#5117: [vdt-support #-1] Open Science Grid: New certificates distribution has a problem ISSUE=6557 PROJ=71

When replying, type your text above this line.
----------------------------------------------
This message is to let you know that Open Science Grid ticket 6557 "New certificates distribution has a problem" which is assigned to you, was updated on 04/01/2009 at 14:26:13 with the following information:

FootPrints Ticket Description:
Assigning to VDT.

For complete ticket details, click
'https://oim.grid.iu.edu/gocticket/viewer?id=6557'

Assignees: OSG Support Centers, VDT, Arvind Gopu, Rob Quick
Status: Support Agency
Originating VO Support Center: USATLAS
Destination VO Support Center: other
Originating Ticket Number:
Destination Ticket Number:

--
Please submit problems, requests, and questions at:
https://oim.grid.iu.edu/gocticket/


Thank You,
OSG Grid Operations Center
goc@opensciencegrid.org, 317-278-9699
Visit the OSG Support Page:
http://www.opensciencegrid.org/ops
RSS: http://www.grid.iu.edu/news

When replying, type your text above this line.
----------------------------------------------
This message is to let you know that Open Science Grid ticket 6557 "New certificates distribution has a problem" which is assigned to you, was updated on 2009-04-01 at 14:36:05 with the following information:

FootPrints Ticket Description:
Entered on 04/01/2009 at 14:30:12 by VDT:
Greetings from the VDT support system!

This message was generated automatically in response to the creation of a
ticket regarding:

[vdt-support #-1] Open Science Grid: New certificates distribution has a problem ISSUE=6557 PROJ=71

Your original request is copied below for reference.

There is no need to reply to this message right now -- someone from the VDT
team will respond to you as soon as possible. If you wish to view your
support ticket online, visit:

http://crt.cs.wisc.edu/Ticket/Display.html?user=guest&pass=guest&id=5117

Your ticket has been assigned an ID as follows:

[vdt-support #5117]

Please include the ticket ID in the subject line of all future email about
this issue. To do so, you may reply to this message.

Thank you for your interest in the VDT.

vdt-support@opensciencegrid.org

-------------------------------------------------------------------------
[Duplicate message snipped]

Entered on 04/01/2009 at 14:26:13 by Rob Quick:
Assigning to VDT.

Entered on 03/31/2009 at 20:23:01 by Jim Basney:
Arvind,

I don't think the CA distribution is the issue. It looks to me like the behavior of
vdt-update-certs changed. Please assign this to the VDT team.

Thanks,
Jim

Entered on 03/31/2009 at 20:09:15 by Arvind Gopu:
Jim,

Bob Ball at Michigan is asking about the directory structure of our CAcert distribution. Would it be acceptable to have the tarballs untar into a certificates-N.n directory name? If yes, can you follow that structure from the next release?

Cheers,
Arvind

Entered on 03/19/2009 at 13:09:33 by Arvind Gopu:
Jim,

Bob Ball at Michigan is asking about the directory structure of our CAcert distribution. Would it be acceptable to have the tarballs untar into a certificates-N.n directory name? If yes, can you follow that structure from the next release?

Cheers,
Arvind

PS: Oops, Bob, this ticket ticket seems to have escaped my eye last week (I never got the ticket system email for some reason).

Entered on 03/13/2009 at 19:31:46 by Christopher Pipes:
We distribute certificates out of a central location in afs, replicating the RW
volume to differently-named RO volumes for use throughout our distributed system.

In some recent release of the certificates distribution, what used to be a relative
link was changed to be an absolute path link, and this has (once again) broken our
certificate distribution here.

For example, the RW path is
/afs/atlas.umich.edu/Certficates
and within this directory, it used to be that the link named "certificates" would
point to, for example, "certificates-1.4".

Now, this link "certificates" points to the absolute path
"/afs/atlas.umich.edu/Certificates/certificates-1.4" and this defeats the entire
purpose of having RO volumes as the RO mount points are at
"/afs/atlas.umich.edu/OSG_certificates".

Can this be repaired? Does it HAVE to be such an absolute link where the previous
relative link was much more flexible?

