TWiki>
EGEE Web>SA3>CertificationReports>CertificationReportpatch4532 (2010-11-15, DennisvdExternal)
EditAttachPDF
EGEE Web>SA3>CertificationReports>CertificationReportpatch4532 (2010-11-15, DennisvdExternal) EditAttachPDFCertification report patch 4532
Author(s): Dennis van Dok, dennisvd@nikhef.nl Patch: https://savannah.cern.ch/patch/?4532
, glexec 0.8 update
Outcome: Certified
This is a follow-up to patch 4395, which was recalled because the voms-api version in the repository has a bug. For this patch, only a straighforward deployment is tested as this is essentially the same as in the previous patch.
Clean installation
Installation was done on a minimal, up-to-date CentOS 5.5 x86_64 VM.- Added yum repo from savannah patch. http://etics-repository.cern.ch/repository/pm/registered/repomd/id/0e01d1fb-c4e9-40b9-9a9b-55827cca722c/sl5_x86_64_gcc412 With protect=1. http://etics-repository.cern.ch/repository/pm/registered/repomd/id/0e01d1fb-c4e9-40b9-9a9b-55827cca722c/sl5_x86_64_gcc412/etics-registered-build-by-id-protect.repo
- installed lcg-CA root certificates.
- Installed glexec with
yum install glite-GLEXEC_wn.
====================================================================================================
Package Arch Version Repository
Size
====================================================================================================
Installing:
glite-GLEXEC_wn x86_64 3.2.4-1.sl5 ETICS-registered-build-0e01d1fb-c4e9-40b9-9a9b-55827cca722c-sl5_x86_64_gcc412
4.2 k
Installing for dependencies:
curl x86_64 7.15.5-9.el5 base 230 k
edg-mkgridmap noarch 3.0.0-1 ETICS-registered-build-0e01d1fb-c4e9-40b9-9a9b-55827cca722c-sl5_x86_64_gcc412
37 k
glexec-mkgltempdir noarch 0.0.2-1 ETICS-registered-build-0e01d1fb-c4e9-40b9-9a9b-55827cca722c-sl5_x86_64_gcc412
4.6 k
glexec-wrapper-scripts noarch 0.0.4-1 ETICS-registered-build-0e01d1fb-c4e9-40b9-9a9b-55827cca722c-sl5_x86_64_gcc412
4.9 k
glite-authz-pep-c x86_64 1.3.1-1.sl5 ETICS-registered-build-0e01d1fb-c4e9-40b9-9a9b-55827cca722c-sl5_x86_64_gcc412
247 k
glite-security-glexec x86_64 0.8.1-1.sl5 ETICS-registered-build-0e01d1fb-c4e9-40b9-9a9b-55827cca722c-sl5_x86_64_gcc412
57 k
glite-security-lcas x86_64 1.3.11-3.1.sl5 ETICS-registered-build-0e01d1fb-c4e9-40b9-9a9b-55827cca722c-sl5_x86_64_gcc412
89 k
glite-security-lcas-interface x86_64 1.3.11-1.sl5 ETICS-registered-build-0e01d1fb-c4e9-40b9-9a9b-55827cca722c-sl5_x86_64_gcc412
11 k
glite-security-lcas-plugins-basic x86_64 1.3.2-3.sl5 ETICS-registered-build-0e01d1fb-c4e9-40b9-9a9b-55827cca722c-sl5_x86_64_gcc412
70 k
glite-security-lcas-plugins-check-executable x86_64 1.2.1-3.sl5 ETICS-registered-build-0e01d1fb-c4e9-40b9-9a9b-55827cca722c-sl5_x86_64_gcc412
12 k
glite-security-lcas-plugins-voms x86_64 1.3.5-2.1.sl5 ETICS-registered-build-0e01d1fb-c4e9-40b9-9a9b-55827cca722c-sl5_x86_64_gcc412
85 k
glite-security-lcmaps x86_64 1.4.11-2.sl5 ETICS-registered-build-0e01d1fb-c4e9-40b9-9a9b-55827cca722c-sl5_x86_64_gcc412
282 k
glite-security-lcmaps-plugins-basic x86_64 1.4.0-1.sl5 ETICS-registered-build-0e01d1fb-c4e9-40b9-9a9b-55827cca722c-sl5_x86_64_gcc412
125 k
glite-security-lcmaps-plugins-c-pep x86_64 1.0.4-2.sl5 ETICS-registered-build-0e01d1fb-c4e9-40b9-9a9b-55827cca722c-sl5_x86_64_gcc412
73 k
glite-security-lcmaps-plugins-scas-client x86_64 0.2.11-1.sl5 ETICS-registered-build-0e01d1fb-c4e9-40b9-9a9b-55827cca722c-sl5_x86_64_gcc412
116 k
glite-security-lcmaps-plugins-verify-proxy x86_64 1.4.7-1.sl5 ETICS-registered-build-0e01d1fb-c4e9-40b9-9a9b-55827cca722c-sl5_x86_64_gcc412
71 k
glite-security-lcmaps-plugins-voms x86_64 1.4.0-1.sl5 ETICS-registered-build-0e01d1fb-c4e9-40b9-9a9b-55827cca722c-sl5_x86_64_gcc412
178 k
glite-security-saml2-xacml2-c-lib x86_64 0.0.15-6.sl5 ETICS-registered-build-0e01d1fb-c4e9-40b9-9a9b-55827cca722c-sl5_x86_64_gcc412
3.3 M
glite-security-voms-api-c x86_64 1.9.19-2.sl5 ETICS-registered-build-0e01d1fb-c4e9-40b9-9a9b-55827cca722c-sl5_x86_64_gcc412
3.7 M
glite-security-voms-api-cpp x86_64 1.9.19-2.sl5 ETICS-registered-build-0e01d1fb-c4e9-40b9-9a9b-55827cca722c-sl5_x86_64_gcc412
