Certification Report for PX EMI-1 RC4 (PX 1.0.9-1, x86, SL5)
Origins
Clean installation
Environment
Clean SL5 installation according to gLite guidelines (CA certificates, ...). EPEL repository installed by calling
cd /etc/yum.repos.d; wget http://download.fedora.redhat.com/pub/epel/5/x86_64/epel-release-5-4.noarch.rpm
; rpm -Uvh epel-release-5*.rpm
.
VOMS installed and configured.
Process
cd /etc/yum.repos.d
wget http://download.fedora.redhat.com/pub/epel/5/x86_64/epel-release-5-4.noarch.rpm
rpm -Uvh epel-release-5*.rpm
cat << EOF > rc4.repo
[EMI-1-RC4]
name=EMI 1 RC4 Repository
baseurl=http://emisoft.web.cern.ch/emisoft/dist/EMI/1/RC4/sl5/\$basearch/
priority=45
protect=1
enabled=1
EOF
wget http://etics-repository.cern.ch/repository/pm/registered/repomd/id/842bec1d-6d4d-4e17-b2e1-bdcd89adb9f5/sl5_x86_64_gcc412EPEL/etics-registered-build-by-id-protect.repo
yum install -y emi-px glite-px-proxyrenewal
cd ~/
mkdir -m 700 yaim
cd yaim
cat << EOF > site-info.def
SITE_NAME=krakonosovo
PX_HOST=`hostname -f`
GRID_AUTHORIZED_RETRIEVERS="\*"
GRID_AUTHORIZED_RENEWERS="`openssl x509 -in /etc/grid-security/hostcert.pem -noout -subject |sed -e 's/subject= //'`"
EOF
/opt/glite/yaim/bin/yaim -c -s ./site-info.def -n glite-PX
mkdir ~glite/.certs
cp /etc/grid-security/host* ~glite/.certs/
chown -R glite ~glite/.certs/
export GLITE_USER=glite
export GLITE_HOST_KEY=/home/glite/.certs/hostkey.pem
export GLITE_HOST_CERT=/home/glite/.certs/hostcert.pem
/etc/init.d/glite-proxy-renewald start
Full output of the installation
[root@delwin ~]# cd /etc/yum.repos.d
[root@delwin yum.repos.d]# wget http://download.fedora.redhat.com/pub/epel/5/x86_64/epel-release-5-4.noarch.rpm
--2011-04-20 11:49:19-- http://download.fedora.redhat.com/pub/epel/5/x86_64/epel-release-5-4.noarch.rpm
Resolving download.fedora.redhat.com... 209.132.181.23, 209.132.181.24, 209.132.181.25, ...
Connecting to download.fedora.redhat.com|209.132.181.23|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 12232 (12K) [application/x-rpm]
Saving to: `epel-release-5-4.noarch.rpm'
100%[======================================================================================================================================================================>] 12,232 32.9K/s in 0.4s
2011-04-20 11:49:20 (32.9 KB/s) - `epel-release-5-4.noarch.rpm' saved [12232/12232]
[root@delwin yum.repos.d]# rpm -Uvh epel-release-5*.rpm
warning: epel-release-5-4.noarch.rpm: Header V3 DSA signature: NOKEY, key ID 217521f6
Preparing... ########################################### [100%]
1:epel-release ########################################### [100%]
[root@delwin yum.repos.d]#
[root@delwin yum.repos.d]# cat << EOF > rc4.repo
> [EMI-1-RC4]
> name=EMI 1 RC4 Repository
> baseurl=http://emisoft.web.cern.ch/emisoft/dist/EMI/1/RC4/sl5/\$basearch/
> priority=45
> protect=1
> enabled=1
> EOF
[root@delwin yum.repos.d]#
[root@delwin yum.repos.d]# wget http://etics-repository.cern.ch/repository/pm/registered/repomd/id/842bec1d-6d4d-4e17-b2e1-bdcd89adb9f5/sl5_x86_64_gcc412EPEL/etics-registered-build-by-id-protect.repo
--2011-04-20 11:49:21-- http://etics-repository.cern.ch/repository/pm/registered/repomd/id/842bec1d-6d4d-4e17-b2e1-bdcd89adb9f5/sl5_x86_64_gcc412EPEL/etics-registered-build-by-id-protect.repo
Resolving etics-repository.cern.ch... 128.142.130.60
Connecting to etics-repository.cern.ch|128.142.130.60|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 873
Saving to: `etics-registered-build-by-id-protect.repo'