Thanks,
bob

Assignees: OSG Support Centers, VDT, Arvind Gopu, Rob Quick, CC:jbasney@ncsa.uiuc.edu
Status: Support Agency
Originating VO Support Center: USATLAS
Destination VO Support Center: other
Originating Ticket Number:
Destination Ticket Number:

Please submit problems, requests, and questions at:
https://oim.grid.iu.edu/gocticket/


Thank You,
OSG Grid Operations Center
goc@opensciencegrid.org, 317-278-9699
Visit the OSG Support Page:
http://www.opensciencegrid.org/ops
RSS: http://www.grid.iu.edu/news

When replying, type your text above this line.
----------------------------------------------
This message is to let you know that Open Science Grid ticket 6557 "New certificates distribution has a problem" which is assigned to you, was updated on 04/01/2009 at 15:12:12 with the following information:

FootPrints Ticket Description:
This is the current setup:
[gate01:OSG100]# vdt-version
You have installed a subset of VDT version 1.10.1j:
Apache HTTPD 2.2.9
gLite CEMon Server 1.9.1-0
CA Certificates 1.5 (includes IGTF 1.28 CAs)
Condor Cron For OSG-RSV 7.0.4
dccp (dCache client) 1.8.0-4
EDG Make Gridmap 3.0.0
Fetch CRL 2.6.6
Generic Information Provider 1.0.1
Globus Toolkit, pre web-services, client 4.0.7
Globus Toolkit, pre web-services, server 4.0.7
Globus Toolkit, web-services, client 4.0.7
Globus Toolkit, web-services, server 4.0.7
GLUE Schema 1.3
GPT 3.2autotools2004-NMI-9.0
Gratia Condor Probe 0.34.9-1
Gratia Metric Probe 0.34.9-1
GSI-Enabled OpenSSH 4.3
Grid User Management System (GUMS) Client 1.2.16
Java 5 SDK 1.5.0_16
Logrotate 3.7
MonALISA 1.8.6
MyProxy 4.2
MySQL 4.1.22
MySQL Connector/J 5.0.6
OSG Resource and Service Validation (RSV) 2.3.4
OSG Resource and Service Validation (RSV) Probes 2.3.4
Pegaus Worker Package 2.1.0
PPDG Cert Scripts 2.6
PRIMA Authorization Module 0.7.1
PRIMA Authorization Module For GT4 Web Services 0.1.2
RLS, client 3.0.041021
SRM Fermi Client 1.8.0-15p8
SRM Berkeley Client 2.2.0.11.a
syslog-ng 2.0.8
Apache Tomcat 5.5.25
UberFTP 1.27
vdt-update-certs 2.2
Verify GIP output for CEMon 1.3
Wget 1.11

Since September:
EDT 2008

vdt-untar: CA-Certificates-Updater-1.10.1.tar.gz
vdt-untar: logging files to
/opt/OSG100/vdt/etc/package_data/CA-Certificates-Updater-
Questions.filelist
vdt-untar: fixing binaries with RPATH in
'/opt/OSG100/vdt/extract/CA-Certificates-Upd
ater-1.10.1.tar.gz-unpacked'

At the time of that install, and afterwards, this was not an absolute
link, it was a relative link. I don't know when it switched to being an
absolute link, I did not pay careful attention to that. Current
certificates are in certificates-1.5. The 1.4 were absolute back in the
beginning of March.

bob

Open Science Grid FootPrints wrote:

For complete ticket details, click
'https://oim.grid.iu.edu/gocticket/viewer?id=6557'

Assignees: OSG Support Centers, VDT, Arvind Gopu, Rob Quick
Status: Support Agency
Originating VO Support Center: USATLAS
Destination VO Support Center: other
Originating Ticket Number:
Destination Ticket Number:

--
Please submit problems, requests, and questions at:
https://oim.grid.iu.edu/gocticket/


Thank You,
OSG Grid Operations Center
goc@opensciencegrid.org, 317-278-9699
Visit the OSG Support Page:
http://www.opensciencegrid.org/ops
RSS: http://www.grid.iu.edu/news

When replying, type your text above this line.
----------------------------------------------
This message is to let you know that Open Science Grid ticket 6557 "New certificates distribution has a problem" which is assigned to you, was updated on 04/08/2009 at 15:15:12 with the following information:

FootPrints Ticket Description:
Hi Bob,
We are going to look into making this change in an upcoming release to
1.10.1. We are finishing up the work for a large update that is coming
in the near future, and this is on our list after that is released.

