Certification report patch 4532

Author(s): Dennis van Dok, dennisvd@nikhef.nl

Patch: https://savannah.cern.ch/patch/?4532, glexec 0.8 update

Outcome: Certified

This is a follow-up to patch 4395, which was recalled because the voms-api version in the repository has a bug. For this patch, only a straighforward deployment is tested as this is essentially the same as in the previous patch.

Clean installation

Installation was done on a minimal, up-to-date CentOS 5.5 x86_64 VM.

The following packages were installed:

====================================================================================================
 Package                                        Arch     Version                    Repository
                                                                                               Size
====================================================================================================
Installing:
 glite-GLEXEC_wn                                x86_64   3.2.4-1.sl5                ETICS-registered-build-0e01d1fb-c4e9-40b9-9a9b-55827cca722c-sl5_x86_64_gcc412
                                                                                              4.2 k
Installing for dependencies:
 curl                                           x86_64   7.15.5-9.el5               base      230 k
 edg-mkgridmap                                  noarch   3.0.0-1                    ETICS-registered-build-0e01d1fb-c4e9-40b9-9a9b-55827cca722c-sl5_x86_64_gcc412
                                                                                               37 k
 glexec-mkgltempdir                             noarch   0.0.2-1                    ETICS-registered-build-0e01d1fb-c4e9-40b9-9a9b-55827cca722c-sl5_x86_64_gcc412
                                                                                              4.6 k
 glexec-wrapper-scripts                         noarch   0.0.4-1                    ETICS-registered-build-0e01d1fb-c4e9-40b9-9a9b-55827cca722c-sl5_x86_64_gcc412
                                                                                              4.9 k
 glite-authz-pep-c                              x86_64   1.3.1-1.sl5                ETICS-registered-build-0e01d1fb-c4e9-40b9-9a9b-55827cca722c-sl5_x86_64_gcc412
                                                                                              247 k
 glite-security-glexec                          x86_64   0.8.1-1.sl5                ETICS-registered-build-0e01d1fb-c4e9-40b9-9a9b-55827cca722c-sl5_x86_64_gcc412
                                                                                               57 k
 glite-security-lcas                            x86_64   1.3.11-3.1.sl5             ETICS-registered-build-0e01d1fb-c4e9-40b9-9a9b-55827cca722c-sl5_x86_64_gcc412
                                                                                               89 k
 glite-security-lcas-interface                  x86_64   1.3.11-1.sl5               ETICS-registered-build-0e01d1fb-c4e9-40b9-9a9b-55827cca722c-sl5_x86_64_gcc412
                                                                                               11 k
 glite-security-lcas-plugins-basic              x86_64   1.3.2-3.sl5                ETICS-registered-build-0e01d1fb-c4e9-40b9-9a9b-55827cca722c-sl5_x86_64_gcc412
                                                                                               70 k
 glite-security-lcas-plugins-check-executable   x86_64   1.2.1-3.sl5                ETICS-registered-build-0e01d1fb-c4e9-40b9-9a9b-55827cca722c-sl5_x86_64_gcc412
                                                                                               12 k
 glite-security-lcas-plugins-voms               x86_64   1.3.5-2.1.sl5              ETICS-registered-build-0e01d1fb-c4e9-40b9-9a9b-55827cca722c-sl5_x86_64_gcc412
                                                                                               85 k
 glite-security-lcmaps                          x86_64   1.4.11-2.sl5               ETICS-registered-build-0e01d1fb-c4e9-40b9-9a9b-55827cca722c-sl5_x86_64_gcc412
                                                                                              282 k
 glite-security-lcmaps-plugins-basic            x86_64   1.4.0-1.sl5                ETICS-registered-build-0e01d1fb-c4e9-40b9-9a9b-55827cca722c-sl5_x86_64_gcc412
                                                                                              125 k
 glite-security-lcmaps-plugins-c-pep            x86_64   1.0.4-2.sl5                ETICS-registered-build-0e01d1fb-c4e9-40b9-9a9b-55827cca722c-sl5_x86_64_gcc412
                                                                                               73 k
 glite-security-lcmaps-plugins-scas-client      x86_64   0.2.11-1.sl5               ETICS-registered-build-0e01d1fb-c4e9-40b9-9a9b-55827cca722c-sl5_x86_64_gcc412