100%[======================================================================================================================================================================>] 873 --.-K/s in 0s
2011-04-20 11:49:21 (49.0 MB/s) - `etics-registered-build-by-id-protect.repo' saved [873/873]
[root@delwin yum.repos.d]#
[root@delwin yum.repos.d]# yum install -y emi-px glite-px-proxyrenewal
Loaded plugins: kernel-module
EMI-1-RC4 | 1.9 kB 00:00
EMI-1-RC4/primary_db | 301 kB 00:00
ETICS-registered-build-842bec1d-6d4d-4e17-b2e1-bdcd89adb9f5-sl5_x86_64_gcc412EPEL | 764 B 00:00
ETICS-registered-build-842bec1d-6d4d-4e17-b2e1-bdcd89adb9f5-sl5_x86_64_gcc412EPEL/primary | 2.6 kB 00:00
ETICS-registered-build-842bec1d-6d4d-4e17-b2e1-bdcd89adb9f5-sl5_x86_64_gcc412EPEL 8/8
epel | 3.7 kB 00:00
epel/primary_db | 3.7 MB 00:00
Setting up Install Process
Resolving Dependencies
--> Running transaction check
---> Package emi-px.x86_64 0:1.0.0-1.sl5 set to be updated
--> Processing Dependency: glite-px-myproxy-yaim for package: emi-px
--> Processing Dependency: emi-version for package: emi-px
--> Processing Dependency: myproxy-admin for package: emi-px
--> Processing Dependency: fetch-crl for package: emi-px
--> Processing Dependency: bdii for package: emi-px
--> Processing Dependency: myproxy-server for package: emi-px
--> Processing Dependency: glue-schema for package: emi-px
--> Processing Dependency: glite-info-provider-service for package: emi-px
---> Package glite-px-proxyrenewal.x86_64 0:1.3.19-1.sl5 set to be updated
--> Processing Dependency: voms for package: glite-px-proxyrenewal
--> Processing Dependency: myproxy-libs for package: glite-px-proxyrenewal
--> Processing Dependency: globus-gssapi-gsi for package: glite-px-proxyrenewal
--> Processing Dependency: libvomsapi.so.1()(64bit) for package: glite-px-proxyrenewal
--> Processing Dependency: libmyproxy.so.5()(64bit) for package: glite-px-proxyrenewal
--> Processing Dependency: libltdl.so.3()(64bit) for package: glite-px-proxyrenewal
--> Processing Dependency: libglobus_xio.so.0()(64bit) for package: glite-px-proxyrenewal
--> Processing Dependency: libglobus_usage.so.0()(64bit) for package: glite-px-proxyrenewal
--> Processing Dependency: libglobus_proxy_ssl.so.1()(64bit) for package: glite-px-proxyrenewal
--> Processing Dependency: libglobus_openssl_error.so.0()(64bit) for package: glite-px-proxyrenewal
--> Processing Dependency: libglobus_openssl.so.0()(64bit) for package: glite-px-proxyrenewal
--> Processing Dependency: libglobus_oldgaa.so.0()(64bit) for package: glite-px-proxyrenewal
--> Processing Dependency: libglobus_gssapi_gsi.so.4()(64bit) for package: glite-px-proxyrenewal
--> Processing Dependency: libglobus_gss_assist.so.3()(64bit) for package: glite-px-proxyrenewal
--> Processing Dependency: libglobus_gsi_sysconfig.so.1()(64bit) for package: glite-px-proxyrenewal
--> Processing Dependency: libglobus_gsi_proxy_core.so.0()(64bit) for package: glite-px-proxyrenewal
--> Processing Dependency: libglobus_gsi_credential.so.1()(64bit) for package: glite-px-proxyrenewal
--> Processing Dependency: libglobus_gsi_cert_utils.so.0()(64bit) for package: glite-px-proxyrenewal
--> Processing Dependency: libglobus_gsi_callback.so.0()(64bit) for package: glite-px-proxyrenewal
--> Processing Dependency: libglobus_common.so.0()(64bit) for package: glite-px-proxyrenewal
--> Processing Dependency: libglobus_callout.so.0()(64bit) for package: glite-px-proxyrenewal
--> Running transaction check
