |  20 kB     00:00     
(7/16): glue-schema-2.0.6-1.noarch.rpm                   |  33 kB     00:00     
(8/16): libtool-ltdl-1.5.22-7.el5_4.x86_64.rpm           |  38 kB     00:00     
(9/16): glite-info-provider-service-1.4.3-0.noarch.rpm   |  48 kB     00:00     
(10/16): glite-yaim-core-4.0.13-2.noarch.rpm             | 124 kB     00:00     
(11/16): expect-5.43.0-5.1.x86_64.rpm                    | 160 kB     00:00     
(12/16): openldap-clients-2.3.43-12.el5_5.1.x86_64.rpm   | 222 kB     00:00     
(13/16): gpt-3.2autotools2004_NMI_9.0_x86_64_rhap_5-1.x8 | 883 kB     00:00     
(14/16): myproxy-VDT1.10.1x86_64_rhap_5-4.2.x86_64.rpm   | 1.3 MB     00:00     
(15/16): openldap-servers-2.3.43-12.el5_5.1.x86_64.rpm   | 2.2 MB     00:03     
(16/16): vdt_globus_essentials-VDT1.10.1x86_64_rhap_5-4. |  13 MB     00:02     
--------------------------------------------------------------------------------
Total                                           1.7 MB/s |  18 MB     00:10     
Running rpm_check_debug
Running Transaction Test
Finished Transaction Test
Transaction Test Succeeded
Running Transaction
  Installing     : gpt                                                     1/16 
Using system tar and gzip programs to unpack packages
GNU tar located at /bin/tar
GNU zip located at /bin/gzip
GNU unzip located at /bin/gunzip
GNU make located at /usr/bin/make
Perl located at /usr/bin/perl
rpm located at /bin/rpm
rpmbuild located at /usr/bin/rpmbuild
RPM Package License set to GNU
RPM Package Vendor set to NCSA
RPM Package FTP Site set to ftp.ncsa.uiuc.edu
RPM Package URL set to http://www.gridpackaging.org
RPM Packager set to NCSA
RPM Prefix set to /usr/grid
GNU target platform set to x86_64-unknown-linux-gnu
  Installing     : vdt_globus_essentials                                   2/16 
  Installing     : glue-schema                                             3/16 
  Installing     : myproxy                                                 4/16 
  Installing     : expect                                                  5/16 
  Installing     : libtool-ltdl                                            6/16 
  Installing     : openldap-servers                                        7/16 
  Installing     : openldap-clients                                        8/16 
  Installing     : bdii                                                    9/16 
  Installing     : glite-version                                          10/16 
  Installing     : glite-info-provider-service                            11/16 
  Installing     : fetch-crl                                              12/16 
  Installing     : glite-px-myproxy-config                                13/16 
  Installing     : glite-yaim-core                                        14/16 
  Installing     : glite-px-myproxy-yaim                                  15/16 
  Installing     : glite-PX                                               16/16 

Installed:
  glite-PX.x86_64 0:3.2.0-1.sl5                                                 

Dependency Installed:
  bdii.noarch 0:5.0.9-1                                                         
  expect.x86_64 0:5.43.0-5.1                                                    
  fetch-crl.noarch 0:2.7.0-2                                                    
  glite-info-provider-service.noarch 0:1.4.3-0                                  
  glite-px-myproxy-config.noarch 0:2.1.0-1                                      
  glite-px-myproxy-yaim.x86_64 0:4.1.0-1.sl5                                    
  glite-version.noarch 0:3.2.3-1                                                
  glite-yaim-core.noarch 0:4.0.13-2                                             
  glue-schema.noarch 0:2.0.6-1                                                  
  gpt.x86_64 0:3.2autotools2004_NMI_9.0_x86_64_rhap_5-1                         
  libtool-ltdl.x86_64 0:1.5.22-7.el5_4                                          
  myproxy.x86_64 0:VDT1.10.1x86_64_rhap_5-4.2                                   
  openldap-clients.x86_64 0:2.3.43-12.el5_5.1                                   
  openldap-servers.x86_64 0:2.3.43-12.el5_5.1                                   
  vdt_globus_essentials.x86_64 0:VDT1.10.1x86_64_rhap_5-4                       