                                                                                              116 k
 glite-security-lcmaps-plugins-verify-proxy     x86_64   1.4.7-1.sl5                ETICS-registered-build-0e01d1fb-c4e9-40b9-9a9b-55827cca722c-sl5_x86_64_gcc412
                                                                                               71 k
 glite-security-lcmaps-plugins-voms             x86_64   1.4.0-1.sl5                ETICS-registered-build-0e01d1fb-c4e9-40b9-9a9b-55827cca722c-sl5_x86_64_gcc412
                                                                                              178 k
 glite-security-saml2-xacml2-c-lib              x86_64   0.0.15-6.sl5               ETICS-registered-build-0e01d1fb-c4e9-40b9-9a9b-55827cca722c-sl5_x86_64_gcc412
                                                                                              3.3 M
 glite-security-voms-api-c                      x86_64   1.9.19-2.sl5               ETICS-registered-build-0e01d1fb-c4e9-40b9-9a9b-55827cca722c-sl5_x86_64_gcc412
                                                                                              3.7 M
 glite-security-voms-api-cpp                    x86_64   1.9.19-2.sl5               ETICS-registered-build-0e01d1fb-c4e9-40b9-9a9b-55827cca722c-sl5_x86_64_gcc412
                                                                                              4.5 M
 glite-yaim-core                                noarch   4.0.13-2                   ETICS-registered-build-0e01d1fb-c4e9-40b9-9a9b-55827cca722c-sl5_x86_64_gcc412
                                                                                              124 k
 glite-yaim-glexec-wn                           noarch   2.0.3-0                    ETICS-registered-build-0e01d1fb-c4e9-40b9-9a9b-55827cca722c-sl5_x86_64_gcc412
                                                                                               15 k
 gpt                                            x86_64   3.2autotools2004_NMI_9.0_x86_64_rhap_5-1
                                                                                    ETICS-registered-build-0e01d1fb-c4e9-40b9-9a9b-55827cca722c-sl5_x86_64_gcc412
                                                                                              883 k
 gridsite-shared                                x86_64   1.5.10.5-3.sl5             ETICS-registered-build-0e01d1fb-c4e9-40b9-9a9b-55827cca722c-sl5_x86_64_gcc412
                                                                                              106 k
 libidn                                         x86_64   0.6.5-1.1                  base      195 k
 perl                                           x86_64   4:5.8.8-32.el5_5.2         updates    12 M
 perl-Compress-Raw-Bzip2                        x86_64   2.031-1.el5.rf             dag       111 k
 perl-Compress-Raw-Zlib                         x86_64   2.030-1.el5.rf             dag       181 k
 perl-Convert-ASN1                              noarch   0.20-1.1                   base       42 k
 perl-Crypt-SSLeay                              x86_64   0.51-11.el5                base       45 k
 perl-Date-Manip                                noarch   5.56-1.el5.rf              dag       211 k
 perl-HTML-Parser                               x86_64   3.55-1.fc6                 base       92 k
 perl-HTML-Tagset                               noarch   3.10-2.1.1                 base       15 k
 perl-IO-Compress                               noarch   2.030-2.el5.rf             dag       243 k
 perl-IO-Socket-SSL                             noarch   1.01-1.fc6                 base       49 k
 perl-LDAP                                      noarch   1:0.33-3.fc6               base      316 k
 perl-Net-SSLeay                                x86_64   1.30-4.fc6                 base      192 k
 perl-TermReadKey                               x86_64   2.30-3.el5.rf              dag        57 k
 perl-URI                                       noarch   1.35-3                     base      116 k
 perl-XML-DOM                                   noarch   1.44-2.el5.rf              dag       188 k
 perl-XML-NamespaceSupport                      noarch   1.09-1.2.1                 base       15 k
 perl-XML-Parser                                x86_64   2.34-6.1.2.2.1             base      210 k
 perl-XML-RegExp                                noarch   0.03-1.2.el5.rf            dag       8.0 k
 perl-XML-SAX                                   noarch   0.14-8                     base       77 k
 perl-libwww-perl                               noarch   5.805-1.1.1                base      376 k
 vdt_globus_essentials                          x86_64   VDT1.10.1x86_64_rhap_5-4   ETICS-registered-build-0e01d1fb-c4e9-40b9-9a9b-55827cca722c-sl5_x86_64_gcc412
                                                                                               13 M

