CESNET Security Product Team

Links

Subsystems Maintained by the Product Team

  • emi.px
  • emi.gridsite

External Dependencies

EMI-1/2/3

The table bellow gives a list of dependencies and indicates what repository they are currently being installed form.

Package Repository Version
globus-gssapi-gsi-devel EPEL
libxml2-devel sl-security
gsoap EPEL
voms EMI
emi-version EMI
bdii EMI
glite-info-provider-service EMI
glite-yaim-bdii EMI
glite-yaim-core EMI
globus-gss-assist EPEL
globus-usage EPEL
myproxy-libs EPEL
myproxy-admin EPEL
fetch-crl EPEL
c-ares EMI 3rd Party 1.7

gLite 3.2

The table bellow gives a list of dependencies and indicates what repository they are currently being installed form.

Package Repository Version
c-ares gLite externals 1.6.0-1.el5 (recommended 1.7.3-1.sl5, 1.6.0-2.el5 in EPEL)
gpt gLite externals 3.2autotools2004_NMI_9.0_x86_64_rhap_5-1
vdt_globus_essentials gLite externals VDT1.10.1x86_64_rhap_5-4
myproxy gLite externals VDT1.10.1x86_64_rhap_5

gLite 3.1

The table bellow gives a list of dependencies and indicates what repository they are currently being installed form.

Package Repository Version
c-ares ext 1.3.0-4.slc4
myproxy ext VDT1.6.1x86_rhas_4-7
vdt_globus_essentials ext VDT1.6.1x86_rhas_4-9

Package Structure

Package Structure Modifications in EMI-2

Traditional modules have been split into runtime, development and utility packages as mandated by the applicable packaging rules. The resulting module structure for all L&B-relevant packages is shown in the table bellow. New ones are shown in bold.

EMI Product Teams depending on any of those packages for their builds need to change their dependency to the -devel versions of the modules/packages for EMI 2! Run-time dependence on any of these packages must be changed to the -progs version of the modules/packages for EMI 2!

PX/ProxyRenewal
Original Components EMI 1 Package Etics Components since EMI 2 EMI 2 RPMs EMI 2 Debs
emi.px.myproxy-yaim glite-px-myproxy-yaim emi.px.myproxy-yaim glite-px-myproxy-yaim glite-px-myproxy-yaim
emi.px.proxyrenewal glite-px-proxyrenewal emi.px.proxyrenewal
emi.px.proxyrenewal-devel
emi.px.proxyrenewal-libs
emi.px.proxyrenewal-progs
glite-px-proxyrenewal
glite-px-proxyrenewal-devel
glite-px-proxyrenewal-libs
glite-px-proxyrenewal-progs
glite-px-proxyrenewal
libglite-security-proxyrenewal2
libglite-security-proxyrenewal-dev
glite-px-proxyrenewal-progs
emi.px.emi-px emi-px emi.px.emi-px emi-px emi-px
GridSite (Changes for EMI-2 Matterhorn effected on 16 April 2012 highlighted with an underscore)
Original Components EMI 1 Package Etics Components since EMI 2 EMI 2 RPMs EMI 2 Debs
emi.gridsite.1.5-compat gridsite-1.5-compat      
emi.gridsite.apache gridsite-apache emi.gridsite.apache gridsite-apache
gridsite
gridsite-apache
gridsite
emi.gridsite.commands gridsite-commands emi.gridsite.commands gridsite-commands gridsite-commands
emi.gridsite.core gridsite-debuginfo emi.gridsite.core gridsite-debuginfo  
emi.gridsite.devel gridsite-devel emi.gridsite.devel gridsite-devel libgridsite-dev
emi.gridsite.gsexec gridsite-gsexec emi.gridsite.gsexec gridsite-gsexec gridsite-gsexec
emi.gridsite.service-clients gridsite-service-clients emi.gridsite.service-clients gridsite-service-clients gridsite-service-clients
emi.gridsite.services gridsite-services emi.gridsite.services gridsite-services gridsite-services
emi.gridsite.shared gridsite-shared emi.gridsite.libs gridsite-libs libgridsite1.7
emi.gridsite.slashgrid gridsite-slashgrid emi.gridsite.slashgrid gridsite-slashgrid gridsite-slashgrid
GSS/gSOAP-plugin
Original Components EMI 1 Package Etics Components since EMI 2 EMI 2 RPMs EMI 2 Debs
emi.lbjp-common.gss glite-lbjp-common-gss emi.lbjp-common.gss
emi.lbjp-common.gss-devel
glite-lbjp-common-gss
glite-lbjp-common-gss-devel
libglite-security-gss9
libglite-lbjp-common-gss-dev
emi.lbjp-common.gsoap-plugin glite-lbjp-common-gsoap-plugin emi.lbjp-common.gsoap-plugin
emi.lbjp-common.gsoap-plugin-devel
glite-lbjp-common-gsoap-plugin
glite-lbjp-common-gsoap-plugin-devel
libglite-lbjp-common-gsoap-plugin
libglite-lbjp-common-gsoap-plugin-dev

