This portal is developed and maintained at CCIN2P3 on behalf of EGI.eu.

Release Version : 3.2 - July 7th

For any contact, use this section: contact us

The Operations Portal is a central portal for the EGI operations management that offers a different capabilities, such as the broadcast tool, VO management facilities and various of dashboards (Security, VO and Operations) to facilitate infrastructure oversight.

Latest news

Dear VO Managers

Due to unrecoverable service errors we are going to decommission CREAM at creamce.inula.man.poznan.pl. We plan to provide new instalation of CREAM, but with different name and different IP (due to some technical reasons the new service cannot be setup with the same DNS name)

Please note, that resources provided by PSNC are still accessible via our CREAM at creamce.reef.man.poznan.pl

Timeline:
- 1-5.08.2015 Downtime because of service failures
- 6.08.2015 Starting day of decommissioning downtime
- 31.08.2015 creamce.inula.man.poznan.pl removed from gocdb.

Regards,
Paweł
1. UMD 3.13.2

Minor update released on July 15th, fixing dependencies for cvmfs.

2. UMD 4 - Early Adopters needed

First tests on the new release machinery (dry-run) are successful, ready to accept new CentOS7 packages. Looking for adopters for the following products: ARC-Clients, DPM-mysql, gfal2, squid, cvmfs. We also need volunteers for early adoption in UMD4 (CentOS7, SL6, Ubuntu).
If interested, please contact operations@egi.eu <mailto:operations@egi.eu>.

Best regards,
EGI Operations Support Team
================
Dear VOCE VO site admins,

one of the VO voms servers (voms2.grid.cesnet.cz) has been updated with a new certificate. Unfortunately the CA DN has been changed, therefore the voms2.grid.cesnet.cz.lsc files on grid services (SEs, CEs, ...) must be updated to ensure the correct function with the VOCE VO proxy certificates.
We would like to kindly ask you to update your lsc files to match the configuration described here:
https://voms2.grid.cesnet.cz:8443/voms/voce/configuration/configuration.action.

Thank You.

Best regards,
Jan Svec, CESNET
Between 09:00 - 10:00 UTC today, all services at the RAL Tier1 were inaccessible due to a network problem. The issue has been fixed and connectivity has been restored.

Sorry for any inconvenience.
The problem with the network routers have been fixed. However, we have declared the whole site as AT-RISK for the next 24 hours.

Sorry for the inconvenience.
We are currently investigating a network problem affecting the RAL Tier1. All services are inaccessible.

>>> More news <<<

Hi,

The problem with the network has been resolved and all services are accessible now.

Sorry for any inconvenience.

Regards,
Tiju Idiculla
RAL Tier1
We are currently investigating a network problem at affecting the RAL Tier1. All services are inaccessible.

Dear all,

this is a reminder for the upcoming migration of the SEE VO which is currently hosted on voms.grid.auth.gr onto GRNET's central VOMS servers. The migration will take place on Wednesday 29/07/2015 at 10:00 am UTC. You may find the original broadcast on the following link [1]. 

Below you may also find useful information for the configurations that will be needed after the migration. 

VOMSES :

"see" "voms.hellasgrid.gr" "15010"
"/C=GR/O=HellasGrid/OU=hellasgrid.gr/CN=voms.hellasgrid.gr" "see"

"see" "voms2.hellasgrid.gr" "15010"
"/C=GR/O=HellasGrid/OU=hellasgrid.gr/CN=voms2.hellasgrid.gr" "see"

LSC Files:

voms.hellasgrid.gr.lsc :

/C=GR/O=HellasGrid/OU=hellasgrid.gr/CN=voms.hellasgrid.gr
/C=GR/O=HellasGrid/OU=Certification Authorities/CN=HellasGrid CA 2006

voms2.hellasgrid.gr.lsc :

/C=GR/O=HellasGrid/OU=hellasgrid.gr/CN=voms2.hellasgrid.gr
/C=GR/O=HellasGrid/OU=Certification Authorities/CN=HellasGrid CA 2006

[1] https://operations-portal.egi.eu/broadcast/archive/id/1280

Best regards,
Pavlos Daoglou
Dear all,

we are planning to migrate the "SEE" VO which is currently hosted on voms.grid.auth.gr onto GRNET's central VOMS servers voms.hellasgrid.gr (primary) and voms2.hellasgrid.gr (read only). The migration will take place on Wednesday 29/07/2015 at 10:00 am UTC.
Please be notified that you will have to update the configuration of all your "VOMS-aware" services (LSC and vomses files) accordingly in order to keep supporting this VO.

Best regards,
Pavlos Daoglou
Dear VO Managers, VO Users,

We wish to inform you that we are beginning the decommissioning process for the Resource Centre INAF-TS part of the NGI_IT.


The VOs currently configured at this Resource Centre are listed below:

inaf 
planck 
astro.vo.eu-egee.org 
infngrid

The aim is to change the status of the Resource Rentre to "suspended" in GOCDB by 24th August 2015. Below is a list of affected services and a decommissioning timeline.

**NOTE deadline for retrieval of all data from INAF-TS SRM storage (se01.oats.inaf.it) is 24th August 2015**

Affected services:

ce01.oats.inaf.it (gLite-APEL)		
ce01.oats.inaf.it (Site-BDII)
ce01.oats.inaf.it (CREAM-CE)
se01.oats.inaf.it (SRM)
ce01.oats.inaf.it (APEL)


Timeline:

10th July 2015, this broadcast message

27th July 2015, start scheduled downtime until 10th August 2015. During that time users can retrieve data

23th August 2015, last day for data retrieve

24th August 2015, the Recurce Center status will change to “suspended”. All services shutdown.


