Certification report patch 4010

Author: Elisabetta Molinari elisabetta.molinari@mi.infn.it

Outcome: Certified

Automatic tests

• voms-admin automatic testing
  • here's a result of the command: './myCheck-VOMS -n voms-rd02-21.cnaf.infn.it -l test-sequence.lst.voms-admin'

    Test VOMS-addMember   - OK
    Test VOMS-assignRole   - OK
    Test VOMS-crAttribute   - OK
    Test VOMS-crGroup   - OK
    Test VOMS-crRole   - OK
    Test VOMS-crUser   - OK
    Test VOMS-crUserNocert   - OK
    Test VOMS-delAttribute   - OK
    Test VOMS-delGroup   - OK
    Test VOMS-delGroupAttribute   - OK
    Test VOMS-delRole   - OK
    Test VOMS-delRoleAttribute   - OK
    Test VOMS-delUser   - OK
    Test VOMS-delUserAttribute   - OK
    Test VOMS-dismissRole   - OK
    Test VOMS-listAttributes   - OK
    Test VOMS-listGroupAttributes   - OK
    Test VOMS-listGroups   - OK
    Test VOMS-listMembers   - OK
    Test VOMS-listRoleAttributes   - OK
    Test VOMS-listRoles   - OK
    Test VOMS-listSubGroups   - OK
    Test VOMS-listUserAttributes   - OK
    Test VOMS-listUserGroups   - OK
    Test VOMS-listUserRoles   - OK
    Test VOMS-listUsers   - OK
    Test VOMS-listUsrWithRol   - OK
    Test VOMS-removeMember   - OK
    Test VOMS-setGroupAttribute   - OK
    Test VOMS-setRoleAttribute   - OK
    Test VOMS-setUserAttribute   - OK
    

    here's the full result report
• voms-core automatic testing
  • here's a result of the command: './myCheck-VOMS -n voms-rd02-21.cnaf.infn.it -l test-sequence.lst.voms-core':

    Test VOMS-pr-attr   - OK
    Test VOMS-pr-bits   - OK
    Test VOMS-pr-cert   - OK
    Test VOMS-pr-conf   - OK
    Test VOMS-pr-dbg   - OK
    Test VOMS-pr-genattr   - OK
    Test VOMS-pr-hlp   - OK
    Test VOMS-pr-hours   - OK
    Test VOMS-pr-ign   - OK
    Test VOMS-pr-key   - OK
    Test VOMS-pr-limit   - OK
    Test VOMS-pr-list   - OK
    Test VOMS-pr-noreg   - OK
    Test VOMS-pr-order   - OK
    Test VOMS-pr-out   - OK
    Test VOMS-pr-pver   - OK
    Test VOMS-pr-pwst   - OK
    Test VOMS-pr-quiet   - OK
    Test VOMS-pr-RoleOrder   - OK
    Test VOMS-pr-usg   - OK
    Test VOMS-pr-valid   - OK
    Test VOMS-pr-verify   - OK
    Test VOMS-pr-vers   - OK
    Test VOMS-pr-vlf   - OK
    Test VOMS-pr-vomses   - OK
    Test VOMS-pr-warn   - OK
    

    here's the full result report

Clean installation

• installation steps:

  http://etics-repository.cern.ch/repository/pm/volatile/repomd/id/e9c683d9-530b-4196-a5d7-3ddda77ce0ce/sl5_x86_64_gcc412
  yum install glite-VOMS_oracle
  yum install lcg-CA

  here's the yum install log
• configuration steps:

  copy siteinfo.def and services/glite-voms from '/opt/glite/yaim/examples/siteinfo' into your favourite dir. 
  Set yaim variables as specified here https://twiki.cern.ch/twiki/bin/view/LCG/Site-info_configuration_variables
  Launch  '/opt/glite/yaim/bin/yaim -c -s site-info.def -n VOMS'

• yaim configuration log
• yaim configuration files used:

  cat siteinfo/site-info.def
  # Uncomment this variable if you are installing a mysql server
  # It is the MySQL admin password. 
  #MYSQL_PASSWORD="admin"
  