Package Structure Modifications in EMI-3

Package Change in status
gridsite-slashgrid Removed!
gridsite-gsexec Removed!
gridsite (gridsite-apache) gridsite-copy.cgi and gridsite-storage.cgi removed

Dependency Modifications for EMI-3

GridSite

Dependencies. New deps. in bold:

Package Repository Version
canl-c EMI 2.0.0-1
globus-gssapi-gsi EPEL
gsoap EPEL

EMI1, EMI2: Exceptions from Packaging Rules

GridSite

Explaining necessary exceptions from applicable packaging rules.

The affected programs (gsexec and =slashgrid) have special uses that require specific permissions. However, they will not be included in the EMI-3 release so EMI-3 will not suffer from this.

File Exceptions Explanation
/usr/sbin/gsexec setuid-binary
non-standard-executable-perm
gsexec is used by the Apache HTTP Server to switch to another user before executing CGI programs. In order to achieve this, it must run as root. Since the HTTP daemon normally doesn't run as root, the gsexec executable needs the setuid bit set and must be owned by root.
/usr/sbin/slashgrid non-standard-executable-perm
gridsite-slashgrid.x86_64: E: non-standard-executable-perm /usr/sbin/slashgrid 0744
A standard executable should have permission set to 0755. If you get this
message, it means that you have a wrong executable permissions in some files
included in your package. 
/var/spool/slashgrid non-standard-dir-perm
gridsite-slashgrid.x86_64: E: non-standard-dir-perm /var/spool/slashgrid 0700 
A standard directory should have permission set to 0755. If you get this 
message, it means that you have wrong directory permissions in some dirs
included in your package.
/etc/rc.d/init.d/slashgrid non-standard-executable-perm
gridsite-slashgrid.x86_64: E: non-standard-executable-perm /etc/rc.d/init.d/slashgrid 0744
A standard executable should have permission set to 0755. If you get this
message, it means that you have a wrong executable permissions in some files
included in your package.
/etc/rc.d/init.d/slashgrid postin-without-chkconfig
gridsite-slashgrid.x86_64: E: postin-without-chkconfig /etc/rc.d/init.d/slashgrid
The package contains an init script but doesn't call chkconfig in its %post
script.
/etc/rc.d/init.d/slashgrid preun-without-chkconfig
gridsite-slashgrid.x86_64: E: preun-without-chkconfig /etc/rc.d/init.d/slashgrid
The package contains an init script but doesn't call chkconfig in its %preun
script.
/etc/rc.d/init.d/slashgrid no-status-entry
gridsite-slashgrid.x86_64: E: no-status-entry /etc/rc.d/init.d/slashgrid
In your init script (/etc/rc.d/init.d/your_file), you don't have a 'status'
entry, which is necessary for good functionality.

Backward Incompatibilities

EMI-3, GridSite 2.0

  • Unused components removed:
    • gsexec
    • slashgrid
    • gridsite-copy.cgi and gridsite-storage.cgi
  • Major version change and library versioning cleanup: single-component numbering for soname: libgridsite.so.2
Edit | Attach | Watch | Print version | History: r13 < r12 < r11 < r10 < r9 | Backlinks | Raw View | WYSIWYG | More topic actions
Topic revision: r13 - 2012-12-10 - ZdenekSustr
 
    • Cern Search Icon Cern Search
    • TWiki Search Icon TWiki Search
    • Google Search Icon Google Search

    EMI All webs login

This site is powered by the TWiki collaboration platform Powered by PerlCopyright & 2008-2020 by the contributing authors. All material on this collaboration platform is the property of the contributing authors.
Ideas, requests, problems regarding TWiki? Send feedback