Certification report patch 3434
Author(s): Dennis van dok,
mailto:dennisvd@nikhefNOSPAMPLEASE.nl.
Patch:
https://savannah.cern.ch/patch/?3434
YUM Repository:
org.glite.security.glite-GLEXEC_wn_R_3_2_2_2
Outcome:
Certified
Clean installation
Installation was done on a fresh
CentOS 5, x86_64 system with up-to-date base OS packages. No middleware was installed other than the LCG-CA distribution. Externally configured repositories: DAG.
[root@glexecwn ~]# wget -O /etc/yum.repos.d/patch3434.repo http://etics-repository.cern.ch:8080/repository/pm/registered/repomd/id/a36e21a5-55eb-47e0-b3c3-bf7f5b91ff98/sl5_x86_64_gcc412/etics-registered-build-by-id.repo
--2010-03-16 13:47:55-- http://etics-repository.cern.ch:8080/repository/pm/registered/repomd/id/a36e21a5-55eb-47e0-b3c3-bf7f5b91ff98/sl5_x86_64_gcc412/etics-registered-build-by-id.repo
Resolving etics-repository.cern.ch... 128.142.130.60
Connecting to etics-repository.cern.ch|128.142.130.60|:8080... connected.
HTTP request sent, awaiting response... 200 OK
Length: 936
Saving to: `/etc/yum.repos.d/patch3434.repo'
100%[==========================================================>] 936 --.-K/s in 0s
2010-03-16 13:47:55 (42.5 MB/s) - `/etc/yum.repos.d/patch3434.repo' saved [936/936]
[root@glexecwn ~]# yum clean all
Loaded plugins: fastestmirror
Cleaning up Everything
Cleaning up list of fastest mirrors
[root@glexecwn ~]# yum install glite-GLEXEC_wn
Loaded plugins: fastestmirror
Determining fastest mirrors
CA | 951 B 00:00
CA/primary | 15 kB 00:00
CA 91/91
ETICS-registered-build-a36e21a5-55eb-47e0-b3c3-bf7f5b91ff98-sl5_x86_64_gcc41 | 764 B 00:00
ETICS-registered-build-a36e21a5-55eb-47e0-b3c3-bf7f5b91ff98-sl5_x86_64_gcc41 | 10 kB 00:00
ETICS-registered-build-a36e21a5-55eb-47e0-b3c3-bf7f5b91ff98-sl5_x86_64_gcc412 27/27
addons | 951 B 00:00
addons/primary | 203 B 00:00
base | 2.1 kB 00:00
base/primary_db | 2.0 MB 00:01
dag | 1.1 kB 00:00
dag/primary | 3.6 MB 00:01
dag 9870/9870
extras | 2.1 kB 00:00
extras/primary_db | 206 kB 00:00
updates | 1.9 kB 00:00
updates/primary_db | 681 kB 00:00
Setting up Install Process
Resolving Dependencies
--> Running transaction check
---> Package glite-GLEXEC_wn.x86_64 0:3.2.2-2.sl5 set to be updated
--> Processing Dependency: glite-security-saml2-xacml2-c-lib >= 0.0.15 for package: glite-GLEXEC_wn
--> Processing Dependency: glite-security-lcmaps-plugins-verify-proxy >= 1.4.7 for package: glite-GLEXEC_wn
--> Processing Dependency: gpt >= 3.2autotools2004_NMI_9.0_x86_64_rhap_5 for package: glite-GLEXEC_wn
--> Processing Dependency: glite-security-lcas-plugins-voms >= 1.3.5 for package: glite-GLEXEC_wn
--> Processing Dependency: glite-authz-pep-c >= 1.3.0 for package: glite-GLEXEC_wn
--> Processing Dependency: glite-security-lcmaps-plugins-voms >= 1.4.0 for package: glite-GLEXEC_wn
--> Processing Dependency: glite-security-lcas-plugins-basic >= 1.3.2 for package: glite-GLEXEC_wn
--> Processing Dependency: glite-security-lcas >= 1.3.11 for package: glite-GLEXEC_wn
--> Processing Dependency: glite-security-lcmaps-plugins-c-pep >= 1.0.4 for package: glite-GLEXEC_wn
--> Processing Dependency: vdt_globus_essentials >= VDT1.10.1x86_64_rhap_5 for package: glite-GLEXEC_wn
--> Processing Dependency: glexec-wrapper-scripts >= 0.0.3 for package: glite-GLEXEC_wn
--> Processing Dependency: glite-yaim-core >= 4.0.12 for package: glite-GLEXEC_wn
--> Processing Dependency: glite-security-glexec >= 0.7.0 for package: glite-GLEXEC_wn
--> Processing Dependency: glite-security-lcmaps-plugins-basic >= 1.4.0 for package: glite-GLEXEC_wn
--> Processing Dependency: glite-yaim-glexec-wn >= 2.0.3 for package: glite-GLEXEC_wn
--> Processing Dependency: edg-mkgridmap >= 3.0.0 for package: glite-GLEXEC_wn
--> Processing Dependency: glite-security-lcas-interface >= 1.3.11 for package: glite-GLEXEC_wn
--> Processing Dependency: glite-security-lcmaps >= 1.4.11 for package: glite-GLEXEC_wn
--> Processing Dependency: glite-security-voms-api-cpp >= 1.8.12 for package: glite-GLEXEC_wn
--> Processing Dependency: glite-security-lcas-plugins-check-executable >= 1.2.1 for package: glite-GLEXEC_wn
--> Processing Dependency: gridsite-shared >= 1.5.10 for package: glite-GLEXEC_wn
--> Processing Dependency: glite-security-lcmaps-plugins-scas-client >= 0.2.11 for package: glite-GLEXEC_wn