Complete!
[root@delwin yum.repos.d]# 
[root@delwin yum.repos.d]# cd ~/
[root@delwin ~]# mkdir -m 700 yaim
[root@delwin ~]# cd yaim
[root@delwin yaim]# 
[root@delwin yaim]# cat << EOF > site-info.def
> SITE_NAME=krakonosovo
> PX_HOST=delwin.fi.muni.cz
> GRID_AUTHORIZED_RETRIEVERS="\*"
> EOF
[root@delwin yaim]# 
[root@delwin yaim]# /opt/glite/yaim/bin/yaim -c -s ./site-info.def -n glite-PX
   INFO: Using site configuration file: ./site-info.def
   INFO: 
         ###################################################################
         
         .             /'.-. ')
         .     yA,-"-,( ,m,:/ )   .oo.     oo    o      ooo  o.     .oo
         .    /      .-Y a  a Y-.     8. .8'    8'8.     8    8b   d'8
         .   /           ~ ~ /         8'    .8oo88.     8    8  8'  8
         . (_/         '===='          8    .8'     8.   8    8  Y   8
         .   Y,-''-,Yy,-.,/           o8o  o8o    o88o  o8o  o8o    o8o
         .    I_))_) I_))_)
         
         
         current working directory: /root/yaim
         site-info.def date: Dec 23 13:40 ./site-info.def
         yaim command: -c -s ./site-info.def -n glite-PX
         log file: /opt/glite/yaim/bin/../log/yaimlog
         Thu Dec 23 13:40:58 CET 2010 : /opt/glite/yaim/bin/yaim
         
         Installed YAIM versions:
         glite-px-myproxy-yaim 4.1.0-1
         glite-yaim-core 4.0.13-2
         
         ####################################################################
   INFO: The default location of the grid-env.(c)sh files will be: /opt/glite/etc/profile.d
   INFO: Sourcing the utilities in /opt/glite/yaim/functions/utils
   INFO: Detecting environment
   INFO: Executing function: config_host_certs_check 
   INFO: Executing function: config_edgusers_check 
   INFO: Executing function: config_gip_px_check 
   INFO: Executing function: config_globus_clients_check 
   INFO: Executing function: config_proxy_server_check 
   INFO: Executing function: config_info_service_px_check 
   INFO: Executing function: config_bdii_only_check 
   INFO: Executing function: config_crl 
   INFO: Now updating the CRLs - this may take a few minutes...
   WARNING: /opt/glite/libexec/fetch-crl.sh didn't finish succesfully
   WARNING: CRLs may not be updated, please have a look !
   INFO: Executing function: config_host_certs 
   INFO: Executing function: config_edgusers 
sed: can't read /opt/glite/etc/gip/glite-info-generic.conf: No such file or directory
   INFO: Executing function: config_gip_only 
   INFO: Executing function: config_gip_px_setenv 
   INFO: Executing function: config_gip_px 
   INFO: Executing function: config_gip_service_release 
   INFO: Executing function: config_globus_clients_setenv 
   INFO: Executing function: config_globus_clients 
   INFO: Configure the globus service
setup-tmpdirs: creating ./config.status
config.status: creating globus-script-initializer
config.status: creating Paths.pm
creating globus-sh-tools-vars.sh
creating globus-script-initializer
creating Globus::Core::Paths
checking globus-hostname
Done
   INFO: Executing function: config_proxy_server_setenv 
   INFO: Executing function: config_proxy_server 
   INFO: Reloading MyProxy server
Reconfiguring myproxy-server
myproxy-server is stopped
Shutting down myproxy-server[FAILED]
Starting myproxy-server, attempt 1 of 3 :[  OK  ]
Checking myproxy response attempt: 1 of 5 [  OK  ]
   INFO: Executing function: config_info_service_px_setenv 
   INFO: Executing function: config_info_service_px 
   INFO: Executing function: config_bdii_only 
Stopping BDII: BDII Already stopped
Starting SLAPD:                                            [  OK  ]

Starting update process:                                   [  OK  ]

                                                                               [   INFO: Configuration Complete.
   INFO: YAIM terminated succesfully.

