Latest news

IMPORTANT: In a previous broadcast we wrongly announce that this intervention will happen on Monday 24th November. The right date is Wednesday 26th November at 15:00 CET.

-----------------------

The old VOMS servers 'voms.cern.ch' and 'lcg-voms.cern.ch' will be switched off for good and replaced by 'voms2.cern.ch' and 'lcg-voms2.cern.ch on Wednesday 26th November at 15:00 CET.

During the intervention the service will continue to work as usual as 'voms2' and 'lcg-voms2' will be open to the public before switching off the old servers.

The VOMRS registration page (https://lcg-voms.cern.ch:8443/vo/{vo-name}/vomrs) will remain in lcg-voms.cern.ch.
The old VOMS servers 'voms.cern.ch' and 'lcg-voms.cern.ch' will be switched off for good and replaced by 'voms2.cern.ch' and 'lcg-voms2.cern.ch on Monday 24th November at 15:00 CET.

During the intervention the service will continue to work as usual as 'voms2' and 'lcg-voms2' will be open to the public before switching off the old servers.

The VOMRS registration page (https://lcg-voms.cern.ch:8443/vo/{vo-name}/vomrs) will remain in lcg-voms.cern.ch.
Dear All,

We announce that the follwing services at NGI_CYGRID are being decommissioned:

ui101.grid.ucy.ac.cy (UI)
ce101.grid.ucy.ac.cy (APEL)
wmslb101.grid.ucy.ac.cy (WMS)
bdii101.grid.ucy.ac.cy (Top-BDII)
sbdii.grid.ucy.ac.cy (Site-BDII)
ce101.grid.ucy.ac.cy (CREAM-CE)
cygrid-nagios.grid.ucy.ac.cy (ngi.SAM)
plethon.grid.ucy.ac.cy (SRM)
mon101.grid.ucy.ac.cy (gLite-APEL)
argus.grid.ucy.ac.cy (emi.ARGUS) 


All the above services will be in downtime, from 30/11/2014, and by 08/12/2014 decommissioned 
Best Regards,
Andoena Balla
Dear All,
this is to announce availability of the perfSONAR re-installation and upgrade instructions. We kindly request all WLCG sites to reinstall or upgrade their perfSONAR instances. Detailed instructions are now available at https://twiki.opensciencegrid.org/bin/view/Documentation/InstallUpdatePS

All sites that have terminated their instances following the shellshock exploit are requested to re-install following the instructions. In case you have already upgraded to perfSONAR version 3.3 or 3.4, you will still need to follow the instructions to configure your instances in order to take advantage of the new WLCG perfSONAR configuration system. We'd like to ask sites to update if possible before 8th of December.

For any issues, please open GGUS ticket for WLCG perfSONAR Support or contact wlcg-perfsonar-support@cern.ch. For general information on the WLCG perfSONAR, please visit our new documentation at https://twiki.opensciencegrid.org/bin/view/Documentation/DeployperfSONAR

Best regards,
perfSONAR Support Team
Dear Users,


The Operations Portal  3.1 is now online.

For the full list of features and improvements, please read the release note :
http://operations-portal.egi.eu/home/tasksList


This release is a dev-ops release (upgrade of technologies ) with :
- a new version of php (5.5)
- a new version of the css framework bootstrap
- complementary with bootstrap3 we have made some look and feel changes
- a new version of symfony  (1.5) 
- a new soap client version 

Don't hesitate to contact us for comments, feedback, bugs at 
cic-information@in2p3.fr

Regards ,
Operations Portal Team
Dear colleagues,

first another reminder of the broadcast sent on March 17:

    https://operations-portal.egi.eu/broadcast/archive/id/1102

Please refer to that page for _configuration_ details.

New information:

1. Please ensure your site has the following rpm on affected node types:

	bouncycastle-mail-1.46-2     (SL6)

	bouncycastle146-mail-1.46-2  (SL5)

   The affected node types are:

	Argus
	CREAM
	UI (including SAM-Nagios and WLCG-VOBOX)
	WN

   Note that the Java daemons of Argus and CREAM need to be _restarted_
   after the rpm was updated.

2. The new VOMS servers will start getting used by normal jobs _and_
   by SAM tests as of:
   
	-->   Monday September 15   <--

   Please ensure your services support the new VOMS servers ASAP.

3. The old VOMS servers need to _remain_ supported for the time being.

4. The SAM pre-production instances for the LHC experiments will use
   the new VOMS servers earlier, thereby allowing sites to _verify_
   their configurations on the following pages:

	ALICE:  http://cern.ch/go/6fbH  - since Jul 23

	LHCb:   http://cern.ch/go/Zj9z  - since Aug 22

	ATLAS:  http://cern.ch/go/R9vf  - planned as of Aug 28

	CMS:    http://cern.ch/go/GQ6h  - planned as of Aug 28

5. Please ensure a correct configuration also for the "ops" VO.
   We are looking into a way for sites to check also this case.