Transaction Summary
====================================================================================================
Install      47 Package(s)
Upgrade       0 Package(s)

Total download size: 42 M

The clean installation was tested by making a local configuration suitable for running GLexec, and running the glexec-lcas-lcmaps-compound-test.sh script found in the GLexec source tree, with local modification to match the setup (such as a test user and pool account mapping).

Upgrade from production

The upgrade test was done by installing the glite-GLEXEC_wn metapackage from production before adding the patch yum repo, The upgrade installation installed the following packages.

====================================================================================================
 Package
    Arch    Version
               Repository                                                                      Size
====================================================================================================
Updating:
 glite-GLEXEC_wn
    x86_64  3.2.4-1.sl5
               ETICS-registered-build-0e01d1fb-c4e9-40b9-9a9b-55827cca722c-sl5_x86_64_gcc412  4.2 k
Installing for dependencies:
 glexec-mkgltempdir
    noarch  0.0.2-1
               ETICS-registered-build-0e01d1fb-c4e9-40b9-9a9b-55827cca722c-sl5_x86_64_gcc412  4.6 k
Updating for dependencies:
 glexec-wrapper-scripts
    noarch  0.0.4-1
               ETICS-registered-build-0e01d1fb-c4e9-40b9-9a9b-55827cca722c-sl5_x86_64_gcc412  4.9 k
 glite-authz-pep-c
    x86_64  1.3.1-1.sl5
               ETICS-registered-build-0e01d1fb-c4e9-40b9-9a9b-55827cca722c-sl5_x86_64_gcc412  247 k
 glite-security-glexec
    x86_64  0.8.1-1.sl5
               ETICS-registered-build-0e01d1fb-c4e9-40b9-9a9b-55827cca722c-sl5_x86_64_gcc412   57 k
 glite-yaim-core
    noarch  4.0.13-2
               ETICS-registered-build-0e01d1fb-c4e9-40b9-9a9b-55827cca722c-sl5_x86_64_gcc412  124 k

Transaction Summary
====================================================================================================
Install       1 Package(s)
Upgrade       5 Package(s)

Total download size: 441 k

Following this, a YAIM configuration was done by calling

/opt/glite/yaim/bin/yaim -c -s siteinfo/site-info.def -n glite-GLEXEC_wn

Yaim output:

    # /opt/glite/yaim/bin/yaim -c -s siteinfo/site-info.def -n GLEXEC_wn
   WARNING: 
   WARNING: *****************************************************************************
   WARNING: Your siteinfo directory is world readable. This is generally a bad idea      
   WARNING: as configuration files may contain passwords and other sensitive information.
   WARNING: *****************************************************************************
   WARNING: 
   INFO: Using site configuration file: siteinfo/site-info.def
   INFO: Sourcing service specific configuration file: siteinfo/services/glite-glexec_wn
   INFO: 
         ###################################################################
         