--> Running transaction check
---> Package edg-mkgridmap.noarch 0:3.0.0-1 set to be updated
--> Processing Dependency: perl(Net::SSLeay) >= 1.16 for package: edg-mkgridmap
--> Processing Dependency: perl(IO::Socket::SSL) >= 0.90 for package: edg-mkgridmap
--> Processing Dependency: perl(XML::Parser) for package: edg-mkgridmap
--> Processing Dependency: perl(XML::DOM) for package: edg-mkgridmap
--> Processing Dependency: perl(XML::DOM) for package: edg-mkgridmap
--> Processing Dependency: perl(URI::ldap) for package: edg-mkgridmap
--> Processing Dependency: perl(URI::http) for package: edg-mkgridmap
--> Processing Dependency: perl(URI) for package: edg-mkgridmap
--> Processing Dependency: perl(URI) for package: edg-mkgridmap
--> Processing Dependency: perl(Term::ReadKey) for package: edg-mkgridmap
--> Processing Dependency: perl(Term::ReadKey) for package: edg-mkgridmap
--> Processing Dependency: perl(Net::LDAPS) for package: edg-mkgridmap
--> Processing Dependency: perl(Net::LDAPS) for package: edg-mkgridmap
--> Processing Dependency: perl(Net::LDAP::Util) for package: edg-mkgridmap
--> Processing Dependency: perl(Net::LDAP) for package: edg-mkgridmap
--> Processing Dependency: perl(Net::LDAP) for package: edg-mkgridmap
--> Processing Dependency: perl(LWP::UserAgent) for package: edg-mkgridmap
--> Processing Dependency: perl(LWP) for package: edg-mkgridmap
--> Processing Dependency: perl(Date::Manip) for package: edg-mkgridmap
--> Processing Dependency: perl(Date::Manip) for package: edg-mkgridmap
--> Processing Dependency: perl(Crypt::SSLeay) for package: edg-mkgridmap
---> Package glexec-wrapper-scripts.noarch 0:0.0.3-1 set to be updated
--> Processing Dependency: perl(Compress::Zlib) for package: glexec-wrapper-scripts
---> Package glite-authz-pep-c.x86_64 0:1.3.0-4.sl5 set to be updated
--> Processing Dependency: curl >= 7.15.5 for package: glite-authz-pep-c
---> Package glite-security-glexec.x86_64 0:0.7.0-2.sl5 set to be updated
---> Package glite-security-lcas.x86_64 0:1.3.11-3.1.sl5 set to be updated
---> Package glite-security-lcas-interface.x86_64 0:1.3.11-1.sl5 set to be updated
---> Package glite-security-lcas-plugins-basic.x86_64 0:1.3.2-3.sl5 set to be updated
---> Package glite-security-lcas-plugins-check-executable.x86_64 0:1.2.1-3.sl5 set to be updated
---> Package glite-security-lcas-plugins-voms.x86_64 0:1.3.5-2.1.sl5 set to be updated
--> Processing Dependency: glite-security-voms-api-c >= 1.8.12 for package: glite-security-lcas-plugins-voms
---> Package glite-security-lcmaps.x86_64 0:1.4.11-2.sl5 set to be updated
---> Package glite-security-lcmaps-plugins-basic.x86_64 0:1.4.0-1.sl5 set to be updated
---> Package glite-security-lcmaps-plugins-c-pep.x86_64 0:1.0.4-2.sl5 set to be updated
---> Package glite-security-lcmaps-plugins-scas-client.x86_64 0:0.2.11-1.sl5 set to be updated
---> Package glite-security-lcmaps-plugins-verify-proxy.x86_64 0:1.4.7-1.sl5 set to be updated
---> Package glite-security-lcmaps-plugins-voms.x86_64 0:1.4.0-1.sl5 set to be updated
---> Package glite-security-saml2-xacml2-c-lib.x86_64 0:0.0.15-6.sl5 set to be updated
---> Package glite-security-voms-api-cpp.x86_64 0:1.8.12-2.sl5 set to be updated
---> Package glite-yaim-core.noarch 0:4.0.12-1 set to be updated
---> Package glite-yaim-glexec-wn.noarch 0:2.0.3-0 set to be updated
---> Package gpt.x86_64 0:3.2autotools2004_NMI_9.0_x86_64_rhap_5-1 set to be updated
---> Package gridsite-shared.x86_64 0:1.5.10-1.sl5 set to be updated
---> Package vdt_globus_essentials.x86_64 0:VDT1.10.1x86_64_rhap_5-4 set to be updated
--> Running transaction check
---> Package curl.x86_64 0:7.15.5-2.1.el5_3.5 set to be updated
--> Processing Dependency: libidn.so.11()(64bit) for package: curl
---> Package glite-security-voms-api-c.x86_64 0:1.8.12-1.sl5 set to be updated
---> Package perl-Crypt-SSLeay.x86_64 0:0.57-2.el5.rf set to be updated
---> Package perl-Date-Manip.noarch 0:5.54-2.el5.rf set to be updated
---> Package perl-IO-Compress.noarch 0:2.024-1.el5.rf set to be updated
--> Processing Dependency: perl(Compress::Raw::Bzip2) = 2.024 for package: perl-IO-Compress
--> Processing Dependency: perl(Compress::Raw::Zlib) = 2.024 for package: perl-IO-Compress