---> Package bdii.noarch 0:5.2.3-1 set to be updated
--> Processing Dependency: expect for package: bdii
--> Processing Dependency: openldap-servers for package: bdii
--> Processing Dependency: openldap-clients for package: bdii
---> Package emi-version.x86_64 0:1.0.0-1.sl5 set to be updated
---> Package fetch-crl.noarch 0:2.8.4-2.el5 set to be updated
---> Package glite-info-provider-service.noarch 0:1.5.2-1.el5 set to be updated
---> Package glite-px-myproxy-yaim.x86_64 0:4.1.4-2.sl5 set to be updated
--> Processing Dependency: glite-yaim-core for package: glite-px-myproxy-yaim
--> Processing Dependency: glite-yaim-bdii for package: glite-px-myproxy-yaim
---> Package globus-callout.x86_64 0:0.7-6.el5 set to be updated
--> Processing Dependency: globus-libtool >= 1 for package: globus-callout
---> Package globus-common.x86_64 0:11.6-1.el5 set to be updated
---> Package globus-gsi-callback.x86_64 0:2.8-1.el5 set to be updated
--> Processing Dependency: globus-openssl >= 1 for package: globus-gsi-callback
---> Package globus-gsi-cert-utils.x86_64 0:6.7-1.el5 set to be updated
---> Package globus-gsi-credential.x86_64 0:3.5-1.el5 set to be updated
---> Package globus-gsi-openssl-error.x86_64 0:0.14-6.el5 set to be updated
---> Package globus-gsi-proxy-core.x86_64 0:4.7-1.el5 set to be updated
---> Package globus-gsi-proxy-ssl.x86_64 0:2.3-1.el5 set to be updated
---> Package globus-gsi-sysconfig.x86_64 0:3.1-3.el5 set to be updated
---> Package globus-gss-assist.x86_64 0:5.9-2.el5 set to be updated
---> Package globus-gssapi-gsi.x86_64 0:7.6-1.el5 set to be updated
---> Package globus-openssl-module.x86_64 0:1.3-1.el5 set to be updated
---> Package globus-usage.x86_64 0:1.4-1.el5 set to be updated
---> Package globus-xio.x86_64 0:2.8-2.el5 set to be updated
---> Package glue-schema.noarch 0:2.0.7-1.el5 set to be updated
---> Package libtool-ltdl.x86_64 0:1.5.22-7.el5_4 set to be updated
---> Package myproxy-admin.x86_64 0:5.3-3.el5 set to be updated
--> Processing Dependency: myproxy = 5.3-3.el5 for package: myproxy-admin
--> Processing Dependency: globus-gsi-cert-utils-progs for package: myproxy-admin
---> Package myproxy-libs.x86_64 0:5.3-3.el5 set to be updated
---> Package myproxy-server.x86_64 0:5.3-3.el5 set to be updated
---> Package voms.x86_64 0:2.0.0-1.sl5 set to be updated
--> Running transaction check
---> Package expect.x86_64 0:5.43.0-5.1 set to be updated
---> Package glite-yaim-bdii.noarch 0:4.3.3-1.el5 set to be updated
---> Package glite-yaim-core.noarch 0:5.0.0-1.sl5 set to be updated
---> Package globus-gsi-cert-utils-progs.x86_64 0:6.7-1.el5 set to be updated
--> Processing Dependency: globus-common-setup >= 2 for package: globus-gsi-cert-utils-progs
--> Processing Dependency: globus-openssl-progs >= 1 for package: globus-gsi-cert-utils-progs
---> Package globus-libtool.x86_64 0:1.2-4.el5 set to be updated
---> Package globus-openssl.x86_64 0:5.1-2.el5 set to be updated
---> Package myproxy.x86_64 0:5.3-3.el5 set to be updated
--> Processing Dependency: globus-proxy-utils for package: myproxy
--> Processing Dependency: voms-clients for package: myproxy
---> Package openldap-clients.x86_64 0:2.3.43-12.el5_6.7 set to be updated
--> Processing Dependency: openldap = 2.3.43-12.el5_6.7 for package: openldap-clients
---> Package openldap-servers.x86_64 0:2.3.43-12.el5_6.7 set to be updated
EMI-1-RC4/filelists_db | 215 kB 00:00
ETICS-registered-build-842bec1d-6d4d-4e17-b2e1-bdcd89adb9f5-sl5_x86_64_gcc412EPEL/filelists | 1.3 kB 00:00