Tests

TestPlan Tests

[glite@delwin ~]$ PATH=$PATH:/opt/globus/bin:/opt/globus/sbin
[glite@delwin ~]$ export LD_LIBRARY_PATH=/opt/globus/lib
[glite@delwin ~]$ grid-proxy-init
Your identity: /DC=cz/DC=cesnet-ca/O=Masaryk University/CN=Daniel Kouril
Enter GRID pass phrase for this identity:
Creating proxy ......................................... Done
Your proxy is valid until: Tue Jan  4 02:21:52 2011
[glite@delwin ~]$ /opt/globus/sbin/myproxy-test -startserver
MyProxy Test 1 (store credential with default name): SUCCEEDED
MyProxy Test 2 (get info for stored credential): SUCCEEDED
MyProxy Test 3 (retrieve stored credential): SUCCEEDED
MyProxy Test 3- (retrieve stored credential to stdout): SUCCEEDED
MyProxy Test 3N (authenticate w/o retrieving credential): SUCCEEDED
MyProxy Test 3T (retrieve stored credential w/ trustroots): SUCCEEDED
MyProxy Test 3R1 (retrieve stored credential after server reconfig): SUCCEEDED
MyProxy Test 3R2 (retrieve stored credential after server reconfig): SUCCEEDED
MyProxy Test 3R3 (retrieve stored credential after server reconfig): SUCCEEDED
MyProxy Test 4 (verify passphrase checking on retrieve): SUCCEEDED
MyProxy Test 4N (verify passphrase checking on authenticate): SUCCEEDED
MyProxy Test 5 (change passphrase for credential): SUCCEEDED
MyProxy Test 6 (verify new passphrase): SUCCEEDED
MyProxy Test 7 (verify old passphrase fails): SUCCEEDED
MyProxy Test 8 (verify default renewal policy): SUCCEEDED
MyProxy Test 9 (remove credential from repository): SUCCEEDED
MyProxy Test 10 (verify credentials are removed): SUCCEEDED
MyProxy Test 11 (store credentials with retrieval policies): SUCCEEDED
MyProxy Test 12 (verify retrieval policies): SUCCEEDED
MyProxy Test 13 (store credentials with renewal policies): SUCCEEDED
MyProxy Test 14 (get info for stored renewal credentials): SUCCEEDED
MyProxy Test 15 (verify renewal policies): SUCCEEDED
MyProxy Test 16 (verify lifetime of retrieved credentials): SUCCEEDED
MyProxy Test 17 (store credential with default name): SUCCEEDED
MyProxy Test 18 (get info for stored credential): SUCCEEDED
MyProxy Test 19 (create proxy from stored credential): SUCCEEDED
MyProxy Test 20 (retrieve stored credential): SUCCEEDED
MyProxy Test 20T (retrieve stored credential w/ trustroots): SUCCEEDED
MyProxy Test 21 (verify passphrase checking on myproxy-logon): SUCCEEDED
MyProxy Test 22 (verify passphrase checking on myproxy-retrieve): SUCCEEDED
MyProxy Test 23 (verify myproxy-logon default renewal policy): SUCCEEDED
MyProxy Test 24 (verify myproxy-retrieve default renewal policy): SUCCEEDED
MyProxy Test 25 (remove credential from repository): SUCCEEDED
MyProxy Test 26 (verify credentials are removed): SUCCEEDED
MyProxy Test 27 (store credentials with retrieval policies): SUCCEEDED
MyProxy Test 28 (verify myproxy-logon retrieval policies): SUCCEEDED
MyProxy Test 29 (verify myproxy-retrieve retrieval policies): SUCCEEDED
MyProxy Test 30 (store credentials with renewal policies): SUCCEEDED
MyProxy Test 31 (get info for stored renewal credentials): SUCCEEDED
MyProxy Test 32 (verify renewal policies): SUCCEEDED
MyProxy Test 33 (verify lifetime of retrieved credentials): SUCCEEDED
MyProxy Test 34 (store credentials with retrieve key policies): SUCCEEDED
MyProxy Test 35 (get info for stored retrieve key credentials): SUCCEEDED
MyProxy Test 36 (verify myproxy-retrieve key retrieval policies): SUCCEEDED
MyProxy Test 37 (store credentials w/ retrievable_by_cert policies): SUCCEEDED
MyProxy Test 38 (verify retrievable_by_cert policies): SUCCEEDED
MyProxy Test 39 (verify limited proxy retrieves a limited proxy): SUCCEEDED
MyProxy Test 40 (verify renewed limited proxy is still limited): SUCCEEDED
$COG_INSTALL_PATH undefined. Skipping Java CoG tests.
MyProxy Tests Complete: 48 tests passed, 0 tests failed

Upgrade from production

N/A

Revision of Linked Bufs

-- ZdenekSustr - 20-Dec-2010