Best Regards,

Massimo Sponza
1. Approval of PROC21
The new procedure for Resource Center suspension: https://wiki.egi.eu/wiki/PROC21 has been approved. 
Please have a look at the steps of the procedure: in particular, in case of decision of suspension a notification is sent to Resource Center Manager and to NGI Representatives waiting for 3 working days for reaction before the suspension itself.

Best regards, 
EGI Operations Support Team 
1. Approval of PROC21
The new procedure for Resource Center suspension: https://wiki.egi.eu/wiki/PROC21 has been approved. 
Please have a look at the steps of the procedure: in particular, in case of decision of suspension a notification is sent to Resource Center Manager and to NGI Representatives waiting for 3 working days for reaction before the suspension itself.

2. UMD 4
Need of sites interested in EL7-based distribution for Staged-Rollout testing. Sites can contact their NGI/ROC or the Staged-Rollout manager (jpina@lip.pl). 

3. UMD 3.13.0 released
The UMD 3.13.0 update has been released in the UMD production repositories:
http://repository.egi.eu/2015/07/01/release-umd-3-13-0/

The products released in this update are:
    - APEL 1.4.1
    - CREAM 1.16.5 (SL6 only)
    - DM Clients:
        dpm-xroot 3.5.2
        GFAL 2.8.4
        GFAL2-PYTHON 1.7.1
        srm-ifce 1.22.1
    - CVMFS 2.1.20
    - Frontier Squid 2.7.24 
    - gLExec 1.2.3
    - StoRM server 1.11.8
and
   - fetch-crl 3.0.16
   - XRootD 4.1.1
   - python-daemon 1.5.2 (only SL5)

4. UMD 3.13.1 has been released as a revision update.
This release updates the ARC probes, due to an incompatibility of the CA probe with the IGTF trust anchor release 1.65 meta-data.

Updated CA policy 1.65-2. The previous IGTF trust anchor release contained a problem in the packaging of some Debian (deb) packages. The problem has been fixed updating these deb packages to the 1.65-2 version. There are no changes in the CAs themselves, and there is no need for rpm-based servers to update if they were already updated to the 1.65 version of the CA.

Best regards, 
EGI Operations Support Team 
Dear Users,

The Operations Portal  3.2 is now online.
The main features  are  : 

1 ) the possibility to create from the security dashboard a ticket into EGI RTIR .

2) Metrics for the security dashboard

3)  Changes into the overview of the security dashboard.

4) Modification on the update of the age of the alarms .
The aim is avoid to reset the age in case of update of the alarm . 

5) Improvement on the metrics related to users.
 

Here is the complete list for all features / fixes  :
http://operations-portal.egi.eu/home/tasksList/release_id/12

Don't hesitate to contact us for comments, feedback, bugs at cic-information@in2p3.fr

Thanks by advance


Cheers,
Dear all,

EUGridPMA have announced a new set of CA rpms. Based on this IGTF release a new set of CA RPMs have been packaged for EGI. 

Please upgrade within the next seven days at your earliest convenience. When this timeout is over, SAM will throw critical errors on CA tests if old CAs are still detected.

Please check https://wiki.egi.eu/wiki/EGI_IGTF_Release for more details

EGI UMD software provisioning Team

Release Notes:

European Grid Infrastructure EGI Trust Anchor release 1.65          2015.06.29

------------------------------------------------------------------------------
   For release DOCUMENTATION available on this EGI Trust Anchor release see   
               https://wiki.egi.eu/wiki/EGI_IGTF_Release                      
------------------------------------------------------------------------------

This is the EGI Trust Anchor release, based on the updated IGTF Accredited CA
distribution version 1.65-1 with Classic, SLCS and MICS profiles, encoded in
meta-package "ca-policy-egi-core-1.65-1" (new installs) and "lcg-CA-1.65-1"
(for sites upgrading from EGEE/JSPG releases).

Your may install BOTH "egi-core" AND "lcg" meta-packages, according to your 
policies. Note that your organisation or NGI may have a specific policy and
may have added or removed CAs compared to the EGI core policy.

** NOTICE: this is a restructured release **
- the meta-packages now also contain info description files in IGTF reference
  format (http://wiki.eugridpma.org/Main/IGTFInfoFile) and list the subject
  names of accredited CAs in each policy meta-package. An additional file with
  a list of CAs obsoleted by the IGTF (i.e. those that should be withdrawn) 
  has been added to the meta directory for all RP policy packages.
- apt-rpm and yum v2 'headers' data are no longer supported and provided only
  for transitionary purposes (the release build platform is now based on EL6)
- policy packaging has been aligned for all RP policies provided

The following notices are republished from the IGTF, inasfar as pertinent to
this release. Details are found in the newsletter https://www.eugridpma.org/

Changes from 1.64 to 1.65
-------------------------
(29 June 2015)

* Discontinued NAREGI CA (JP)
* Added addition G2 root for IPM CA (IR)
* Added new subjectdn attribute to the trust anchor and profile meta-data
  files to aid monitoring and authentication-profile based access control
  mechanism use cases. See http://wiki.eugridpma.org/Main/IGTFInfoFile (ALL)

The CA modifications encoded in both "requires" and "obsoletes" clauses (RPM)
and Conflicts/Replaced clauses (Debian)  have been incorporated in the above-
mentioned meta-packages.  This release is best enjoyed with  fetch-crl v3  or 
better, available from GNU/Linux OS add-on repositories Fedora, EPEL, Debian,
and from the IGTF at https://www.igtf.net/fetch-crl

Version information: ca-policy-egi-core = 1.65-1