---> Package perl-IO-Socket-SSL.noarch 0:1.31-1.el5.rf set to be updated
---> Package perl-LDAP.noarch 1:0.33-3.fc6 set to be updated
--> Processing Dependency: perl(Convert::ASN1) for package: perl-LDAP
--> Processing Dependency: perl(XML::SAX::Base) for package: perl-LDAP
---> Package perl-Net-SSLeay.x86_64 0:1.35-2.el5.rf set to be updated
---> Package perl-TermReadKey.x86_64 0:2.30-3.el5.rf set to be updated
---> Package perl-URI.noarch 0:1.35-3 set to be updated
---> Package perl-XML-DOM.noarch 0:1.44-2.el5.rf set to be updated
--> Processing Dependency: perl(XML::RegExp) for package: perl-XML-DOM
---> Package perl-XML-Parser.x86_64 0:2.36-1.el5.rf set to be updated
---> Package perl-libwww-perl.noarch 0:5.805-1.1.1 set to be updated
--> Processing Dependency: perl-HTML-Parser >= 3.33 for package: perl-libwww-perl
--> Processing Dependency: perl(HTML::Entities) for package: perl-libwww-perl
--> Running transaction check
---> Package libidn.x86_64 0:0.6.5-1.1 set to be updated
---> Package perl-Compress-Raw-Bzip2.x86_64 0:2.024-1.el5.rf set to be updated
---> Package perl-Compress-Raw-Zlib.x86_64 0:2.024-1.el5.rf set to be updated
---> Package perl-Convert-ASN1.noarch 0:0.22-1.el5.rf set to be updated
---> Package perl-HTML-Parser.x86_64 0:3.64-1.el5.rf set to be updated
--> Processing Dependency: perl(HTML::Tagset) >= 3 for package: perl-HTML-Parser
---> Package perl-XML-RegExp.noarch 0:0.03-1.2.el5.rf set to be updated
---> Package perl-XML-SAX.noarch 0:0.96-1.el5.rf set to be updated
--> Processing Dependency: perl(XML::NamespaceSupport) for package: perl-XML-SAX
--> Running transaction check
---> Package perl-HTML-Tagset.noarch 0:3.20-1.el5.rf set to be updated
---> Package perl-XML-NamespaceSupport.noarch 0:1.10-1.el5.rf set to be updated
--> Finished Dependency Resolution
Dependencies Resolved
====================================================================================================
Package Arch Version Repository
Size
====================================================================================================
Installing:
glite-GLEXEC_wn x86_64 3.2.2-2.sl5 ETICS-registered-build-a36e21a5-55eb-47e0-b3c3-bf7f5b91ff98-sl5_x86_64_gcc412
3.9 k
Installing for dependencies:
curl x86_64 7.15.5-2.1.el5_3.5 ETICS-registered-build-a36e21a5-55eb-47e0-b3c3-bf7f5b91ff98-sl5_x86_64_gcc412
229 k
edg-mkgridmap noarch 3.0.0-1 ETICS-registered-build-a36e21a5-55eb-47e0-b3c3-bf7f5b91ff98-sl5_x86_64_gcc412
37 k
glexec-wrapper-scripts noarch 0.0.3-1 ETICS-registered-build-a36e21a5-55eb-47e0-b3c3-bf7f5b91ff98-sl5_x86_64_gcc412
4.5 k
glite-authz-pep-c x86_64 1.3.0-4.sl5 ETICS-registered-build-a36e21a5-55eb-47e0-b3c3-bf7f5b91ff98-sl5_x86_64_gcc412
245 k
glite-security-glexec x86_64 0.7.0-2.sl5 ETICS-registered-build-a36e21a5-55eb-47e0-b3c3-bf7f5b91ff98-sl5_x86_64_gcc412
51 k
glite-security-lcas x86_64 1.3.11-3.1.sl5 ETICS-registered-build-a36e21a5-55eb-47e0-b3c3-bf7f5b91ff98-sl5_x86_64_gcc412
89 k
glite-security-lcas-interface x86_64 1.3.11-1.sl5 ETICS-registered-build-a36e21a5-55eb-47e0-b3c3-bf7f5b91ff98-sl5_x86_64_gcc412
11 k
glite-security-lcas-plugins-basic x86_64 1.3.2-3.sl5 ETICS-registered-build-a36e21a5-55eb-47e0-b3c3-bf7f5b91ff98-sl5_x86_64_gcc412
70 k
glite-security-lcas-plugins-check-executable x86_64 1.2.1-3.sl5 ETICS-registered-build-a36e21a5-55eb-47e0-b3c3-bf7f5b91ff98-sl5_x86_64_gcc412
12 k
glite-security-lcas-plugins-voms x86_64 1.3.5-2.1.sl5 ETICS-registered-build-a36e21a5-55eb-47e0-b3c3-bf7f5b91ff98-sl5_x86_64_gcc412
85 k
glite-security-lcmaps x86_64 1.4.11-2.sl5 ETICS-registered-build-a36e21a5-55eb-47e0-b3c3-bf7f5b91ff98-sl5_x86_64_gcc412
282 k
glite-security-lcmaps-plugins-basic x86_64 1.4.0-1.sl5 ETICS-registered-build-a36e21a5-55eb-47e0-b3c3-bf7f5b91ff98-sl5_x86_64_gcc412
125 k
glite-security-lcmaps-plugins-c-pep x86_64 1.0.4-2.sl5 ETICS-registered-build-a36e21a5-55eb-47e0-b3c3-bf7f5b91ff98-sl5_x86_64_gcc412
73 k
glite-security-lcmaps-plugins-scas-client x86_64 0.2.11-1.sl5 ETICS-registered-build-a36e21a5-55eb-47e0-b3c3-bf7f5b91ff98-sl5_x86_64_gcc412
116 k
glite-security-lcmaps-plugins-verify-proxy x86_64 1.4.7-1.sl5 ETICS-registered-build-a36e21a5-55eb-47e0-b3c3-bf7f5b91ff98-sl5_x86_64_gcc412
71 k
glite-security-lcmaps-plugins-voms x86_64 1.4.0-1.sl5 ETICS-registered-build-a36e21a5-55eb-47e0-b3c3-bf7f5b91ff98-sl5_x86_64_gcc412