  VOMS_DB_TYPE="oracle"
  
  # Human-readable name of your site
  SITE_NAME=voms-sa3-italia
  
  ORACLE_CLIENT=/usr/lib/oracle/10.2.0.4/client64/
  VOMS_ADMIN_ORACLE_CLIENT=/usr/lib/oracle/10.2.0.4/client64/
  
  ##############################
  # VO configuration variables #
  ##############################
  # If you are configuring a DNS-like VO, please check
  # the following URL: https://twiki.cern.ch/twiki/bin/view/LCG/YaimGuide400#vo_d_directory
  
  # Space separated list of VOs supported by your site
  VOS="sa3test"
  cat siteinfo/services/glite-voms
  # VOMS server hostname
  VOMS_HOST=localhost
  
  # Hostname of the database server. Put 'localhost'
  # if you run the database on the same machine.
  # This parameter can be specified per VO in the following way:
  # VO_<vo_name>_VOMS_ADMIN_DB_HOST
  VOMS_ADMIN_DB_HOST='localhost'
  
  VO_SA3TEST_VOMS_DB_HOST="voms-db-02.cr.cnaf.infn.it"
  VO_SA3TEST_VOMS_DB_TYPE="oracle"
  VO_SA3TEST_VOMS_DB_USER="admin_25"
  VO_SA3TEST_VOMS_DB_PASS="pwd"
  VO_SA3TEST_VOMS_DB_NAME="vomsdb2"
  VO_SA3TEST_VOMS_PORT="15001"
  
  VO_SA3TEST_ORACLE_CONNECTION_STRING="(DESCRIPTION=(ADDRESS_LIST=(ADDRESS=(PROTOCOL=TCP)(HOST = voms-db-02.cr.cnaf.infn.it)(PORT = 1521)))(CONNECT_DATA=(SERVICE_NAME = vomsdb2.cr.cnaf.infn.it)))" 
  
  VOMS_ADMIN_SMTP_HOST="localhost"
  VOMS_ADMIN_MAIL="elisabetta.molinari@mi.infn.it"
  VOMS_DB_DEPLOY="true"

Upgrade from production

• Since this is the first release of VOMS for SL5, only the upgrade of the oracle backend has been tested. Following the basic steps of a sample upgrade:

  - synchronize yaim conf files from the old machine with the new one, i.e. make sure username and password for the VO databases are the same 
  - launch yaim configuration after setting yaim variable  VOMS_DB_DEPLOY to 'false' in the siteinfo.def or the services/glite-voms file
  - re-start tomcat]
  - launch upgrade VO, for each VO as in the following: /opt/glite/sbin/voms-admin-configure upgrade --vo=sa3test
  - re-start voms server and voms-admin
  - register the VOMS host identity as a default admin  -->/opt/glite/sbin/voms-db-deploy.py add-admin --vo sa3test --cert /etc/grid-security/hostcert.pem

log

Check Bugs:

• BUG 66734: VOMS Admin attribute search broken FIXED
  • see the attached screen shot1, screen shot2
• BUG 66727: VOMS Admin attribute search pagination broken FIXED
  • see the attached screen shot
• BUG 63373: voms-admin info provider is called multiple times FIXED
  • ldapsearch results here

-- ElisabettaMolinari - 2010-04-21

• voms_upgradeOracle_log.gz: voms_upgradeOracle_log.gz

• full_result.gz: full_result.gz

• full_result.gz: full_result.gz

• yum_install_voms_oracle_log: yum_install_voms_oracle_log

• yaim_conf_voms_oracle: yaim_conf_voms_oracle

• voms_admin_test1.docx: voms_admin_test1.docx

• voms_admin_test2.JPG:
  

• voms_admin_test.tar: voms_admin_test.tar

• voms_admin_test66727.tar: voms_admin_test66727.tar

• yum_install_glite_VOMS: yum_install_glite_VOMS

• ldapsearch_results: ldapsearch_results