Thanks,
scot

--
View ticket at <http://crt.cs.wisc.edu/Ticket/Display.html?user=guest&pass=guest&id=5117>
VDT Support: vdt-support@opensciencegrid.org

For complete ticket details, click
'https://oim.grid.iu.edu/gocticket/viewer?id=6557'

Assignees: OSG Support Centers, VDT, Arvind Gopu
Status: Support Agency
Originating VO Support Center: USATLAS
Destination VO Support Center: other
Originating Ticket Number:
Destination Ticket Number:

--
Please submit problems, requests, and questions at:
https://oim.grid.iu.edu/gocticket/


Thank You,
OSG Grid Operations Center
goc@opensciencegrid.org, 317-278-9699
Visit the OSG Support Page:
http://www.opensciencegrid.org/ops
RSS: http://www.grid.iu.edu/news

New certificate updates are announced by the GOC (for OSG cert
distribution) and vdt-discuss (for VDT cert distribution)

On Wed, Apr 8, 2009 at 10:32 AM, osg@tick-indy.globalnoc.iu.edu via RT
<vdt-support@opensciencegrid.org> wrote:

When replying, type your text above this line.
----------------------------------------------
This message is to let you know that Open Science Grid ticket 6557 "New certificates distribution has a problem" which is assigned to you, was updated on 04/08/2009 at 15:29:34 with the following information:

FootPrints Ticket Description:
Hi Bob,

Updates to the OSG CA distribution are announced by GOC to
osg-sites@opensciencegrid.org. See
<http://www.opensciencegrid.org/Consortium_Mailing_Lists>.

-Jim

For complete ticket details, click
'https://oim.grid.iu.edu/gocticket/viewer?id=6557'

Assignees: OSG Support Centers, VDT, Arvind Gopu
Status: Support Agency
Originating VO Support Center: USATLAS
Destination VO Support Center: other
Originating Ticket Number:
Destination Ticket Number:

--
Please submit problems, requests, and questions at:
https://oim.grid.iu.edu/gocticket/


Thank You,
OSG Grid Operations Center
goc@opensciencegrid.org, 317-278-9699
Visit the OSG Support Page:
http://www.opensciencegrid.org/ops
RSS: http://www.grid.iu.edu/news

When replying, type your text above this line.
----------------------------------------------
This message is to let you know that Open Science Grid ticket 6557 "New certificates distribution has a problem" which is assigned to you, was updated on 04/30/2009 at 16:48:10 with the following information:

FootPrints Ticket Description:
Hi Bob,
I've changed vdt-update-certs to use a relative symlink instead of an
absolute link.

It will be released in the next lettered update to VDT 1.10.1, which is
expected to be in ~2 weeks.

Thanks,
scot

--
View ticket at <http://crt.cs.wisc.edu/Ticket/Display.html?user=guest&pass=guest&id=5117>
VDT Support: vdt-support@opensciencegrid.org

For complete ticket details, click
'https://oim.grid.iu.edu/gocticket/viewer?id=6557'

Assignees: OSG Support Centers, VDT, Arvind Gopu
Status: Support Agency
Originating VO Support Center: USATLAS
Destination VO Support Center: other
Originating Ticket Number:
Destination Ticket Number:

--
Please submit problems, requests, and questions at:
https://oim.grid.iu.edu/gocticket/


Thank You,
OSG Grid Operations Center
goc@opensciencegrid.org, 317-278-9699
Visit the OSG Support Page:
http://www.opensciencegrid.org/ops
RSS: http://www.grid.iu.edu/news

When replying, type your text above this line.
----------------------------------------------
This message is to let you know that Open Science Grid ticket 6557 "New certificates distribution has a problem" which is assigned to you, was updated on 05/11/2009 at 13:22:11 with the following information:

FootPrints Ticket Description:
Scot,

There is no change in the behavior with the update from 1.5 to 1.6
certificates

We update certificates into an afs RW directory. This is replicated to
RO copies, mounted at a different mount point, that are the ones
actually used by all of our working machines. However, the link that
was created for this update is "absolute" in the sense that it is a full
path, and points into the RW directory, not the RO path, like so:

[gate02:globus]# cd /afs/atlas.umich.edu/Certficates/

[gate02:Certficates]# ll
total 136
lrwxr-xr-x 1 root 49 May 9 00:12 certificates ->
/afs/atlas.umich.edu/Certficates/certificates-1.6/

Certficates is the RW mount point, so even though the directory is
properly replicated into the RO mount points, the "certificates" link
re-directs back to the RW mount point, and that is incorrect for us.

This is the behavior that was, apparently, introduced back around the
1.4 or 1.3 release, and which we request to be changed. The link that
is created should look, instead, like this:

[gate02:Certficates]# ll
total 136
lrwxr-xr-x 1 root 16 May 11 09:16 certificates -> certificates-1.6/

This, in my mind, is the meaning of a "relative" link. The first link
above is "absolute" in my mind because it completely specifies the path.

