gLite VOMS Server and Administration Tools

1. Release Description

This release contains the gLite VOMS Server and Administration Tools module v. 1.1.0. The following sections provide additional information about the release content, the module dependencies, the know bugs and issues and a list of bugs closed since the previous release. For information about installing and using the gLite VOMS Server and Administration Tools, please refer to the gLite Installation and User Guides.

2. Changes in this Release

This release contains the following changes:

The script that configures the VOMS administration application has been rewritten to use a different method. It now fully supports creation of multiple VOs on the same server
The VO administrators are not registered anymore bu the configuration script and have to be created manually after running the configuration script. For more information on the command line to use, please refer to the gLite Installation Guide and the VOMS Administration Tools User Guide on the gLite web site
The following configuration parameters have been removed for this release: voms.code, vo.admin.dn, vo.admin.ca, vo.admin.cn (they are ignored if they exist). They may reintroduced later if the script supports registration of VO admins
The parameters voms.db.user and voms.db.passwd are not used anymore. Only voms.mysql.passwd is required and it’s been moved from the VO instance section to the <parameters> section since it applies to all VOs
All R-GMA service publishing instances in the configuration template now have default values except the new vo.name parameter that has to be set from ‘changeme’ to a valid VO name for each VO instance

3. Release contents

The gLite VOMS Server and Administration Tools v. 1.1.0 is composed of the following gLite components:

Component name	Version	File
org.glite.deployment.voms-server	1.1.0	../../../../../../../glite-web/egee/packages/R1.1/R20050430/installers/glite-ce_installer.sh ../../../../../../../glite-web/egee/packages/R1.1/R20050430/bin/rhel30/noarch/RPMS/glite-voms-server-config-1.1.0-1.noarch.rpm apt-get install glite-voms-server-config
org.glite.deployment.config	1.1.1	../../../../../../../glite-web/egee/packages/R1.1/R20050430/bin/rhel30/noarch/RPMS/glite-config-1.1.1-3.noarch.rpm
org.glite.security.voms	1.2.32	../../../../../../../glite-web/egee/packages/R1.1/R20050430/bin/rhel30/i386/RPMS/glite-security-voms-1.2.32-1.i386.rpm
org.glite.security.voms-admin-client	1.0.5	../../../../../../../glite-web/egee/packages/R1.1/R20050430/bin/rhel30/noarch/RPMS/glite-security-voms-admin-client-1.0.5-1.noarch.rpm
org.glite.security.voms-admin-server	1.0.5	../../../../../../../glite-web/egee/packages/R1.1/R20050430/bin/rhel30/noarch/RPMS/glite-security-voms-admin-server-1.0.5-1.noarch.rpm
org.glite.security.voms-admin-interface	1.0.2	../../../../../../../glite-web/egee/packages/R1.1/R20050430/bin/rhel30/noarch/RPMS/glite-security-voms-admin-interface-1.0.2-1.noarch.rpm
org.glite.security.trustmanager	1.6.4	../../../../../../../glite-web/egee/packages/R1.1/R20050430/bin/rhel30/noarch/RPMS/glite-security-trustmanager-1.6.4-1.noarch.rpm
glite-security-util-java	1.0.1	../../../../../../../glite-web/egee/packages/R1.1/R20050430/bin/rhel30/noarch/RPMS/glite-security-util-java-1.0.1-2.noarch.rpm

4. Dependencies

The gLite Computing Element module has the following dependencies:

Component name	Version	RPM file name
gLite Security Utilities	1.0.1	../../../../../../../glite-web/egee/packages/R1.1/R20050430/installers/glite-security-utils_installer.sh
gLite R-GMA Service Publisher	4.2.0	../../../../../../../glite-web/egee/packages/R1.1/R20050430/installers/glite-security-utils_installer.sh
GPT	VDT 1.2.2	../../../../../../../glite-web/egee/packages/externals/bin/rhel30/RPMS/gpt-VDT1.2.2rh9-1.i386.rpm
VDT Globus Essentials	VDT 1.2.2	../../../../../../../glite-web/egee/packages/externals/bin/rhel30/RPMS/vdt_globus_essentials-VDT1.2.2rh9-1.i386.rpm
MySQL-server	4.0.20	../../../../../../../glite-web/egee/packages/externals/bin/rhel30/RPMS/MySQL-server-4.0.20-0.i386.rpm
MySQL-client	4.0.20	../../../../../../../glite-web/egee/packages/externals/bin/rhel30/RPMS/MySQL-client-4.0.20-0.i386.rpm
perl-Crypt-SSLeay	0.51	../../../../../../../glite-web/egee/packages/externals/bin/rhel30/RPMS/perl-Crypt-SSLeay-0.51-4.i386.rpm
perl-Authen-SASL	2.08	../../../../../../../glite-web/egee/packages/externals/bin/rhel30/RPMS/perl-Authen-SASL-2.08-1.1.el3.rf.noarch.rpm
perl-Digest-HMAC	1.01	../../../../../../../glite-web/egee/packages/externals/bin/rhel30/RPMS/perl-Digest-HMAC-1.01-11.1.noarch.rpm
perl-Digest-SHA1	2.01	../../../../../../../glite-web/egee/packages/externals/bin/rhel30/RPMS/perl-Digest-SHA1-2.01-15.1.i386.rpm
perl-MIME-Lite	2.117	../../../../../../../glite-web/egee/packages/externals/bin/rhel30/RPMS/perl-MIME-Lite-2.117-2.1.el3.rf.noarch.rpm
perl-Net-Jabber	2.0	../../../../../../../glite-web/egee/packages/externals/bin/rhel30/RPMS/perl-Net-Jabber-2.0-1.1.el3.rf.noarch.rpm
perl-Net-XMPP	1.0	../../../../../../../glite-web/egee/packages/externals/bin/rhel30/RPMS/perl-Net-XMPP-1.0-1.1.el3.rf.noarch.rpm
perl-SOAP-Lite	0.60a	../../../../../../../glite-web/egee/packages/externals/bin/rhel30/RPMS/perl-SOAP-Lite-0.60a-1.1.el3.rf.noarch.rpm
perl-XML-Stream	1.22	../../../../../../../glite-web/egee/packages/externals/bin/rhel30/RPMS/perl-XML-Stream-1.22-1.1.el3.rf.noarch.rpm
Tomcat5	5.0.28	../../../../../../../glite-web/egee/packages/externals/bin/rhel30/RPMS/tomcat5-5.0.28-6_EGEE.noarch.rpm
Java SDK/JRE	1.4.2	http://java.sun.com/j2se/1.4.2/download.html

5. Known bugs and issues

This release has the following bugs and issues. Bug numbers refer to the gLite Bug Tracking system database hosted on the CERN Savannah system at https://savannah.cern.ch/bugs/?group=jra1mdw .

No removal procedure is provided with this release apart from the removal of the RPMS. Any account, group or other resource created during the module configuration must be manually cleaned.
The VOMS Admin Server RPM tries to execute some configuration scripts that may output warnings in certain conditions. The messages can be ignored, since configuration is handled by the configuration scripts as explained in the gLite Installation Guide

Known open bugs:

Bug number	Description
#3739	VOMS registration error
#3887	VOMS and user name assignment
#4122	[VOMS] In the request detail the E-Mail address =<null>
#4637	VOMS API should offer a simpler way of processing the VOMS attribute certs
#5009	VOMS: making it possible to assign roles more freely
#5166	[VOMS Admin] Couldn\\\'t handle the Russian CA issued personal certificates
#5495	Can\'t execute voms-admin-configure because of missing module
#5561	[VOMS Admin] Couldn't send e-mail for the registration request
#6139	Configuration ifnormation for the vomses file on the VOMS Admin website is not showing
#7193	[VOMS Admin] The mechanism for getting notification addresses for admin users does not work
#7311	voms build does not use expat.location from the repository
#7634	VOMS ldap synch and signing policies
#7658	voms-server configuration script does not add vo administrators
#7660	hard-wired defaults in voms_install_db
#7662	references to EDG license in voms
#7663	edg licence in voms-admin
#7665	rvoms-admin-configure as pm post install script
#7696	voms-admin request details not complete
#7762	glite-voms-server-config.py fails
#7905	Support for GLOBUS_FLAVORS needed by broker missing in VOMS.
#8006	voms-admin-server and role attribute
#8012	glite-security-voms-admin-server installed before tomcat user exists.
#8026	VOMS cannot accept proxy for authentication
#8036	VOMS server upgrade fails due to conflicts
#8092	Multiple "/opt/glite/var/etc/voms-admin/<VO name>/vomses" file problems
#8295	Welcome to VOMS! doesn't tell you the VO name
#8343	voms_install_db.sgml problem
#8357	org.glite.security.voms/src/configure.in bug when checking for GLOBUS_FLAVORS