epel/filelists_db | 5.2 MB 00:00
sl-security/filelists_db | 3.9 MB 00:01
--> Running transaction check
---> Package globus-common-progs.x86_64 0:11.6-1.el5 set to be updated
---> Package globus-openssl-progs.x86_64 0:5.1-2.el5 set to be updated
---> Package globus-proxy-utils.x86_64 0:3.9-1.el5 set to be updated
--> Processing Dependency: openldap = 2.3.43-12.el5_5.1 for package: openldap-devel
--> Processing Dependency: openldap = 2.3.43-12.el5_5.1 for package: openldap-devel
---> Package openldap.i386 0:2.3.43-12.el5_6.7 set to be updated
---> Package openldap.x86_64 0:2.3.43-12.el5_6.7 set to be updated
---> Package voms-clients.x86_64 0:2.0.0-1.sl5 set to be updated
--> Running transaction check
---> Package openldap-devel.i386 0:2.3.43-12.el5_6.7 set to be updated
---> Package openldap-devel.x86_64 0:2.3.43-12.el5_6.7 set to be updated
--> Finished Dependency Resolution
Beginning Kernel Module Plugin
Finished Kernel Module Plugin
Dependencies Resolved
================================================================================================================================================================================================================
Package Arch Version Repository Size
================================================================================================================================================================================================================
Installing:
emi-px x86_64 1.0.0-1.sl5 EMI-1-RC4 1.6 k
glite-px-proxyrenewal x86_64 1.3.19-1.sl5 ETICS-registered-build-842bec1d-6d4d-4e17-b2e1-bdcd89adb9f5-sl5_x86_64_gcc412EPEL 58 k
Installing for dependencies:
bdii noarch 5.2.3-1 EMI-1-RC4 20 k
emi-version x86_64 1.0.0-1.sl5 EMI-1-RC4 1.9 k
expect x86_64 5.43.0-5.1 sl-base 160 k
fetch-crl noarch 2.8.4-2.el5 epel 24 k
glite-info-provider-service noarch 1.5.2-1.el5 EMI-1-RC4 46 k
glite-px-myproxy-yaim x86_64 4.1.4-2.sl5 EMI-1-RC4 7.9 k
glite-yaim-bdii noarch 4.3.3-1.el5 EMI-1-RC4 9.9 k
glite-yaim-core noarch 5.0.0-1.sl5 EMI-1-RC4 116 k
globus-callout x86_64 0.7-6.el5 epel 15 k
globus-common x86_64 11.6-1.el5 epel 108 k
globus-common-progs x86_64 11.6-1.el5 epel 63 k
globus-gsi-callback x86_64 2.8-1.el5 epel 38 k
globus-gsi-cert-utils x86_64 6.7-1.el5 epel 18 k
globus-gsi-cert-utils-progs x86_64 6.7-1.el5 epel 26 k
globus-gsi-credential x86_64 3.5-1.el5 epel 32 k
globus-gsi-openssl-error x86_64 0.14-6.el5 epel 14 k
globus-gsi-proxy-core x86_64 4.7-1.el5 epel 33 k
globus-gsi-proxy-ssl x86_64 2.3-1.el5 epel 17 k
globus-gsi-sysconfig x86_64 3.1-3.el5 epel 27 k
globus-gss-assist x86_64 5.9-2.el5 epel 30 k
globus-gssapi-gsi x86_64 7.6-1.el5 epel 54 k
globus-libtool x86_64 1.2-4.el5 epel 4.2 k
globus-openssl x86_64 5.1-2.el5 epel 4.6 k
globus-openssl-module x86_64 1.3-1.el5 epel 12 k
globus-openssl-progs x86_64 5.1-2.el5 epel 4.3 k
globus-proxy-utils x86_64 3.9-1.el5 epel 44 k
globus-usage x86_64 1.4-1.el5 epel 15 k
globus-xio x86_64 2.8-2.el5 epel 123 k
glue-schema noarch 2.0.7-1.el5 EMI-1-RC4 33 k
libtool-ltdl x86_64 1.5.22-7.el5_4 sl-base 38 k
myproxy x86_64 5.3-3.el5 epel 82 k
myproxy-admin x86_64 5.3-3.el5 epel 52 k
myproxy-libs x86_64 5.3-3.el5 epel 118 k
myproxy-server x86_64 5.3-3.el5 epel 51 k
openldap-clients x86_64 2.3.43-12.el5_6.7 sl-security 223 k
openldap-servers x86_64 2.3.43-12.el5_6.7 sl-security 2.2 M
voms x86_64 2.0.0-1.sl5 EMI-1-RC4 712 k
voms-clients x86_64 2.0.0-1.sl5 EMI-1-RC4 199 k
Updating for dependencies:
openldap i386 2.3.43-12.el5_6.7 sl-security 296 k
