PPS Pilot Follow-up Meeting Minutes Tue 23 Jun 2009

  • Date: Tue 23 Jun 2009
  • Agenda: 61392
  • Description: Pilot of glexec/SCAS: check-point
  • Chair: Antonio Retico
  • Home: PpsPilotSCAS


  • PPS: Antonio Retico
  • SA3/Certification: Andy Elwell
  • JRA1/Development: Oscar Koeroo; Mischa Salle
  • Atlas: Jose Caballero
  • LHCb: Absent
  • IN2P3: Apologise
  • Lancaster: Absent
  • FZK: Angela Poschlad

Review of action items (tasks)

SA1/SA3 tasks

Status of the subtasks of TASK:8986 (see them in the PPS tracker ) .

The tasks for SA1 sites were updated. Site administrators are welcome to verify the estimated effort (in person-hours) and to update it if needed.

other tasks

All open actions at PpsPilotSCAS#Tasks_and_actions were reviewed and closed (see individual comments for the update)

Status and results of the pilot service (by VOs and sites)


nothing to report



Antonio: PATCH:3050 (scripts to manage the environment are now available in the repositories at CNAF, hte documentation is available on the pilot wiki pages and the sites have been invited to upgrade on the 17th of June.


Absent. Oscar reported that intense debugging activity at the ite is in progress with good feedback from the site (see later for report). Antonio asked to be kept in the loop or at least to receive updates from time to time

Update received via e-mail from Peter: 1. glexec-wrapper-scripts-0.0.3-1.noarch.rpm is now installed at Lancaster 2. if he agrees, Jose should test the wrapper script for ATLAS at Lancaster


Apologise. Pierre sent the following report via e-mail

I [...] took the time to internally discuss the possibility to consider glexec as a component apart of glite-WN, and so as a component close to the OS part. My colleagues are not really enthusiastic because one point that is strongly disapproved is the use of shared libraries for a setuid-capable executable. By the way, my colleagues would have prefered a glexec statically compiled. That means a WN-specific version of glexec.

Anyway, once back from Avignon, my plan is to start to reinstall from scratch Glexec + WN as proposed by Maarten. We also think that glexec must be separated from the glite-WN.

Following that Antonio suggested that IN2P3 should focus on the deployment issues and be exonerated for the time being from the user testing (environment script)


will install the scripts to manage the environment very soon and notify when done

Antonio: it would be good if testing could be done before the next GDB (8th of June)

Status and results of the development (by developers)

Oscar: we have been doing debugging at LANCASTER for the issue of glexec rejecting the regenerated proxy in case it contains a VOMS attribute that has expired in the meantime. We suspect that the problem is not in glexec but a bug found in the LCAS framework, this is causing a segfault in the VOMS API. VOMS API should fail gracefully so Mischa has opened BUG:52054 against it. Maybe that a workaround is possible at the client side, but investigation is still in progress.

Antonio invited to test solutions at LANCASTER before releasing the patch and demands to be kept informed of the progresses. Until a better understanding of the issue (or of the possible impact in production) is not reached, the newly certified patches 2973 and 2990 will be held in PPS.

Status of the certification (SA3, certification)

PATCH:2973 and PATCH:2990 have been certified and will be soon released to PPS

Open Issues (by VOs, sites, deployment teams)

Two main open issues:

  • deployment at sites running WNs on a user file system (e.g. IN2P3)
  • issue with expired VOMS attribute at LANCASTER still to be understood

Recommendations for release and deployment

The version of the glexec and SCAS currently under certification (PATCH:2973) should be released to production as soon as certified, provided that the issue currently affecting LANCASTER is understood and proved of limited impact.

Decision about termination/extension of the pilot

We will have another check-point on the 1st of July at 16:00 CEST


Edit | Attach | Watch | Print version | History: r3 < r2 < r1 | Backlinks | Raw View | WYSIWYG | More topic actions
Topic revision: r3 - 2009-06-24 - AntonioRetico
    • Cern Search Icon Cern Search
    • TWiki Search Icon TWiki Search
    • Google Search Icon Google Search

    LCG All webs login

This site is powered by the TWiki collaboration platform Powered by PerlCopyright & 2008-2023 by the contributing authors. All material on this collaboration platform is the property of the contributing authors.
or Ideas, requests, problems regarding TWiki? use Discourse or Send feedback