178 k
glite-security-saml2-xacml2-c-lib x86_64 0.0.15-6.sl5 ETICS-registered-build-a36e21a5-55eb-47e0-b3c3-bf7f5b91ff98-sl5_x86_64_gcc412
3.3 M
glite-security-voms-api-c x86_64 1.8.12-1.sl5 ETICS-registered-build-a36e21a5-55eb-47e0-b3c3-bf7f5b91ff98-sl5_x86_64_gcc412
4.0 M
glite-security-voms-api-cpp x86_64 1.8.12-2.sl5 ETICS-registered-build-a36e21a5-55eb-47e0-b3c3-bf7f5b91ff98-sl5_x86_64_gcc412
4.0 M
glite-yaim-core noarch 4.0.12-1 ETICS-registered-build-a36e21a5-55eb-47e0-b3c3-bf7f5b91ff98-sl5_x86_64_gcc412
123 k
glite-yaim-glexec-wn noarch 2.0.3-0 ETICS-registered-build-a36e21a5-55eb-47e0-b3c3-bf7f5b91ff98-sl5_x86_64_gcc412
15 k
gpt x86_64 3.2autotools2004_NMI_9.0_x86_64_rhap_5-1
ETICS-registered-build-a36e21a5-55eb-47e0-b3c3-bf7f5b91ff98-sl5_x86_64_gcc412
883 k
gridsite-shared x86_64 1.5.10-1.sl5 ETICS-registered-build-a36e21a5-55eb-47e0-b3c3-bf7f5b91ff98-sl5_x86_64_gcc412
514 k
libidn x86_64 0.6.5-1.1 base 195 k
perl-Compress-Raw-Bzip2 x86_64 2.024-1.el5.rf dag 110 k
perl-Compress-Raw-Zlib x86_64 2.024-1.el5.rf dag 178 k
perl-Convert-ASN1 noarch 0.22-1.el5.rf dag 46 k
perl-Crypt-SSLeay x86_64 0.57-2.el5.rf dag 96 k
perl-Date-Manip noarch 5.54-2.el5.rf dag 210 k
perl-HTML-Parser x86_64 3.64-1.el5.rf dag 151 k
perl-HTML-Tagset noarch 3.20-1.el5.rf dag 14 k
perl-IO-Compress noarch 2.024-1.el5.rf dag 242 k
perl-IO-Socket-SSL noarch 1.31-1.el5.rf dag 56 k
perl-LDAP noarch 1:0.33-3.fc6 base 316 k
perl-Net-SSLeay x86_64 1.35-2.el5.rf dag 326 k
perl-TermReadKey x86_64 2.30-3.el5.rf dag 57 k
perl-URI noarch 1.35-3 base 116 k
perl-XML-DOM noarch 1.44-2.el5.rf dag 188 k
perl-XML-NamespaceSupport noarch 1.10-1.el5.rf dag 16 k
perl-XML-Parser x86_64 2.36-1.el5.rf dag 318 k
perl-XML-RegExp noarch 0.03-1.2.el5.rf dag 8.0 k
perl-XML-SAX noarch 0.96-1.el5.rf dag 79 k
perl-libwww-perl noarch 5.805-1.1.1 base 376 k
vdt_globus_essentials x86_64 VDT1.10.1x86_64_rhap_5-4 ETICS-registered-build-a36e21a5-55eb-47e0-b3c3-bf7f5b91ff98-sl5_x86_64_gcc412
13 M
Transaction Summary
====================================================================================================
Install 45 Package(s)
Update 0 Package(s)
Remove 0 Package(s)
Total download size: 30 M
Is this ok [y/N]: y
Downloading Packages:
(1/45): glite-GLEXEC_wn-3.2.2-2.sl5.x86_64.rpm | 3.9 kB 00:00
(2/45): glexec-wrapper-scripts-0.0.3-1.noarch.rpm | 4.5 kB 00:00
(3/45): perl-XML-RegExp-0.03-1.2.el5.rf.noarch.rpm | 8.0 kB 00:00
(4/45): glite-security-lcas-interface-1.3.11-1.sl5.x86_64.rpm | 11 kB 00:00
(5/45): glite-security-lcas-plugins-check-executable-1.2.1-3.sl5.x86_64.rpm | 12 kB 00:00
(6/45): perl-HTML-Tagset-3.20-1.el5.rf.noarch.rpm | 14 kB 00:00
(7/45): glite-yaim-glexec-wn-2.0.3-0.noarch.rpm | 15 kB 00:00
(8/45): perl-XML-NamespaceSupport-1.10-1.el5.rf.noarch.rpm | 16 kB 00:00
(9/45): edg-mkgridmap-3.0.0-1.noarch.rpm | 37 kB 00:00
(10/45): perl-Convert-ASN1-0.22-1.el5.rf.noarch.rpm | 46 kB 00:00
(11/45): glite-security-glexec-0.7.0-2.sl5.x86_64.rpm | 51 kB 00:00
(12/45): perl-IO-Socket-SSL-1.31-1.el5.rf.noarch.rpm | 56 kB 00:00
(13/45): perl-TermReadKey-2.30-3.el5.rf.x86_64.rpm | 57 kB 00:00
(14/45): glite-security-lcas-plugins-basic-1.3.2-3.sl5.x86_64.rpm | 70 kB 00:00
(15/45): glite-security-lcmaps-plugins-verify-proxy-1.4.7-1.sl5.x86_64.rpm | 71 kB 00:00
(16/45): glite-security-lcmaps-plugins-c-pep-1.0.4-2.sl5.x86_64.rpm | 73 kB 00:00
(17/45): perl-XML-SAX-0.96-1.el5.rf.noarch.rpm | 79 kB 00:00
(18/45): glite-security-lcas-plugins-voms-1.3.5-2.1.sl5.x86_64.rpm | 85 kB 00:00
(19/45): glite-security-lcas-1.3.11-3.1.sl5.x86_64.rpm | 89 kB 00:00
(20/45): perl-Crypt-SSLeay-0.57-2.el5.rf.x86_64.rpm | 96 kB 00:00
(21/45): perl-Compress-Raw-Bzip2-2.024-1.el5.rf.x86_64.rpm | 110 kB 00:00
(22/45): perl-URI-1.35-3.noarch.rpm | 116 kB 00:00
(23/45): glite-security-lcmaps-plugins-scas-client-0.2.11-1.sl5.x86_64.rpm | 116 kB 00:00
(24/45): glite-yaim-core-4.0.12-1.noarch.rpm | 123 kB 00:00
(25/45): glite-security-lcmaps-plugins-basic-1.4.0-1.sl5.x86_64.rpm | 125 kB 00:00
(26/45): perl-HTML-Parser-3.64-1.el5.rf.x86_64.rpm | 151 kB 00:00
(27/45): glite-security-lcmaps-plugins-voms-1.4.0-1.sl5.x86_64.rpm | 178 kB 00:00
(28/45): perl-Compress-Raw-Zlib-2.024-1.el5.rf.x86_64.rpm | 178 kB 00:00