openldap x86_64 2.3.43-12.el5_6.7 sl-security 304 k
openldap-devel i386 2.3.43-12.el5_6.7 sl-security 1.5 M
openldap-devel x86_64 2.3.43-12.el5_6.7 sl-security 1.6 M
Transaction Summary
================================================================================================================================================================================================================
Install 40 Package(s)
Upgrade 4 Package(s)
Total download size: 8.5 M
Downloading Packages:
(1/44): emi-px-1.0.0-1.sl5.x86_64.rpm | 1.6 kB 00:00
(2/44): emi-version-1.0.0-1.sl5.x86_64.rpm | 1.9 kB 00:00
(3/44): globus-libtool-1.2-4.el5.x86_64.rpm | 4.2 kB 00:00
(4/44): globus-openssl-progs-5.1-2.el5.x86_64.rpm | 4.3 kB 00:00
(5/44): globus-openssl-5.1-2.el5.x86_64.rpm | 4.6 kB 00:00
(6/44): glite-px-myproxy-yaim-4.1.4-2.sl5.x86_64.rpm | 7.9 kB 00:00
(7/44): glite-yaim-bdii-4.3.3-1.el5.noarch.rpm | 9.9 kB 00:00
(8/44): globus-openssl-module-1.3-1.el5.x86_64.rpm | 12 kB 00:00
(9/44): globus-gsi-openssl-error-0.14-6.el5.x86_64.rpm | 14 kB 00:00
(10/44): globus-usage-1.4-1.el5.x86_64.rpm | 15 kB 00:00
(11/44): globus-callout-0.7-6.el5.x86_64.rpm | 15 kB 00:00
(12/44): globus-gsi-proxy-ssl-2.3-1.el5.x86_64.rpm | 17 kB 00:00
(13/44): globus-gsi-cert-utils-6.7-1.el5.x86_64.rpm | 18 kB 00:00
(14/44): bdii-5.2.3-1.noarch.rpm | 20 kB 00:00
(15/44): fetch-crl-2.8.4-2.el5.noarch.rpm | 24 kB 00:00
(16/44): globus-gsi-cert-utils-progs-6.7-1.el5.x86_64.rpm | 26 kB 00:00
(17/44): globus-gsi-sysconfig-3.1-3.el5.x86_64.rpm | 27 kB 00:00
(18/44): globus-gss-assist-5.9-2.el5.x86_64.rpm | 30 kB 00:00
(19/44): globus-gsi-credential-3.5-1.el5.x86_64.rpm | 32 kB 00:00
(20/44): glue-schema-2.0.7-1.el5.noarch.rpm | 33 kB 00:00
(21/44): globus-gsi-proxy-core-4.7-1.el5.x86_64.rpm | 33 kB 00:00
(22/44): libtool-ltdl-1.5.22-7.el5_4.x86_64.rpm | 38 kB 00:00
(23/44): globus-gsi-callback-2.8-1.el5.x86_64.rpm | 38 kB 00:00
(24/44): globus-proxy-utils-3.9-1.el5.x86_64.rpm | 44 kB 00:00
(25/44): glite-info-provider-service-1.5.2-1.el5.noarch.rpm | 46 kB 00:00
(26/44): myproxy-server-5.3-3.el5.x86_64.rpm | 51 kB 00:00
(27/44): myproxy-admin-5.3-3.el5.x86_64.rpm | 52 kB 00:00
(28/44): globus-gssapi-gsi-7.6-1.el5.x86_64.rpm | 54 kB 00:00
(29/44): glite-px-proxyrenewal-1.3.19-1.sl5.x86_64.rpm | 58 kB 00:00
(30/44): globus-common-progs-11.6-1.el5.x86_64.rpm | 63 kB 00:00
(31/44): myproxy-5.3-3.el5.x86_64.rpm | 82 kB 00:00
(32/44): globus-common-11.6-1.el5.x86_64.rpm | 108 kB 00:00
(33/44): glite-yaim-core-5.0.0-1.sl5.noarch.rpm | 116 kB 00:00
(34/44): myproxy-libs-5.3-3.el5.x86_64.rpm | 118 kB 00:00
(35/44): globus-xio-2.8-2.el5.x86_64.rpm | 123 kB 00:00
(36/44): expect-5.43.0-5.1.x86_64.rpm | 160 kB 00:00
(37/44): voms-clients-2.0.0-1.sl5.x86_64.rpm | 199 kB 00:00
(38/44): openldap-clients-2.3.43-12.el5_6.7.x86_64.rpm | 223 kB 00:00
(39/44): openldap-2.3.43-12.el5_6.7.i386.rpm | 296 kB 00:00
(40/44): openldap-2.3.43-12.el5_6.7.x86_64.rpm | 304 kB 00:00
(41/44): voms-2.0.0-1.sl5.x86_64.rpm | 712 kB 00:00
(42/44): openldap-devel-2.3.43-12.el5_6.7.i386.rpm | 1.5 MB 00:00
(43/44): openldap-devel-2.3.43-12.el5_6.7.x86_64.rpm | 1.6 MB 00:00
(44/44): openldap-servers-2.3.43-12.el5_6.7.x86_64.rpm | 2.2 MB 00:00
----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
Total 1.0 MB/s | 8.5 MB 00:08
warning: rpmts_HdrFromFdno: Header V3 DSA signature: NOKEY, key ID 217521f6
epel/gpgkey | 1.7 kB 00:00
Importing GPG key 0x217521F6 "Fedora EPEL <epel@fedoraproject.org>" from /etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL
Running rpm_check_debug
Running Transaction Test
Finished Transaction Test
Transaction Test Succeeded
Running Transaction
Installing : libtool-ltdl 1/48
Updating : openldap 2/48
Installing : voms 3/48
Installing : globus-openssl 4/48
Installing : globus-gsi-proxy-ssl 5/48
Installing : globus-libtool 6/48
Installing : globus-common 7/48
Installing : globus-gsi-openssl-error 8/48
Installing : globus-gsi-sysconfig 9/48
Installing : globus-openssl-module 10/48
Installing : globus-gsi-cert-utils 11/48
Installing : globus-gsi-callback 12/48
Installing : globus-gsi-credential 13/48
Installing : globus-gsi-proxy-core 14/48
Installing : globus-gssapi-gsi 15/48
Installing : globus-callout 16/48
Installing : globus-gss-assist 17/48
Installing : globus-xio 18/48
Installing : globus-usage 19/48
Installing : myproxy-libs 20/48
Installing : myproxy-server 21/48
Installing : glue-schema 22/48
Installing : globus-proxy-utils 23/48
Installing : globus-common-progs 24/48
Installing : voms-clients 25/48
Installing : myproxy 26/48
Installing : expect 27/48
Installing : globus-openssl-progs 28/48
Installing : globus-gsi-cert-utils-progs 29/48
Installing : myproxy-admin 30/48
Installing : glite-yaim-core 31/48
Installing : emi-version 32/48
Installing : fetch-crl 33/48
Installing : glite-info-provider-service 34/48
Installing : glite-yaim-bdii 35/48
Updating : openldap 36/48
Installing : openldap-servers 37/48
Installing : openldap-clients 38/48
Installing : glite-px-proxyrenewal 39/48
Installing : bdii 40/48
Installing : glite-px-myproxy-yaim 41/48
Updating : openldap-devel 42/48
Updating : openldap-devel 43/48
Installing : emi-px 44/48
Cleanup : openldap 45/48
Cleanup : openldap 46/48
Cleanup : openldap-devel 47/48
Cleanup : openldap-devel 48/48
Installed:
emi-px.x86_64 0:1.0.0-1.sl5 glite-px-proxyrenewal.x86_64 0:1.3.19-1.sl5
Dependency Installed:
bdii.noarch 0:5.2.3-1 emi-version.x86_64 0:1.0.0-1.sl5 expect.x86_64 0:5.43.0-5.1 fetch-crl.noarch 0:2.8.4-2.el5
glite-info-provider-service.noarch 0:1.5.2-1.el5 glite-px-myproxy-yaim.x86_64 0:4.1.4-2.sl5 glite-yaim-bdii.noarch 0:4.3.3-1.el5 glite-yaim-core.noarch 0:5.0.0-1.sl5
globus-callout.x86_64 0:0.7-6.el5 globus-common.x86_64 0:11.6-1.el5 globus-common-progs.x86_64 0:11.6-1.el5 globus-gsi-callback.x86_64 0:2.8-1.el5
globus-gsi-cert-utils.x86_64 0:6.7-1.el5 globus-gsi-cert-utils-progs.x86_64 0:6.7-1.el5 globus-gsi-credential.x86_64 0:3.5-1.el5 globus-gsi-openssl-error.x86_64 0:0.14-6.el5
globus-gsi-proxy-core.x86_64 0:4.7-1.el5 globus-gsi-proxy-ssl.x86_64 0:2.3-1.el5 globus-gsi-sysconfig.x86_64 0:3.1-3.el5 globus-gss-assist.x86_64 0:5.9-2.el5
globus-gssapi-gsi.x86_64 0:7.6-1.el5 globus-libtool.x86_64 0:1.2-4.el5 globus-openssl.x86_64 0:5.1-2.el5 globus-openssl-module.x86_64 0:1.3-1.el5
globus-openssl-progs.x86_64 0:5.1-2.el5 globus-proxy-utils.x86_64 0:3.9-1.el5 globus-usage.x86_64 0:1.4-1.el5 globus-xio.x86_64 0:2.8-2.el5
glue-schema.noarch 0:2.0.7-1.el5 libtool-ltdl.x86_64 0:1.5.22-7.el5_4 myproxy.x86_64 0:5.3-3.el5 myproxy-admin.x86_64 0:5.3-3.el5
myproxy-libs.x86_64 0:5.3-3.el5 myproxy-server.x86_64 0:5.3-3.el5 openldap-clients.x86_64 0:2.3.43-12.el5_6.7 openldap-servers.x86_64 0:2.3.43-12.el5_6.7
voms.x86_64 0:2.0.0-1.sl5 voms-clients.x86_64 0:2.0.0-1.sl5
Dependency Updated:
openldap.i386 0:2.3.43-12.el5_6.7 openldap.x86_64 0:2.3.43-12.el5_6.7 openldap-devel.i386 0:2.3.43-12.el5_6.7 openldap-devel.x86_64 0:2.3.43-12.el5_6.7
Complete!
