What's new

• Fixed some problems in the new BLAH blparser for which in some cases jobs were wrongly reported as "lost" (done with reason 999)
• Addressed a performance problem affecting the proxy renewal operation
• PBS submission script created by BLAH is now compliant with newer versions of Torque wrt stagein/stageout directives (-W option)
• CREAM sandbox dir is now relocatable also at yaim level
• Other bug fixes

Installation and configuration

• According to gLite installation guides , the DAG repo should be among the ones needed for gLite installations. Actually this DAG repo is a mirror of the rpmforge repo, for which recently there was a major rearrangement (basically it was split in multiple repos). Because of that, using the DAG repo as set by a standard SL(C) installation, a fresh installation of CREAM CE won't work anymore. It is now necessary to use the rpmforge repos (set through the rpm rpmforge-release RPM; see https://rpmrepo.org/RPMforge/Using). But it is also necessary to edit /etc/yum.repos.d/rpmforge.repo enabling also the rpmforge-extras repo)
• When updating, please use:

yum update

Please note that doing:

yum update glite-CREAM

you are not guaranteed to have all relevant RPMs updated.

• (Re)configuration is needed after the installation/update.
• If the new blparser is used (default option) it is just necessary to run yaim once (i.e. it is not necessary anymore to first configure the creamCE and then the BLparser). More information in: http://grid.pd.infn.it/cream/field.php?n=Main.CREAMAndBlparserConfiguration

• When reconfiguring, local customizations done in the /etc/sudoers file are not scratched anymore. Instead only CREAM related configurations are scratched and then re-created. If it is necessary to change the list of supported VOs, before reconfiguring it is suggested to run:

/opt/glite/yaim/bin/yaim -r -s old-site-info.def -n glite-CREAM -f config_cream_clean_sudoers

Otherwise the cleaning of the sudoers file won't work properly

Known issues

See: http://grid.pd.infn.it/cream/field.php?n=Main.KnownIssues

Dependencies

The following internal patches have been included in this metapackage release:

• patch #3965: SL4/i386 Fix for bug #65013 (mod_ssl update breaks GridSite) Nothing relevant for the CREAM CE
• patch #3793: [ yaim-core ] yaim-core 4.0.12 SL4/i386 Several bug fixes, in particular:
  • Avoid mistakenly removing all the services from gLiteservices file.
  • Correct unset for shell functions in clean-grid-env-funcs.sh
  • Allow use of pool accounts with up to 4 digits
  • Fix grid-env.sh manipulation when running a single yaim function
  • Change the CE_INBOUNDIP and CE_OUTBOUNDIP defaults in site-info.def to be valid and imply the correct (upper) case.
• patch #3629: cleanup-grid-accounts 1.1.2 fixes various bugs Bug fixes for some problems such as:
  • cleanup-grid-accounts may fill /tmp if aborted
  • cleanup-grid-accounts should protect SW areas
  • cleanup-grid-accounts skips unexpected home directory paths
• patch #4208: Util-java workaround for malformed polish CA and fix for namespace parsing with slashed in DN Workaround for invalid Polish CA certificate, do not check that subjectAltName field is parsable. Fix also for namespace parsing problem if the CA DN contains slashes as RDN value. Support for pkcs8 private keys.
• patch #4268: [ VOMS ] backports of a fix for threaded race conditions SL4/i386 Fix for threading problems in the vomsdata class
• patch #4233: [ yaim-core ] yaim-core 4.0.12-2 SL4/i386 Create the non-subcluster specific (per VO) directories and empty list files for holding VO tag information under /opt/edg/var/info
• patch #4242: [ yaim-core ] yaim-core 4.0.13 SL4/i386 Several bug fixes
• patch #4318: glite-version update for 3.1 glite-version command no longer fails when the /opt/glite/release//glite-version and/or /opt/glite/release//update file is not present.
• patch #4330: updated info-provider-release for SL4 Removal of the obsolete calls to glite-version with the -u or -s flags (these were causing an error)
• patch #3882: L&B 1.10, SLC4, 32-bit Bug fixes
• patch #4413: [gridsite] v. 1.1.21, SLC4, 32-bit MD5 is no longer hard-coded as the signature algorithm.
• patch #4405: Util-java update for glite 3.1: fix memory leak and crl handling
  • Fix memory leak in TrustStorage if CA loading throws exception.
  • Fix host cert checking support for host certs with DNs not ending with CN and the wrong error message when CA namespace loading fails.
  • Crl extension checking implemented and generally crl handling updated.
  • Fix handling of dots in .signing_policy file DNs.
• patch #4495: [VOMS] closes memory leaks in libraries version 1.9.10
  • Fix for some memory leaks

Additional fixed bugs tracked in patch #4415

Besides the bug attached to this patch, this patch fixes the bugs attached to patch #4415 (CREAM CE 1.6.3 for gLite 3.2) which are:

https://savannah.cern.ch/bugs/?54755
https://savannah.cern.ch/bugs/?61396
https://savannah.cern.ch/bugs/?62078
https://savannah.cern.ch/bugs/?63007
https://savannah.cern.ch/bugs/?63956
https://savannah.cern.ch/bugs/?68225
https://savannah.cern.ch/bugs/?69785
https://savannah.cern.ch/bugs/?70285
https://savannah.cern.ch/bugs/?70287
https://savannah.cern.ch/bugs/?70808
https://savannah.cern.ch/bugs/?71038
https://savannah.cern.ch/bugs/?71055
https://savannah.cern.ch/bugs/?71967
https://savannah.cern.ch/bugs/?72097
https://savannah.cern.ch/bugs/?72508
https://savannah.cern.ch/bugs/?72756
https://savannah.cern.ch/bugs/?73765
https://savannah.cern.ch/bugs/?73961
https://savannah.cern.ch/bugs/?74107