(29/45): perl-XML-DOM-1.44-2.el5.rf.noarch.rpm | 188 kB 00:00
(30/45): libidn-0.6.5-1.1.x86_64.rpm | 195 kB 00:00
(31/45): perl-Date-Manip-5.54-2.el5.rf.noarch.rpm | 210 kB 00:00
(32/45): curl-7.15.5-2.1.el5_3.5.x86_64.rpm | 229 kB 00:00
(33/45): perl-IO-Compress-2.024-1.el5.rf.noarch.rpm | 242 kB 00:00
(34/45): glite-authz-pep-c-1.3.0-4.sl5.x86_64.rpm | 245 kB 00:00
(35/45): glite-security-lcmaps-1.4.11-2.sl5.x86_64.rpm | 282 kB 00:00
(36/45): perl-LDAP-0.33-3.fc6.noarch.rpm | 316 kB 00:00
(37/45): perl-XML-Parser-2.36-1.el5.rf.x86_64.rpm | 318 kB 00:00
(38/45): perl-Net-SSLeay-1.35-2.el5.rf.x86_64.rpm | 326 kB 00:00
(39/45): perl-libwww-perl-5.805-1.1.1.noarch.rpm | 376 kB 00:00
(40/45): gridsite-shared-1.5.10-1.sl5.x86_64.rpm | 514 kB 00:00
(41/45): gpt-3.2autotools2004_NMI_9.0_x86_64_rhap_5-1.x86_64.rpm | 883 kB 00:00
(42/45): glite-security-saml2-xacml2-c-lib-0.0.15-6.sl5.x86_64.rpm | 3.3 MB 00:01
(43/45): glite-security-voms-api-cpp-1.8.12-2.sl5.x86_64.rpm | 4.0 MB 00:01
(44/45): glite-security-voms-api-c-1.8.12-1.sl5.x86_64.rpm | 4.0 MB 00:01
(45/45): vdt_globus_essentials-VDT1.10.1x86_64_rhap_5-4.x86_64.rpm | 13 MB 00:05
----------------------------------------------------------------------------------------------------
Total 1.8 MB/s | 30 MB 00:17
Running rpm_check_debug
Running Transaction Test
Finished Transaction Test
Transaction Test Succeeded
Running Transaction
Installing : perl-Net-SSLeay 1/45
Installing : glite-security-saml2-xacml2-c-lib 2/45
Installing : gridsite-shared 3/45
Installing : libidn 4/45
Installing : curl 5/45
Installing : perl-XML-Parser 6/45
Installing : perl-Crypt-SSLeay 7/45
Installing : perl-TermReadKey 8/45
Installing : perl-Compress-Raw-Zlib 9/45
Installing : glite-security-lcas-interface 10/45
Installing : glite-authz-pep-c 11/45
Installing : perl-IO-Socket-SSL 12/45
Installing : gpt 13/45
Using system tar and gzip programs to unpack packages
GNU tar located at /bin/tar
GNU zip located at /bin/gzip
GNU unzip located at /bin/gunzip
GNU make located at /usr/bin/make
Perl located at /usr/bin/perl
rpm located at /bin/rpm
rpmbuild located at /bin/rpm
RPM Package License set to GNU
RPM Package Vendor set to NCSA
RPM Package FTP Site set to ftp.ncsa.uiuc.edu
RPM Package URL set to http://www.gridpackaging.org
RPM Packager set to NCSA
RPM Prefix set to /usr/grid
GNU target platform set to x86_64-unknown-linux-gnu
Installing : vdt_globus_essentials 14/45
Installing : glite-security-voms-api-cpp 15/45
Installing : glite-security-lcmaps 16/45
Installing : glite-security-lcas 17/45
Installing : perl-URI 18/45
Installing : glite-security-lcmaps-plugins-scas-client 19/45
Installing : glite-security-lcmaps-plugins-verify-proxy 20/45
Installing : glite-security-lcmaps-plugins-basic 21/45
Installing : glite-security-lcmaps-plugins-voms 22/45
Installing : glite-security-lcas-plugins-basic 23/45
Installing : glite-security-voms-api-c 24/45
Installing : glite-security-lcas-plugins-voms 25/45
Installing : glite-security-lcas-plugins-check-executable 26/45
Installing : glite-security-glexec 27/45
Installing : glite-security-lcmaps-plugins-c-pep 28/45
Installing : perl-Convert-ASN1 29/45
Installing : perl-HTML-Tagset 30/45
Installing : perl-HTML-Parser 31/45
Installing : perl-XML-RegExp 32/45
Installing : perl-Date-Manip 33/45
Installing : perl-XML-NamespaceSupport 34/45
Installing : perl-XML-SAX 35/45
Installing : glite-yaim-core 36/45
Installing : perl-Compress-Raw-Bzip2 37/45
Installing : perl-IO-Compress 38/45
Installing : perl-libwww-perl 39/45
Installing : perl-LDAP 40/45
Installing : perl-XML-DOM 41/45
Installing : edg-mkgridmap 42/45
Installing : glexec-wrapper-scripts 43/45
Installing : glite-yaim-glexec-wn 44/45
Installing : glite-GLEXEC_wn 45/45
Installed:
glite-GLEXEC_wn.x86_64 0:3.2.2-2.sl5
Dependency Installed:
curl.x86_64 0:7.15.5-2.1.el5_3.5
edg-mkgridmap.noarch 0:3.0.0-1
glexec-wrapper-scripts.noarch 0:0.0.3-1
glite-authz-pep-c.x86_64 0:1.3.0-4.sl5
glite-security-glexec.x86_64 0:0.7.0-2.sl5
glite-security-lcas.x86_64 0:1.3.11-3.1.sl5
glite-security-lcas-interface.x86_64 0:1.3.11-1.sl5
glite-security-lcas-plugins-basic.x86_64 0:1.3.2-3.sl5
glite-security-lcas-plugins-check-executable.x86_64 0:1.2.1-3.sl5
glite-security-lcas-plugins-voms.x86_64 0:1.3.5-2.1.sl5