Can this behavior be changed as I request?

bob

Open Science Grid FootPrints wrote:

For complete ticket details, click
'https://oim.grid.iu.edu/gocticket/viewer?id=6557'

Assignees: OSG Support Centers, VDT, Arvind Gopu
Status: Support Agency
Originating VO Support Center: USATLAS
Destination VO Support Center: other
Originating Ticket Number:
Destination Ticket Number:

--
Please submit problems, requests, and questions at:
https://oim.grid.iu.edu/gocticket/


Thank You,
OSG Grid Operations Center
goc@opensciencegrid.org, 317-278-9699
Visit the OSG Support Page:
http://www.opensciencegrid.org/ops
RSS: http://www.grid.iu.edu/news

When replying, type your text above this line.
----------------------------------------------
This message is to let you know that Open Science Grid ticket 6557 "New certificates distribution has a problem" which is assigned to you, was updated on 05/11/2009 at 18:55:11 with the following information:

FootPrints Ticket Description:
Hi Bob,
I've made the change, and it will be released in the next lettered
update to VDT 1.10.1 as promised. We just happened to have a
certificate update before the next lettered update occurred.

-scot

On Mon, May 11, 2009 at 8:23 AM, osg@tick-indy.globalnoc.iu.edu via RT
<vdt-support@opensciencegrid.org> wrote:

For complete ticket details, click
'https://oim.grid.iu.edu/gocticket/viewer?id=6557'

Assignees: OSG Support Centers, VDT, Arvind Gopu
Status: Support Agency
Originating VO Support Center: USATLAS
Destination VO Support Center: other
Originating Ticket Number:
Destination Ticket Number:

--
Please submit problems, requests, and questions at:
https://oim.grid.iu.edu/gocticket/


Thank You,
OSG Grid Operations Center
goc@opensciencegrid.org, 317-278-9699
Visit the OSG Support Page:
http://www.opensciencegrid.org/ops
RSS: http://www.grid.iu.edu/news

When replying, type your text above this line.
----------------------------------------------
This message is to let you know that Open Science Grid ticket 6557 "New certificates distribution has a problem" which is assigned to you, was updated on 05/13/2009 at 16:54:25 with the following information:

FootPrints Ticket Description:
Closing this ticket. -ag

For complete ticket details, click
'https://oim.grid.iu.edu/gocticket/viewer?id=6557'

Assignees: Arvind Gopu, VDT
Status: Closed
Originating VO Support Center: USATLAS
Destination VO Support Center: other
Originating Ticket Number:
Destination Ticket Number:

--
Please submit problems, requests, and questions at:
https://oim.grid.iu.edu/gocticket/


Thank You,
OSG Grid Operations Center
goc@opensciencegrid.org, 317-278-9699
Visit the OSG Support Page:
http://www.opensciencegrid.org/ops
RSS: http://www.grid.iu.edu/news

Commit comment:
Updated the version of vdt-update-certs to 2.2.1


Changed files:
U vdt/branches/vdt-1.10.1/defs

To generate a diff:
svn diff -c 9278 file:///p/vdt/workspace/svn

When replying, type your text above this line.
----------------------------------------------
This message is to let you know that Open Science Grid ticket 6557 "New certificates distribution has a problem" which is assigned to you, was updated on 06/01/2009 at 16:22:11 with the following information:

FootPrints Ticket Description:
Hello Bob,
The change in vdt-update-certs to use a relative symlink was released
today in a lettered update to VDT 1.10.1.

Look for an announcement coming soon from the GOC with update instructions.

Once you have updated to 1.10.1w, the next time a CA certificate update
is released, this should automatically create a relative symlink. Let
us know if you have any questions or problems.

Thanks,
scot

--
View ticket at <http://crt.cs.wisc.edu/Ticket/Display.html?user=guest&pass=guest&id=5117>
VDT Support: vdt-support@opensciencegrid.org

For complete ticket details, click
'https://oim.grid.iu.edu/gocticket/viewer?id=6557'

Assignees: Arvind Gopu, VDT
Status: Closed
Originating VO Support Center: USATLAS
Destination VO Support Center: other
Originating Ticket Number:
Destination Ticket Number:

--
Please submit problems, requests, and questions at:
https://oim.grid.iu.edu/gocticket/


Thank You,
OSG Grid Operations Center
goc@opensciencegrid.org, 317-278-9699
Visit the OSG Support Page:
http://www.opensciencegrid.org/ops
RSS: http://www.grid.iu.edu/news