Fixed in this or previous releases, but not yet tested:

Bug number	Description
#4484	Can't setup a VOMS server with a VO name longer then six characters
#5356	unecessary file org.glite.security.voms/src/include/config.h.in
#5403	org.glite.security.voms-admin-server fails to build
#6060	voms_install_db cannot be run properly with MySQL relocated
#6428	VOMS lock files are going into the wrong place
#6612	voms-admin requires following patch on voms core
#6678	VOMS_Contact() crashes
#6930	VOMS & VOMS Admin services should publish to the Service table
#7011	glite-voms-server-config DBA password should be optional
#7013	voms server does not find its libraries
#7243	Access denied error on GLOBAL ACL section of VOMS Admin
#7445	glite-voms-server-config.py -h -v -c gives error (v1.0.10)
#7450	glite-voms-server-config.py ignore the JAVA_HOME definition of the configuration .xml file
#7453	glite-voms-server-config.py dies with unknown error
#7511	VOMS_FindByVO() doesn't work without user's local configuration
#7628	voms installer has references to CE
#7636	voms configuration script fails
#7637	voms script fails with an IndexError
#7638	many parameters in the voms server configuration are cryptic
#7890	VOMS attribute validation fails in java VOMS parser
#7986	Unreplaced tokens in VOMS Admin web interface
#7989	VOMS Admin confirmation messages display (null) instead of VO name
#7990	The vomses example file is missing from the VOMS Admin installation

6. Bugs closed since last release

This release fixes the following bugs and issues. Bug numbers refer to the gLite Bug Tracking system database hosted on the CERN Savannah system at https://savannah.cern.ch/bugs/?group=jra1mdw

Bug number	Description
#4120	[VOMS] Requesting VO membership confirmation e-mails were not send to user.
#5048	No RPMS for the VOMS Admin (interface)
#5803	voms-proxy-init requires vomses confile to owned by root user
#5817	Cannot connect to the VOMS
#6424	VOMS Admin can't send notification emails to users
#7007	glite-voms-server-config is missing dependencies
#7010	glite-voms-server-config problems
#7659	voms.db.user and voms.db.passwd should be vo specific
#7889	voms-proxy-init ignores -certdir parameter
#7982	VOMS test script looks at the wrong location in my $HOME
#7983	VOMS test script doesn't ask for my passphrase
#7984	VOMS test script doesn't test the voms-proxy-init procedure correctly
#7985	VOMS test script doesn't allow for stress testing
#8035	Example xml templates for VOMS slighty wrong.

7. Previous Releases

7.1. Release 1.0.0

7.1.1. Release Description

This release contains the gLite VOMS Server and Administration Tools module v. 1.0.0. The following sections provide additional information about the release content, the module dependencies, the know bugs and issues and a list of bugs closed since the previous release. For information about installing and using the gLite VOMS Server and Administration Tools, please refer to the gLite Installation and User Guides.

7.1.2. Changes in this Release

This release contains some improvements to the configuration scripts and bug fixes to VOMS and the VOMS Admin tools (please refer to the complete list below).

7.1.3. Release contents

The gLite VOMS Server and Administration Tools v. 1.0.0 is composed of the following gLite components:

Component name	Version	File
org.glite.deployment.voms-server	1.0.0	../../../../../../../glite-web/egee/packages/R1.0/R20050331/installers/glite-ce_installer.sh ../../../../../../../glite-web/egee/packages/R1.0/R20050331/bin/rhel30/noarch/RPMS/glite-voms-server-config-0.1.1-1.noarch.rpm
org.glite.deployment.config	1.0.0	../../../../../../../glite-web/egee/packages/R1.0/R20050331/bin/rhel30/noarch/RPMS/glite-config-1.0.0-1.noarch.rpm
org.glite.security.voms	1.2.32	../../../../../../../glite-web/egee/packages/R1.0/R20050331/bin/rhel30/i386/RPMS/glite-security-voms-1.2.32-1.i386.rpm
org.glite.security.voms-admin-server	1.0.2	../../../../../../../glite-web/egee/packages/R1.0/R20050331/bin/rhel30/noarch/RPMS/glite-security-voms-admin-server-1.0.2-1.noarch.rpm
org.glite.security.voms-admin-interface	1.0.2	../../../../../../../glite-web/egee/packages/R1.0/R20050331/bin/rhel30/noarch/RPMS/glite-security-voms-admin-interface-1.0.2-1.noarch.rpm
org.glite.security.trustmanager	1.6.4	../../../../../../../glite-web/egee/packages/R1.0/R20050331/bin/rhel30/noarch/RPMS/glite-security-trustmanager-1.6.4-1.noarch.rpm
glite-security-util-java	1.0.0	../../../../../../../glite-web/egee/packages/R1.0/R20050331/bin/rhel30/noarch/RPMS/glite-security-util-java-1.0.0-2.noarch.rpm

7.1.4. Dependencies

The gLite Computing Element module has the following dependencies:

Component name	Version	RPM file name
gLite Security Utilities	1.0.0	../../../../../../../glite-web/egee/packages/R1.0/R20050331/installers/glite-security-utils_installer.sh
gLite R-GMA Service Publisher	4.2.0	../../../../../../../glite-web/egee/packages/R1.0/R20050331/installers/glite-security-utils_installer.sh
GPT	VDT 1.2.2	../../../../../../../glite-web/egee/packages/externals/bin/rhel30/RPMS/gpt-VDT1.2.2rh9-1.i386.rpm
VDT Globus Essentials	VDT 1.2.2	../../../../../../../glite-web/egee/packages/externals/bin/rhel30/RPMS/vdt_globus_essentials-VDT1.2.2rh9-1.i386.rpm
MySQL-server	4.0.20	../../../../../../../glite-web/egee/packages/externals/bin/rhel30/RPMS/MySQL-server-4.0.20-0.i386.rpm
MySQL-client	4.0.20	../../../../../../../glite-web/egee/packages/externals/bin/rhel30/RPMS/MySQL-client-4.0.20-0.i386.rpm
Tomcat5	5.0.28	../../../../../../../glite-web/egee/packages/externals/bin/rhel30/RPMS/tomcat5-5.0.28-4_EGEE.noarch.rpm
Java SDK/JRE	1.4.2	http://java.sun.com/j2se/1.4.2/download.html

7.1.5. Known bugs and issues

This release has the following bugs and issues. Bug numbers refer to the gLite Bug Tracking system database hosted on the CERN Savannah system at https://savannah.cern.ch/bugs/?group=jra1mdw .

No removal procedure is provided with this release apart from the removal of the RPMS. Any account, group or other resource created during the module configuration must be manually cleaned.
The procedure to set the Admin Server administrator works only on a brand new installation. Once the administrator has been set, the configuration script is not able to change it. Such change must be currently done manually in the MySQL database. This will be fixed in a future release
The VOMS Admin Server RPM tries to execute some configuration scripts that output errors and warnings in certain conditions. The messages can be ignored, since configuration is handled by the configuration scripts as explained in the gLite Installation Guide
The current configuration script uses a VOMS creation method which is known to have bugs. It is currently reliable only for installing one VO per server. A better method is being implemented and will be release in a future version.

Known open bugs:

Bug number	Description
#3739	VOMS registration error
#3887	VOMS and user name assignment
#4122	[VOMS] In the request detail the E-Mail address =<null>
#4637	VOMS API should offer a simpler way of processing the VOMS attribute certs
#4700	CRLs from 4096bit CA fail (Affects VOMS)
#5009	VOMS: making it possible to assign roles more freely
#5166	[VOMS Admin] Couldn\\\'t handle the Russian CA issued personal certificates
#5454	LCAS voms_plugin initialization failure : libgridsite.so.1.0 contains an undefined symbol
#5495	Can\'t execute voms-admin-configure because of missing module
#5561	[VOMS Admin] Couldn't send e-mail for the registration request
#5848	edg-voms-make-vo-rpms 0.7.4 fails to build RPM
#6139	Configuration ifnormation for the vomses file on the VOMS Admin website is not showing
#6930	VOMS & VOMS Admin services should publish to the Service table
#6943	If the user issuing voms-proxy-init is not a member of the specified VO, confusing error is returned.
#7011	glite-voms-server-config DBA password should be optional
#7048	VOMS: there is no easy way for an application to retrieve the info from the proxy cert
#7193	[VOMS Admin] The mechanism for getting notification addresses for admin users does not work
#7243	Access denied error on GLOBAL ACL section of VOMS Admin
#7311	voms build does not use expat.location from the repository
#7369	Error from voms-proxy-init
#7583	voms-proxy-init fails if vomses file contains empty lines at the end
#7628	voms installer has references to CE
#7634	VOMS ldap synch and signing policies
#7636	voms configuration script fails
#7637	voms script fails with an IndexError
#7638	many parameters in the voms server configuration are cryptic
#7658	voms-server configuration script does not add vo administrators
#7659	voms.db.user and voms.db.passwd should be vo specific
#7660	hard-wired defaults in voms_install_db
#7662	references to EDG license in voms
#7663	edg licence in voms-admin
#7665	rvoms-admin-configure as pm post install script
#7695	ohne worte ( 6 minutes or 2 months ? ) voms-proxy-init -hours
#7696	voms-admin request details not complete

Fixed in this or previous releases, but not yet tested:

Bug number	Description
#4120	[VOMS] Requesting VO membership confirmation e-mails were not send to user.
#4484	Can't setup a VOMS server with a VO name longer then six characters
#4699	TrustManager log explosion (affects VOMS)
#5048	No RPMS for the VOMS Admin (interface)
#5356	unecessary file org.glite.security.voms/src/include/config.h.in
#5357	ambiguous error message in edg-voms
#5358	edg-voms has no help/usage option
#5359	edg-voms exits abnormally when given unrecognised optionoption
#5360	edg-voms creates logfile with exotic mode
#5362	edg-voms run as a non-privileged user
#5403	org.glite.security.voms-admin-server fails to build
#5489	voms-proxy-init creates a proxy from an expired cert
#5502	voms-proxy-destroy on non existent proxy returns no error
#5505	voms-proxy0info returns no information on a proxy generated with no VO specified
#5582	unable to get voms proxy info from a voms proxy
#5803	voms-proxy-init requires vomses confile to owned by root user
#5817	Cannot connect to the VOMS
#5849	LCMAPS VOMS plugin 0.0.30 crashes on SLC3
#6049	lcas-plugins-voms does not support FQANs, only old style VOMS-triplets
#6060	voms_install_db cannot be run properly with MySQL relocated
#6253	voms-proxy-info has a different format to grid-proxy-info
#6424	VOMS Admin can't send notification emails to users
#6428	VOMS lock files are going into the wrong place
#6503	GridSite does not export VOMS extensions to the cgi environment
#6612	voms-admin requires following patch on voms core
#6678	VOMS_Contact() crashes
#6857	Is it still possible to select the VOMS groups with voms-proxy-init?
#7007	glite-voms-server-config is missing dependencies
#7010	glite-voms-server-config problems
#7013	voms server does not find its libraries
#7047	VOMS_Retrieve() segfaults if VERIFY_DATE is set and the proxy has expired
#7052	voms-proxy-info -exists exit code is 1 with valid proxy
#7061	voms-proxy-init should check for $HOME/.glite/vomses file as a default location
#7164	glite-voms-init still uses deprecated -hours option
#7445	glite-voms-server-config.py -h -v -c gives error (v1.0.10)
#7450	glite-voms-server-config.py ignore the JAVA_HOME definition of the configuration .xml file
#7453	glite-voms-server-config.py dies with unknown error
#7511	VOMS_FindByVO() doesn't work without user's local configuration

7.1.6. Bugs closed since last release

This release fixes the following bugs and issues. Bug numbers refer to the gLite Bug Tracking system database hosted on the CERN Savannah system at https://savannah.cern.ch/bugs/?group=jra1mdw

Bug number

Description