glite-security-lcmaps.x86_64 0:1.4.11-2.sl5
glite-security-lcmaps-plugins-basic.x86_64 0:1.4.0-1.sl5
glite-security-lcmaps-plugins-c-pep.x86_64 0:1.0.4-2.sl5
glite-security-lcmaps-plugins-scas-client.x86_64 0:0.2.11-1.sl5
glite-security-lcmaps-plugins-verify-proxy.x86_64 0:1.4.7-1.sl5
glite-security-lcmaps-plugins-voms.x86_64 0:1.4.0-1.sl5
glite-security-saml2-xacml2-c-lib.x86_64 0:0.0.15-6.sl5
glite-security-voms-api-c.x86_64 0:1.8.12-1.sl5
glite-security-voms-api-cpp.x86_64 0:1.8.12-2.sl5
glite-yaim-core.noarch 0:4.0.12-1
glite-yaim-glexec-wn.noarch 0:2.0.3-0
gpt.x86_64 0:3.2autotools2004_NMI_9.0_x86_64_rhap_5-1
gridsite-shared.x86_64 0:1.5.10-1.sl5
libidn.x86_64 0:0.6.5-1.1
perl-Compress-Raw-Bzip2.x86_64 0:2.024-1.el5.rf
perl-Compress-Raw-Zlib.x86_64 0:2.024-1.el5.rf
perl-Convert-ASN1.noarch 0:0.22-1.el5.rf
perl-Crypt-SSLeay.x86_64 0:0.57-2.el5.rf
perl-Date-Manip.noarch 0:5.54-2.el5.rf
perl-HTML-Parser.x86_64 0:3.64-1.el5.rf
perl-HTML-Tagset.noarch 0:3.20-1.el5.rf
perl-IO-Compress.noarch 0:2.024-1.el5.rf
perl-IO-Socket-SSL.noarch 0:1.31-1.el5.rf
perl-LDAP.noarch 1:0.33-3.fc6
perl-Net-SSLeay.x86_64 0:1.35-2.el5.rf
perl-TermReadKey.x86_64 0:2.30-3.el5.rf
perl-URI.noarch 0:1.35-3
perl-XML-DOM.noarch 0:1.44-2.el5.rf
perl-XML-NamespaceSupport.noarch 0:1.10-1.el5.rf
perl-XML-Parser.x86_64 0:2.36-1.el5.rf
perl-XML-RegExp.noarch 0:0.03-1.2.el5.rf
perl-XML-SAX.noarch 0:0.96-1.el5.rf
perl-libwww-perl.noarch 0:5.805-1.1.1
vdt_globus_essentials.x86_64 0:VDT1.10.1x86_64_rhap_5-4
Complete!
installation OK.
Subsequent
YAIM configurations were done for several scenarios:
- gLExec standalone (local gridmapdir)
- gLExec with ARGUS authorization
- gLExec with SCAS authorization
Test cases are defined per scenario.
Test report
Functionality tests
Most of the tests involve running
/opt/glite/sbin/glexec /usr/bin/id
and inspecting the resulting mapping (if any). This can be read immediately from the output of the command, but also by looking at /etc/grid-security/gridmapdir. The latter should be cleaned between runs.
There is a number of failure cases, such as when the VO is not supported, the proxy (or VOMS attributes) has expired, the policy returns a DENY or 'not applicable', pool account exhaustion, etc. These should be confirmed by inspecting the log file(s), usually in /var/log/glexec/.
Standalone
The standalone machine used a local gridmapfile and gridmapdir, and local pool accounts. Plain proxy, DN-based grid-mapfile mapping was tested, as well as VOMS FQAN
based mappings.
ARGUS
The ARGUS tests (and the SCAS tests) were done on glexecwn.testbed, a clean installation of
CentOS 5/64. The machine is configured with LDAP authentication (esp. all the pool accounts are in LDAP) and NFS home directories served from another machine. This reflects a common setup in production environments.
The following policy was set on argus.testbed:
resource "http://authz-interop.org/xacml/resource/resource-type/wn" {
obligation "http://glite.org/xacml/obligation/local-environment-map" {
}
action ".*" {
rule permit { fqan="/pvier" }
rule deny { fqan="/dteam" }
}
}
So VO dteam was denied, while VO pvier was allowed. Both cases were tested.
SCAS
Setup
YAIM to configure glexec for use with SCAS. The scas.testbed server was configured beforehand.
Verified that running glexec resulted in a successful mapping.
Verified that banning the DN on the SCAS server results in a failure (exit code 203 - authorization error).
Bug tests
Some bugs have regression tests written for them. These will be included as part of in the upcoming LCMAPS test plan.
- bug#34202
Tested fix certified (with regression test script). This was tested by:
- setting up gLExec and LCMAPS to log to file (log and debug level to 5)
- clearing the logfile
- running glexec with a voms proxy with two VOs
- inspecting the log file
- bug#38396
Tested fix certified (inspected log file after manual run)
- bug#40383
Tested fix certified (by editing configuration files outside of YAIM). This was tested by:
- setting vomsdir and certdir in glexec.conf to point to /tmp/vomsdir and /tmp/certdir
- moving the original vomsdir and certificates directories to these places
- running glexec
- bug#42319
Bug is considered fixed by the developer, but the problem could not be reproduced.