[root@delwin yum.repos.d]#
[root@delwin yum.repos.d]#
[root@delwin yum.repos.d]# cd ~/
[root@delwin ~]# mkdir -m 700 yaim
[root@delwin ~]# cd yaim
[root@delwin yaim]#
[root@delwin yaim]# cat << EOF > site-info.def
> SITE_NAME=krakonosovo
> PX_HOST=`hostname -f`
> GRID_AUTHORIZED_RETRIEVERS="\*"
> GRID_AUTHORIZED_RENEWERS="`openssl x509 -in /etc/grid-security/hostcert.pem -noout -subject |sed -e 's/subject= //'`"
> EOF
[root@delwin yaim]#
[root@delwin yaim]# /opt/glite/yaim/bin/yaim -c -s ./site-info.def -n glite-PX
INFO: Using site configuration file: ./site-info.def
INFO:
###################################################################
. /'.-. ')
. yA,-"-,( ,m,:/ ) .oo. oo o ooo o. .oo
. / .-Y a a Y-. 8. .8' 8'8. 8 8b d'8
. / ~ ~ / 8' .8oo88. 8 8 8' 8
. (_/ '====' 8 .8' 8. 8 8 Y 8
. Y,-''-,Yy,-.,/ o8o o8o o88o o8o o8o o8o
. I_))_) I_))_)
current working directory: /root/yaim
site-info.def date: Apr 20 11:52 ./site-info.def
yaim command: -c -s ./site-info.def -n glite-PX
log file: /opt/glite/yaim/bin/../log/yaimlog
Wed Apr 20 11:52:39 CEST 2011 : /opt/glite/yaim/bin/yaim
Installed YAIM versions:
glite-px-myproxy-yaim -
glite-yaim-bdii 4.3.3-1
glite-yaim-core 5.0.0-1
####################################################################
INFO: The default location of the grid-env.(c)sh files will be: /usr/libexec
INFO: Sourcing the utilities in /opt/glite/yaim/functions/utils
INFO: Detecting environment
INFO: Executing function: config_host_certs_check
INFO: Executing function: config_edgusers_check
INFO: Executing function: config_proxy_server_check
INFO: Executing function: config_bdii_5.2_check
INFO: Executing function: config_info_service_px_check
INFO: Executing function: config_crl
INFO: Now updating the CRLs - this may take a few minutes...
INFO: Executing function: config_host_certs
INFO: Executing function: config_edgusers
INFO: Executing function: config_proxy_server_setenv
INFO: Executing function: config_proxy_server
INFO: Reloading MyProxy server
INFO: MyProxy server not running so starting
Starting myproxy-server: [ OK ]
INFO: Executing function: config_bdii_5.2
Stopping BDII: BDII already stopped
Starting BDII slapd: [ OK ]
Starting BDII update process: [ OK ]
INFO: Executing function: config_info_service_px_setenv
INFO: Executing function: config_info_service_px
INFO: Configuration Complete. [ OK ]
INFO: YAIM terminated succesfully.
