Agenda-02-06-2014

Audio conference link	Conference system is Adobe Connect, no password required.
Audio conference details	Indico page

1. Middleware releases and staged rollout

1.1 News from URT

Recent, or future planned, releases from the product teams:

• dCache v. 2.6.28
• L&B v. 4.1.1
• CREAM v. 1.16.3
• WMS 3.6.5
• STORM v. 1.11.4

1.2 UMD release

Ready to be released :

• wms v. 3.6.4
• gsisshterm v. 2.1.0
• arc v. 13.11.1
• bdii-core v. 1.5.7
• canl v. 2.2.2
• cream-ui v. 1.15.3
• gridsite v. 2.2.3
• DPM / LFC 1.8.8
• bouncycastle-mail v. 1.46.2
• dcache-srm-client v. 2.2.22

1.3 Staged rollout updates

new:

• empty

old stuff (no early adopters):

• gridway v. 5.14.2
• globus-info-provider-service v. 0.2.1
• emi-cluster v. 2.0.1
• globus-rls v. 5.2.5
• mpi v. 1.5.3

UMD 3 EA

• Some sites have the contact points for the EA adopters outdated so please check in table if all contacts and products are still correct and send me email if you need to add / remove some contacts (SSO account mandatory): (full site list)

New Products

FTS3, squid and CVMFS will soon include in UMD and it is important to have some early adopters for this components. So if you anyone interested please contact me or cristina to be included in the early adopter list.

1.4 Next releases

• Begining June
• Middle/End of July
• October

2. Operational issues

2.1 Report from DMSU

ARGUS/WMS Certificate Chain Mixups

• Affecting several sites, where WMS is unable to make SSL connection to ARGUS.
• With all probability this is a combination of using curl from the SL6 distribution, which in built with NSS SSL rather than OpenSSL and, as such, does not really support proxy certificates, and a bug in Java, hopefully fixed since Java 7 Update 60.
• Related issues:
  • https://ggus.eu/index.php?mode=ticket_info&ticket_id=101486
  • https://ggus.eu/index.php?mode=ticket_info&ticket_id=101554
• This issue is already being investigated at 3rd level but PTs cannot decide who is responsible ant DMSU is overseeing.

CREAM CLI/GridSite SegFaults at Long-Lived Proxies

• glite-ce-job-submit crashes if the user's proxy certificate has a lifetime exceeding 240 hours (10 days)
• Cause tracked down to GridSite, forwarded to the GridSite PT to fix
• Related issue:
  • https://ggus.eu/?mode=ticket_info&ticket_id=104009

2.2 Migration of Central SAM services & reconfiguration of NGIs SAM instances

• Central SAM services were migrated from CERN to the new consortium (GRNET, CNRS and SRCE). In order to enable smooth transition we have agreed to start using new hostnames:
  • mon.egi.eu for grid-monitoring.cern.ch
  • opsmon.egi.eu for ops-monitor.cern.ch
• CERN services will be operational until May 1st. Afterwards aliases will point to new instances.

• If Regional & VO SAM instances are not re-configurred *it will stop working* after the switch off of the CERN instance.

• The following instances are not yet configured, and tkts have been opened to follow them up:
  • ngi-de-nagios.gridka.de - NGI_DE #105128
  • wipp-srs.weizmann.ac.il - NGI_IL #105133

• Configuration advices:
1. NGI and VO SAM Nagios instances
• Create file /etc/voms2htpasswd-static.d/opsmon.conf with the following content:
/C=HR/O=edu/OU=srce/CN=opsmon.egi.eu
2. NGI SAM Nagios instances
• Set the following two variables in YAIM:
ATP_ROOT_URL="http://mon.egi.eu/atp" POEM_SYNC_URLS="http://mon.egi.eu/poem/api/0.1/json/"
3. Rerun YAIM
/opt/glite/yaim/bin/yaim -c -s site-info.def -n NAGIOS -n SAM_NAGIOS

If you prefer not to run YAIM skip the steps 2 & 3 and perform the following:

1. NGI and VO SAM Nagios instances
• Restart service voms-htpasswd:
service voms-htpasswd restart
2. NGI SAM Nagios instances
• Modify parameter POEM_SYNC_NS_URLS in file /etc/poem/poem_sync.ini:
POEM_SYNC_NS_URLS: http://mon.egi.eu/poem/api/0.1/json/
• Modify parameter ATP_ROOT_URL in file ncg/ncg.conf:
ATP_ROOT_URL=http://mon.egi.eu/atp Parameter is repeated several times, you need to modify it on all places.

2.3 EMI-2 decommissioning

• Probes are running in midmon: Documentation.
  • All products but dCache are being retired as previously announced. dCache extended the support for the 2.2.x versions until July 2014.
  • Important Notes:
    • APEL is one of the UMD 2/EMI 2 services no more supported - but there are still sites publishing accounting information using UMD 2/EMI 2 APEL clients - see list available at: APEL consumer
    • Tutorial on how to migrate APEL clients from EMI 2 to EMI 3 - available at APEL @ EGI CF 2014
• List of services failing EMI-2 tests:
  • as of Mach 7th - Download XLS file
  • as of March 3rd - EMI2_endpoints_NGI_07042014
  • as of April 24 - EMI2_endpoints_NGI_24042014
  • as of June 2 - EMI2_endpoints_NGI_02062014
• Status - presentation PPTX, PPT, PDF
• Reports received:
  • NGI_AEGIS
  • NGI_UK
  • NGI_NL (BEgrid-ULB-VUB)
• ALL SITES PROVIDING UMD 2/EMI 2 services MUST BE IN DOWNTIME

2.4 Obsoleted MW SAM tests

• Taking in account the OMB approval the following probes were decommissioned starting with Wednesday May 28th:
  • UMD-1 tests
  • gLite 3.2 tests
  • Security SAM instance (Classic SE/lcg-CE tests)

3. AOB

3.1 EGI UMD usage survey

• BROADCAST send on 28.05.2014:
  • Survey - please take the survery by June, 15th 2014

3.2 Next meeting

June, 16th 2014