- bug#43163
Tested fix certified. How to test:
-
EXPORT GLEXEC_CLIENT_CERT=/tmp/foobaz
(a non-existing file)
- run glexec
- inspect the log file
- bug#45914
Fix not certified, as it is hard to reproduce and should not occur on production systems.
- bug#48001
Tested fix certified, although original submitter may want to review. How to test:
- set a mapping rule in the grid-mapfile for dteam, i.e.
"/dteam" .dteam
- run glexec to create a mapping for the user to this pool
- edit the grid-mapfile to replace the rule by something like
"/dteam .ops"
- run glexec again (this should fail) and inspect the log file
- bug#50908
Fix not certified but there is a workaround available
- bug#51480
Fix not certified; this concerns a vulnerability outside the scope of certification
- bug#51726
Fix not certified; this concerns a vulnerability outside the scope of certification
- bug#58056
Fix not certified; this concerns vulnerabilities outside the scope of certification
- bug#59986
Tested fix certified
Regression tests
The
YAIM module glite-yaim-glexec-wn has the following regression tests (included in the module sources):
- test_bug50650.sh: passed
- test_bug52579.sh: passed
- test_bug52837.sh: passed
- test_bug58642.sh: passed
- test_bug60817.sh: passed
- test_bug62218.sh: passed
- test_bug62218a.sh: passed
Upgrade from production
Installed the production version of glite-GLEXEC_wn on standardwn2.testbed
yum update --disablerepo=dag
Loaded plugins: fastestmirror
Loading mirror speeds from cached hostfile
* glite-GLEXEC_wn: glitesoft.cern.ch
* glite-GLEXEC_wn_ext: glitesoft.cern.ch
* glite-GLEXEC_wn_updates: glitesoft.cern.ch
* glite-WN: glitesoft.cern.ch
* glite-WN_ext: glitesoft.cern.ch
* glite-WN_updates: glitesoft.cern.ch
Setting up Update Process
Resolving Dependencies
--> Running transaction check
---> Package glite-GLEXEC_wn.x86_64 0:3.2.2-2.sl5 set to be updated
--> Processing Dependency: glite-authz-pep-c >= 1.3.0 for package: glite-GLEXEC_wn
--> Processing Dependency: glite-security-lcmaps-plugins-c-pep >= 1.0.4 for package: glite-GLEXEC_wn
--> Processing Dependency: glite-yaim-core >= 4.0.12 for package: glite-GLEXEC_wn
---> Package glite-security-glexec.x86_64 0:0.7.0-2.sl5 set to be updated
---> Package glite-security-lcmaps.x86_64 0:1.4.11-2.sl5 set to be updated
---> Package glite-security-lcmaps-plugins-basic.x86_64 0:1.4.0-1.sl5 set to be updated
---> Package glite-security-lcmaps-plugins-scas-client.x86_64 0:0.2.11-1.sl5 set to be updated
---> Package glite-security-lcmaps-plugins-verify-proxy.x86_64 0:1.4.7-1.sl5 set to be updated
---> Package glite-security-lcmaps-plugins-voms.x86_64 0:1.4.0-1.sl5 set to be updated
---> Package glite-security-saml2-xacml2-c-lib.x86_64 0:0.0.15-6.sl5 set to be updated
---> Package glite-yaim-glexec-wn.noarch 0:2.0.3-0 set to be updated
--> Running transaction check
---> Package glite-authz-pep-c.x86_64 0:1.3.0-4.sl5 set to be updated
--> Processing Dependency: curl >= 7.15.5 for package: glite-authz-pep-c
---> Package glite-security-lcmaps-plugins-c-pep.x86_64 0:1.0.4-2.sl5 set to be updated
---> Package glite-yaim-core.noarch 0:4.0.12-1 set to be updated
--> Running transaction check
---> Package curl.x86_64 0:7.15.5-2.1.el5_3.5 set to be updated
--> Processing Dependency: libidn.so.11()(64bit) for package: curl
--> Running transaction check
---> Package libidn.x86_64 0:0.6.5-1.1 set to be updated
--> Finished Dependency Resolution
Dependencies Resolved
====================================================================================================
Package Arch Version Repository
Size
====================================================================================================
Updating:
glite-GLEXEC_wn x86_64 3.2.2-2.sl5 ETICS-registered-build-a36e21a5-55eb-47e0-b3c3-bf7f5b91ff98-sl5_x86_64_gcc412
3.9 k
glite-security-glexec x86_64 0.7.0-2.sl5 ETICS-registered-build-a36e21a5-55eb-47e0-b3c3-bf7f5b91ff98-sl5_x86_64_gcc412
51 k
glite-security-lcmaps x86_64 1.4.11-2.sl5 ETICS-registered-build-a36e21a5-55eb-47e0-b3c3-bf7f5b91ff98-sl5_x86_64_gcc412
282 k
glite-security-lcmaps-plugins-basic x86_64 1.4.0-1.sl5 ETICS-registered-build-a36e21a5-55eb-47e0-b3c3-bf7f5b91ff98-sl5_x86_64_gcc412
125 k
glite-security-lcmaps-plugins-scas-client x86_64 0.2.11-1.sl5 ETICS-registered-build-a36e21a5-55eb-47e0-b3c3-bf7f5b91ff98-sl5_x86_64_gcc412