4.5 M
glite-yaim-core noarch 4.0.13-2 ETICS-registered-build-0e01d1fb-c4e9-40b9-9a9b-55827cca722c-sl5_x86_64_gcc412
124 k
glite-yaim-glexec-wn noarch 2.0.3-0 ETICS-registered-build-0e01d1fb-c4e9-40b9-9a9b-55827cca722c-sl5_x86_64_gcc412
15 k
gpt x86_64 3.2autotools2004_NMI_9.0_x86_64_rhap_5-1
ETICS-registered-build-0e01d1fb-c4e9-40b9-9a9b-55827cca722c-sl5_x86_64_gcc412
883 k
gridsite-shared x86_64 1.5.10.5-3.sl5 ETICS-registered-build-0e01d1fb-c4e9-40b9-9a9b-55827cca722c-sl5_x86_64_gcc412
106 k
libidn x86_64 0.6.5-1.1 base 195 k
perl x86_64 4:5.8.8-32.el5_5.2 updates 12 M
perl-Compress-Raw-Bzip2 x86_64 2.031-1.el5.rf dag 111 k
perl-Compress-Raw-Zlib x86_64 2.030-1.el5.rf dag 181 k
perl-Convert-ASN1 noarch 0.20-1.1 base 42 k
perl-Crypt-SSLeay x86_64 0.51-11.el5 base 45 k
perl-Date-Manip noarch 5.56-1.el5.rf dag 211 k
perl-HTML-Parser x86_64 3.55-1.fc6 base 92 k
perl-HTML-Tagset noarch 3.10-2.1.1 base 15 k
perl-IO-Compress noarch 2.030-2.el5.rf dag 243 k
perl-IO-Socket-SSL noarch 1.01-1.fc6 base 49 k
perl-LDAP noarch 1:0.33-3.fc6 base 316 k
perl-Net-SSLeay x86_64 1.30-4.fc6 base 192 k
perl-TermReadKey x86_64 2.30-3.el5.rf dag 57 k
perl-URI noarch 1.35-3 base 116 k
perl-XML-DOM noarch 1.44-2.el5.rf dag 188 k
perl-XML-NamespaceSupport noarch 1.09-1.2.1 base 15 k
perl-XML-Parser x86_64 2.34-6.1.2.2.1 base 210 k
perl-XML-RegExp noarch 0.03-1.2.el5.rf dag 8.0 k
perl-XML-SAX noarch 0.14-8 base 77 k
perl-libwww-perl noarch 5.805-1.1.1 base 376 k
vdt_globus_essentials x86_64 VDT1.10.1x86_64_rhap_5-4 ETICS-registered-build-0e01d1fb-c4e9-40b9-9a9b-55827cca722c-sl5_x86_64_gcc412
13 M
Transaction Summary
====================================================================================================
Install 47 Package(s)
Upgrade 0 Package(s)
Total download size: 42 M
The clean installation was tested by making a local configuration suitable for running GLexec, and running the glexec-lcas-lcmaps-compound-test.sh script found in the GLexec source tree, with local modification to match the setup (such as a test user and pool account mapping).
Upgrade from production
The upgrade test was done by installing theglite-GLEXEC_wn metapackage from production before adding the patch yum repo, The upgrade installation installed the following packages.
====================================================================================================
Package
Arch Version
Repository Size
====================================================================================================
Updating:
glite-GLEXEC_wn
x86_64 3.2.4-1.sl5
ETICS-registered-build-0e01d1fb-c4e9-40b9-9a9b-55827cca722c-sl5_x86_64_gcc412 4.2 k
Installing for dependencies:
glexec-mkgltempdir
noarch 0.0.2-1
ETICS-registered-build-0e01d1fb-c4e9-40b9-9a9b-55827cca722c-sl5_x86_64_gcc412 4.6 k
Updating for dependencies:
glexec-wrapper-scripts
noarch 0.0.4-1
ETICS-registered-build-0e01d1fb-c4e9-40b9-9a9b-55827cca722c-sl5_x86_64_gcc412 4.9 k
glite-authz-pep-c
x86_64 1.3.1-1.sl5
ETICS-registered-build-0e01d1fb-c4e9-40b9-9a9b-55827cca722c-sl5_x86_64_gcc412 247 k
glite-security-glexec
x86_64 0.8.1-1.sl5
ETICS-registered-build-0e01d1fb-c4e9-40b9-9a9b-55827cca722c-sl5_x86_64_gcc412 57 k
glite-yaim-core
noarch 4.0.13-2
ETICS-registered-build-0e01d1fb-c4e9-40b9-9a9b-55827cca722c-sl5_x86_64_gcc412 124 k
Transaction Summary
====================================================================================================
Install 1 Package(s)
Upgrade 5 Package(s)
Total download size: 441 k
Following this, a YAIM configuration was done by calling
/opt/glite/yaim/bin/yaim -c -s siteinfo/site-info.def -n glite-GLEXEC_wnYaim output:
# /opt/glite/yaim/bin/yaim -c -s siteinfo/site-info.def -n GLEXEC_wn
WARNING:
WARNING: *****************************************************************************
WARNING: Your siteinfo directory is world readable. This is generally a bad idea
WARNING: as configuration files may contain passwords and other sensitive information.