         .             /'.-. ')
         .     yA,-"-,( ,m,:/ )   .oo.     oo    o      ooo  o.     .oo
         .    /      .-Y a  a Y-.     8. .8'    8'8.     8    8b   d'8
         .   /           ~ ~ /         8'    .8oo88.     8    8  8'  8
         . (_/         '===='          8    .8'     8.   8    8  Y   8
         .   Y,-''-,Yy,-.,/           o8o  o8o    o88o  o8o  o8o    o8o
         .    I_))_) I_))_)
         
         
         current working directory: /root
         site-info.def date: Apr 8 2010 siteinfo/site-info.def
         yaim command: -c -s siteinfo/site-info.def -n GLEXEC_wn
         log file: /opt/glite/yaim/bin/../log/yaimlog
         Mon Nov 15 15:33:45 CET 2010 : /opt/glite/yaim/bin/yaim
         
         Installed YAIM versions:
         glite-yaim-core 4.0.13-2
         glite-yaim-glexec-wn 2.0.3-0
         
         ####################################################################
   INFO: The default location of the grid-env.(c)sh files will be: /opt/glite/etc/profile.d
   INFO: Sourcing the utilities in /opt/glite/yaim/functions/utils
   INFO: Detecting environment
   WARNING: No gLite version has been detected. The variable GLITE_VERSION used by yaim can't be defined.
   WARNING: If you are configuring gLite, please make sure the command glite-version is installed or YAIM may fail to configure things properly.
   INFO: Executing function: config_glexec_wn_users_check 
   INFO: Executing function: config_glexec_wn_log_check 
   INFO: Executing function: config_glexec_wn_check 
   INFO: Executing function: config_glexec_wn_lcaslcmaps_check 
   INFO: Executing function: config_vomsmap_check 
   INFO: Executing function: config_glexec_wn_users_setenv 
   INFO: Executing function: config_glexec_wn_users 
   INFO: Executing function: config_glexec_wn_log_setenv 
   INFO: Executing function: config_glexec_wn_log 
   INFO: Executing function: config_glexec_wn_setenv 
   INFO: Executing function: config_glexec_wn 
   INFO: Generating glexec configuration file /opt/glite/etc/glexec.conf
   INFO: glexec is configured in setuid mode
   INFO: Executing function: config_glexec_wn_lcaslcmaps_setenv 
   INFO: Executing function: config_glexec_wn_lcaslcmaps 
   INFO: creating empty ban_users.db
   INFO: Generating LCAS config file
   INFO: Generating LCMAPS config file
   INFO: glexec is configured to work with SCAS
   INFO: Executing function: config_vomsmap_setenv 
   INFO: Executing function: config_vomsmap 
   INFO: Creating voms grid-map file in /etc/grid-security/voms-grid-mapfile
   INFO: Creating voms groupmap file in /etc/grid-security/groupmapfile
   INFO: No gridmapdir files are created since CONFIG_GRIDMAPDIR=no
   INFO: No gridmapdir files are created since CONFIG_GRIDMAPDIR=no
   INFO: No gridmapdir files are created since CONFIG_GRIDMAPDIR=no
   INFO: No gridmapdir files are created since CONFIG_GRIDMAPDIR=no
   INFO: No gridmapdir files are created since CONFIG_GRIDMAPDIR=no
   INFO: Copying the /etc/grid-security/voms-grid-mapfile in the standard location /etc/grid-security/grid-mapfile
   INFO: Configuration Complete.                                               [  OK  ]
   INFO: YAIM terminated succesfully.

The correct working of GLexec was tested manually, and by running the glexec-lcas-lcmaps-compound-test.sh above. All tests passed.

-- DennisVanDok - 15-Nov-2010

Edit | Attach | Watch | Print version | History: r1 | Backlinks | Raw View | WYSIWYG | More topic actions
Topic revision: r1 - 2010-11-15 - DennisvdExternal
 
    • Cern Search Icon Cern Search
    • TWiki Search Icon TWiki Search
    • Google Search Icon Google Search

    EGEE All webs login

This site is powered by the TWiki collaboration platform Powered by Perl This site is powered by the TWiki collaboration platformCopyright & by the contributing authors. All material on this collaboration platform is the property of the contributing authors.
Ideas, requests, problems regarding TWiki? Ask a support question or Send feedback