Print

Print


Hi,

Antun Balaz wrote:

>Hi,
>it was announced that SFTs will be updated today. New version can already be 
>found at CVS
>
>http://isscvs.cern.ch:8180/cgi-bin/cvsweb.cgi/sft2/?cvsroot=lcgware
>
>And of course, with CA rpms v. 0.31 sites will still pass the test...
>
>To avoid having CT, sites should wait with the upgrade of CA rpms until SFTs 
>are updated. Since you have already done it, you can just wait.
>
>It was discussed that maybe SFTs need to be changed (in order to avoid this 
>kind of problems) so that they ask for version >= of the current one. 
>Obviously it is not yet implemented...
>  
>
I need some time to implement this (using the method David Groep 
described some time ago on this same mailing list) - and to be honnest, 
to simplify the way this CA test is maintained.
When it's ready, SFT should not complain anymore if a CA is detected but 
not recognized (I just need to make sure using the modulus would not 
allow having very old CAs also...)

Cheers
Fred

>I am dealing with this problem launching SFTs from my site (using updated 
>source) after official tests, since I have also updated CA rpms yesterday, 
>after the announcement, to ensure that my site is OK:
>
>https://lcg-sft.cern.ch:9443/sft/sitehistory.cgi?site=ce.phy.bg.ac.yu
>
>Regards, Antun
>
>-----
>E-mail: [log in to unmask]
>Web: http://scl.phy.bg.ac.yu/
>
>Phone: +381 11 3160260, Ext. 152
>Fax: +381 11 3162190
>
>Scientific Computing Laboratory
>Institute of Physics, Belgrade
>Serbia and Montenegro
>-----
>
>
>---------- Original Message -----------
>From: Gonzalo Merino <[log in to unmask]>
>To: [log in to unmask]
>Sent: Wed, 7 Sep 2005 10:22:00 +0200
>Subject: Re: [LCG-ROLLOUT] Release of CA rpms (v0.32)
>
>  
>
>>Hello,
>>
>>One of the sites we are hosting, apt-got the new CA v0.32 rpms 
>>tonight, and now is failing the SFT test with CT state:
>>
>>  https://lcg-sft.cern.ch:9443/sft/sitehistory.cgi?site=ifaece01.pic.es
>>
>>This eventually will remove this site through the "Freedom of 
>>Choice" tool, etc.
>>
>>What is the situation concerning the SFT test for CA rpms today? v31 
>>is ok and v32 is failed? Is this changing today? Then, once it 
>>changes, sites with v31 will immediate fail SFT with CT?
>>
>>Since it is impossible to synchronise the update of the SFT ca test 
>>with the upgrade at all sites, and the consequence of this seems to 
>>be CT failed, wouldn't be reasonable to allow at least some days (1 
>>or 2) where sites that still have the old version of CA rpms are 
>>marked as NT, so that they are not removed automatically from the 
>>VOs lists?
>>
>>cheers,
>>Gonzalo
>>
>>--
>>Gonzalo Merino ([log in to unmask])
>>Port d'Informació Científica, PIC
>>Edifici-D, Universitat Autònoma de Barcelona
>>08193 Bellaterra (Barcelona) SPAIN
>>Tel: +34 93 5813322 / Fax: +34 93 5814110
>>
>>EGEE BROADCAST wrote:
>>    
>>
>>>-------------------------------------------------------------------------
>>>      
>>>
>-----------
>  
>
>>>Publication from : Ian Neilson <[log in to unmask]> (CERN)
>>>This mail has been sent using the broadcasting tool available at 
>>>      
>>>
>http://cic.in2p3.fr
>  
>
>>>-------------------------------------------------------------------------
>>>      
>>>
>-----------
>  
>
>>>EUGridPMA have announced a new set of CA rpms (v0.32).
>>>
>>>https://www.eugridpma.org/distribution/current/CHANGES
>>>
>>>Please upgrade as soon as you can. See the following page for more 
>>>      
>>>
>details
>  
>
>>>http://grid-deployment.web.cern.ch/grid-deployment/lcg2CAlist.html
>>>
>>>In addition, please note that sites are discouraged from updating CA 
>>>      
>>>
>rpms directly from the EUGridPMA repository. The EUGridPMA repository should 
>not be regarded as an operational service. Such an assumption may also 
>result in an overload of the repository server.
>  
>
>>>Site Functional Tests will be updated on Wednesday 7th Sept (tomorrow).
>>>      
>>>
>------- End of Original Message -------
>
>  
>