WARNING: *****************************************************************************
WARNING:
INFO: Using site configuration file: siteinfo/site-info.def
INFO: Sourcing service specific configuration file: siteinfo/services/glite-glexec_wn
INFO:
###################################################################
. /'.-. ')
. yA,-"-,( ,m,:/ ) .oo. oo o ooo o. .oo
. / .-Y a a Y-. 8. .8' 8'8. 8 8b d'8
. / ~ ~ / 8' .8oo88. 8 8 8' 8
. (_/ '====' 8 .8' 8. 8 8 Y 8
. Y,-''-,Yy,-.,/ o8o o8o o88o o8o o8o o8o
. I_))_) I_))_)
current working directory: /root
site-info.def date: Apr 8 2010 siteinfo/site-info.def
yaim command: -c -s siteinfo/site-info.def -n GLEXEC_wn
log file: /opt/glite/yaim/bin/../log/yaimlog
Mon Nov 15 15:33:45 CET 2010 : /opt/glite/yaim/bin/yaim
Installed YAIM versions:
glite-yaim-core 4.0.13-2
glite-yaim-glexec-wn 2.0.3-0
####################################################################
INFO: The default location of the grid-env.(c)sh files will be: /opt/glite/etc/profile.d
INFO: Sourcing the utilities in /opt/glite/yaim/functions/utils
INFO: Detecting environment
WARNING: No gLite version has been detected. The variable GLITE_VERSION used by yaim can't be defined.
WARNING: If you are configuring gLite, please make sure the command glite-version is installed or YAIM may fail to configure things properly.
INFO: Executing function: config_glexec_wn_users_check
INFO: Executing function: config_glexec_wn_log_check
INFO: Executing function: config_glexec_wn_check
INFO: Executing function: config_glexec_wn_lcaslcmaps_check
INFO: Executing function: config_vomsmap_check
INFO: Executing function: config_glexec_wn_users_setenv
INFO: Executing function: config_glexec_wn_users
INFO: Executing function: config_glexec_wn_log_setenv
INFO: Executing function: config_glexec_wn_log
INFO: Executing function: config_glexec_wn_setenv
INFO: Executing function: config_glexec_wn
INFO: Generating glexec configuration file /opt/glite/etc/glexec.conf
INFO: glexec is configured in setuid mode
INFO: Executing function: config_glexec_wn_lcaslcmaps_setenv
INFO: Executing function: config_glexec_wn_lcaslcmaps
INFO: creating empty ban_users.db
INFO: Generating LCAS config file
INFO: Generating LCMAPS config file
INFO: glexec is configured to work with SCAS
INFO: Executing function: config_vomsmap_setenv
INFO: Executing function: config_vomsmap
INFO: Creating voms grid-map file in /etc/grid-security/voms-grid-mapfile
INFO: Creating voms groupmap file in /etc/grid-security/groupmapfile
INFO: No gridmapdir files are created since CONFIG_GRIDMAPDIR=no
INFO: No gridmapdir files are created since CONFIG_GRIDMAPDIR=no
INFO: No gridmapdir files are created since CONFIG_GRIDMAPDIR=no
INFO: No gridmapdir files are created since CONFIG_GRIDMAPDIR=no
INFO: No gridmapdir files are created since CONFIG_GRIDMAPDIR=no
INFO: Copying the /etc/grid-security/voms-grid-mapfile in the standard location /etc/grid-security/grid-mapfile
INFO: Configuration Complete. [ OK ]
INFO: YAIM terminated succesfully.
The correct working of GLexec was tested manually, and by running the glexec-lcas-lcmaps-compound-test.sh above. All tests passed.
-- DennisVanDok - 15-Nov-2010 Edit | Attach | Topic revision: r1 - 2010-11-15 - DennisvdExternal
- EGEE Web
- EGEE Web Home
- gLite
- ProductTeams
- SA3
- JRA1
- TMB
- EMT
- SA1
- SA2
- NA2
- NA4
- EGEE-UIG
- List of registered projects
- List of EGEE-RP interactions
- Changes
- Index
- Search
Main.WebList
 |
|
Copyright &© by the contributing authors. All material on this collaboration platform is the property of the contributing authors. Ideas, requests, problems regarding TWiki? Ask a support question or Send feedback