116 k
glite-security-lcmaps-plugins-verify-proxy x86_64 1.4.7-1.sl5 ETICS-registered-build-a36e21a5-55eb-47e0-b3c3-bf7f5b91ff98-sl5_x86_64_gcc412
71 k
glite-security-lcmaps-plugins-voms x86_64 1.4.0-1.sl5 ETICS-registered-build-a36e21a5-55eb-47e0-b3c3-bf7f5b91ff98-sl5_x86_64_gcc412
178 k
glite-security-saml2-xacml2-c-lib x86_64 0.0.15-6.sl5 ETICS-registered-build-a36e21a5-55eb-47e0-b3c3-bf7f5b91ff98-sl5_x86_64_gcc412
3.3 M
glite-yaim-glexec-wn noarch 2.0.3-0 ETICS-registered-build-a36e21a5-55eb-47e0-b3c3-bf7f5b91ff98-sl5_x86_64_gcc412
15 k
Installing for dependencies:
curl x86_64 7.15.5-2.1.el5_3.5 ETICS-registered-build-a36e21a5-55eb-47e0-b3c3-bf7f5b91ff98-sl5_x86_64_gcc412
229 k
glite-authz-pep-c x86_64 1.3.0-4.sl5 ETICS-registered-build-a36e21a5-55eb-47e0-b3c3-bf7f5b91ff98-sl5_x86_64_gcc412
245 k
glite-security-lcmaps-plugins-c-pep x86_64 1.0.4-2.sl5 ETICS-registered-build-a36e21a5-55eb-47e0-b3c3-bf7f5b91ff98-sl5_x86_64_gcc412
73 k
glite-yaim-core noarch 4.0.12-1 ETICS-registered-build-a36e21a5-55eb-47e0-b3c3-bf7f5b91ff98-sl5_x86_64_gcc412
123 k
libidn x86_64 0.6.5-1.1 base 195 k
Transaction Summary
====================================================================================================
Install 5 Package(s)
Update 9 Package(s)
Remove 0 Package(s)
Total download size: 4.9 M
Is this ok [y/N]: y
Downloading Packages:
(1/14): glite-GLEXEC_wn-3.2.2-2.sl5.x86_64.rpm | 3.9 kB 00:00
(2/14): glite-yaim-glexec-wn-2.0.3-0.noarch.rpm | 15 kB 00:00
(3/14): glite-security-glexec-0.7.0-2.sl5.x86_64.rpm | 51 kB 00:00
(4/14): glite-security-lcmaps-plugins-verify-proxy-1.4.7-1.sl5.x86_64.rpm | 71 kB 00:00
(5/14): glite-security-lcmaps-plugins-c-pep-1.0.4-2.sl5.x86_64.rpm | 73 kB 00:00
(6/14): glite-security-lcmaps-plugins-scas-client-0.2.11-1.sl5.x86_64.rpm | 116 kB 00:00
(7/14): glite-yaim-core-4.0.12-1.noarch.rpm | 123 kB 00:00
(8/14): glite-security-lcmaps-plugins-basic-1.4.0-1.sl5.x86_64.rpm | 125 kB 00:00
(9/14): glite-security-lcmaps-plugins-voms-1.4.0-1.sl5.x86_64.rpm | 178 kB 00:00
(10/14): libidn-0.6.5-1.1.x86_64.rpm | 195 kB 00:00
(11/14): curl-7.15.5-2.1.el5_3.5.x86_64.rpm | 229 kB 00:00
(12/14): glite-authz-pep-c-1.3.0-4.sl5.x86_64.rpm | 245 kB 00:00
(13/14): glite-security-lcmaps-1.4.11-2.sl5.x86_64.rpm | 282 kB 00:00
(14/14): glite-security-saml2-xacml2-c-lib-0.0.15-6.sl5.x86_64.rpm | 3.3 MB 00:01
----------------------------------------------------------------------------------------------------
Total 1.3 MB/s | 4.9 MB 00:03
Running rpm_check_debug
Running Transaction Test
Finished Transaction Test
Transaction Test Succeeded
Running Transaction
Updating : glite-security-lcmaps 1/23
Updating : glite-security-saml2-xacml2-c-lib 2/23
Updating : glite-security-lcmaps-plugins-scas-client 3/23
Updating : glite-security-lcmaps-plugins-voms 4/23
Updating : glite-security-lcmaps-plugins-verify-proxy 5/23
Updating : glite-security-lcmaps-plugins-basic 6/23
Updating : glite-security-glexec 7/23
Updating : glite-yaim-glexec-wn 8/23
Installing : libidn 9/23
Installing : curl 10/23
Installing : glite-authz-pep-c 11/23
Installing : glite-security-lcmaps-plugins-c-pep 12/23
Installing : glite-yaim-core 13/23
Updating : glite-GLEXEC_wn 14/23
Cleanup : glite-yaim-glexec-wn 15/23
Cleanup : glite-security-lcmaps-plugins-voms 16/23
Cleanup : glite-security-lcmaps 17/23
Cleanup : glite-security-lcmaps-plugins-verify-proxy 18/23
Cleanup : glite-GLEXEC_wn 19/23
Cleanup : glite-security-lcmaps-plugins-basic 20/23
Cleanup : glite-security-saml2-xacml2-c-lib 21/23
Cleanup : glite-security-glexec 22/23
Cleanup : glite-security-lcmaps-plugins-scas-client 23/23
Dependency Installed:
curl.x86_64 0:7.15.5-2.1.el5_3.5 glite-authz-pep-c.x86_64 0:1.3.0-4.sl5
glite-security-lcmaps-plugins-c-pep.x86_64 0:1.0.4-2.sl5 glite-yaim-core.noarch 0:4.0.12-1
libidn.x86_64 0:0.6.5-1.1
Updated:
glite-GLEXEC_wn.x86_64 0:3.2.2-2.sl5
glite-security-glexec.x86_64 0:0.7.0-2.sl5
glite-security-lcmaps.x86_64 0:1.4.11-2.sl5
glite-security-lcmaps-plugins-basic.x86_64 0:1.4.0-1.sl5
glite-security-lcmaps-plugins-scas-client.x86_64 0:0.2.11-1.sl5
glite-security-lcmaps-plugins-verify-proxy.x86_64 0:1.4.7-1.sl5
glite-security-lcmaps-plugins-voms.x86_64 0:1.4.0-1.sl5
glite-security-saml2-xacml2-c-lib.x86_64 0:0.0.15-6.sl5
glite-yaim-glexec-wn.noarch 0:2.0.3-0
Complete!
--
DVanDok - 16-Mar-2010