[root@delwin yaim]#
[root@delwin yaim]# mkdir ~glite/.certs
[root@delwin yaim]# cp /etc/grid-security/host* ~glite/.certs/
[root@delwin yaim]# chown -R glite ~glite/.certs/
[root@delwin yaim]#
[root@delwin yaim]# export GLITE_USER=glite
[root@delwin yaim]# export GLITE_HOST_KEY=/home/glite/.certs/hostkey.pem
[root@delwin yaim]# export GLITE_HOST_CERT=/home/glite/.certs/hostcert.pem
[root@delwin yaim]#
[root@delwin yaim]# /etc/init.d/glite-proxy-renewald start
Starting ProxyRenewal Daemon: glite-proxy-renewd ... done
Tests
Functionality Tests
Process
su - glite
JOBID=https://fake.job.id/xxx
myproxy-init -s localhost --certfile /tmp/usercred.p12 --keyfile /tmp/usercred.p12 -d -n
voms-proxy-init -valid 0:40 -voms voce -key /tmp/usercred.p12 -cert /tmp/usercred.p12 -vomses /etc/vomses
ORIG_PROXY=`voms-proxy-info | grep -E "^path" | sed 's/^path\s*:\s*//'`
REGISTERED_PROXY=`glite-proxy-renew -s localhost -f $ORIG_PROXY -j $JOBID start`
printf "\tProxy:\t$ORIG_PROXY\n\tRenew:\t$REGISTERED_PROXY\n"; \
printf "Registered proxy -- "; \
voms-proxy-info -file $REGISTERED_PROXY | grep timeleft; \
printf "sleeping..."; \
sleep 600; \
printf "\nRegistered proxy -- ";\
voms-proxy-info -file $REGISTERED_PROXY | grep timeleft; \
printf "Original proxy -- "; \
voms-proxy-info -file $ORIG_PROXY | grep timeleft; \
printf "\nRegistered proxy -- "; \
voms-proxy-info -file $REGISTERED_PROXY -fqan -actimeleft; \
printf "Original proxy -- "; \
voms-proxy-info -file $ORIG_PROXY -fqan -actimeleft; \
printf "\nRegistered proxy -- "; \
voms-proxy-info -file $REGISTERED_PROXY -identity; \
printf "Original proxy -- ";\
voms-proxy-info -file $ORIG_PROXY -identity; \
glite-proxy-renew -j $JOBID stop; \
ls $REGISTERED_PROXY 2>&1 | grep 'No such file or directory' > /dev/null && echo OK
Output
[glite@delwin ~]$ printf "\tProxy:\t$ORIG_PROXY\n\tRenew:\t$REGISTERED_PROXY\n"; \
> printf "Registered proxy -- "; \
> voms-proxy-info -file $REGISTERED_PROXY | grep timeleft; \
> printf "sleeping..."; \
> sleep 600; \
> printf "\nRegistered proxy -- ";\
> voms-proxy-info -file $REGISTERED_PROXY | grep timeleft; \
> printf "Original proxy -- "; \
> voms-proxy-info -file $ORIG_PROXY | grep timeleft; \
> printf "\nRegistered proxy -- "; \
> voms-proxy-info -file $REGISTERED_PROXY -fqan -actimeleft; \
> printf "Original proxy -- "; \
> voms-proxy-info -file $ORIG_PROXY -fqan -actimeleft; \
> printf "\nRegistered proxy -- "; \
> voms-proxy-info -file $REGISTERED_PROXY -identity; \
> printf "Original proxy -- ";\
> voms-proxy-info -file $ORIG_PROXY -identity; \
> glite-proxy-renew -j $JOBID stop; \
> ls $REGISTERED_PROXY 2>&1 | grep 'No such file or directory' > /dev/null && echo OK
Proxy: /tmp/x509up_u155
Renew: /var/glite/spool/glite-renewd/46f28dc374755cd61d02c581fea41d04.0
Registered proxy -- timeleft : 0:39:51
sleeping...
Registered proxy -- timeleft : 9:54:40
Original proxy -- timeleft : 0:29:51
Registered proxy -- 42878
/voce/Role=NULL/Capability=NULL
Original proxy -- 1775
/voce/Role=NULL/Capability=NULL
Registered proxy -- /DC=org/DC=terena/DC=tcs/C=CZ/O=CESNET/CN=Zdenek Sustr 4040/CN=1492777351/CN=1481216078/CN=369499049
Original proxy -- /DC=org/DC=terena/DC=tcs/C=CZ/O=CESNET/CN=Zdenek Sustr 4040
OK
Unit Tests
Module
emi.px.proxyrenewal
is not covered by unit tests. For other modules in the
emi.px
substyem unit tests are not applicable at all.
Upgrade from production
N/A
Resolution of Linked Bugs
N/A
--
ZdenekSustr - 20-Apr-2011