Further developments will be announced in due course.

>>> More news <<<

Dear all,

EUGridPMA have announced a new set of CA rpms. Based on this IGTF release a new set of CA RPMs have been packaged for EGI. 

Please upgrade within the next six days at your earliest convenience. When this timeout is over, SAM will throw critical errors on CA tests if old CAs are still detected.

Please check https://wiki.egi.eu/wiki/EGI_IGTF_Release for more details

EGI TSA1.3 Team

ReleaseNotes:
European Grid Infrastructure EGI Trust Anchor release 1.60          2014.10.27

------------------------------------------------------------------------------
   For release DOCUMENTATION available on this EGI Trust Anchor release see   
               https://wiki.egi.eu/wiki/EGI_IGTF_Release                      
------------------------------------------------------------------------------

Modifications compared to the previous release:
* updated to IGTF Accredited CA distribution version 1.60-1 Classic, SLCS and 
  MICS profiles, encoded in meta-package "ca-policy-egi-core-1.60-1" (for new 
  installs) and "lcg-CA-1.60-1" (for sites upgrading from EGEE/LCG releases).

* Location of the repository changed to repository.egi.eu.  See documentation
  for details and the updated repo files.

* Your may install BOTH the "egi-core" AND "lcg" meta-packages,  according to
  your  policies.   Note that  your organisation or  NGI may have  a specific 
  policy and may have added or removed CAs compared to the EGI core policy.

The following notices are republished from the IGTF and EUGridPMA, inasfar 
as pertinent to this release.  More information can be found in the 
EUGridPMA newsletter (see https://www.eugridpma.org/):

Changes from 1.59 to 1.60
-------------------------
(27 October 2014)

* Added new SHA-2 hierarchies for TERENA Certificate Service (ed. 2009) (EU)


The CA modifications, encoded in both "requires" and "obsoletes" clauses, have
been incorporated in the above-mentioned meta-package RPMs. This trust anchor 
release is best enjoyed with fetch-crl v3 or better, available from popular 
GNU/Linux OS (add-on) repositories Fedora, EPEL, Debian, and from the IGTF.

Version information: ca-policy-egi-core = 1.60-1

Dear all, 

as agreed at the last OMB (https://indico.egi.eu/indico/conferenceDisplay.py?confId=2281) the following SAM tests were removed from ROC and ROC_OPERATORS profiles:
- ch.cern.FTS-ChannelList
- ch.cern.FTS-InfoSites
- org.gstat.SanityCheck

As agreed these tests will be replaced by the new and better ones in the next SAM release.

Best regards,
Emir Imamagic
Due to a power outage, all cloud services related to server4-eupt will be unavailable from wednesday 22 00:00, to friday 24 14:00 (UTC time)


Sorry for any inconvenience.
Dear All,

We would like to announce that NGI AL (Albania) has started the decommission procedure.

Best regards,
Malgorzata Krakowian
EGI Operations 
Dear all, 

Gocdb will be set to read-only mode for ~2hrs on Mon 13th Oct (08:00 to 10:00 UTC) while some new PI updates are tested in production. Gocdb should be considered At Risk for this period[1]. The aim of this test is to try and expose any PI issues under a realistic load. 
Apologies for the inconvenience caused. 

David Meredith 

[1] https://goc.egi.eu/portal/index.php?Page_Type=Downtime&id=15718 
Dear all,

EUGridPMA have announced a new set of CA rpms. Based on this IGTF release a new set of CA RPMs have been packaged for EGI. 

Please upgrade within the next six days at your earliest convenience. When this timeout is over, SAM will throw critical errors on CA tests if old CAs are still detected.

Please check https://wiki.egi.eu/wiki/EGI_IGTF_Release for more details

EGI TSA1.3 Team

Release notes:
European Grid Infrastructure EGI Trust Anchor release 1.59          2014.09.29

------------------------------------------------------------------------------
   For release DOCUMENTATION available on this EGI Trust Anchor release see   
               https://wiki.egi.eu/wiki/EGI_IGTF_Release                      
------------------------------------------------------------------------------

Modifications compared to the previous release:
* updated to IGTF Accredited CA distribution version 1.59-1 Classic, SLCS and 
  MICS profiles, encoded in meta-package "ca-policy-egi-core-1.59-1" (for new 
  installs) and "lcg-CA-1.59-1" (for sites upgrading from EGEE/LCG releases).

* Location of the repository changed to repository.egi.eu.  See documentation
  for details and the updated repo files.

* Your may install BOTH the "egi-core" AND "lcg" meta-packages,  according to
  your  policies.   Note that  your organisation or  NGI may have  a specific 
  policy and may have added or removed CAs compared to the EGI core policy.

The following notices are republished from the IGTF and EUGridPMA, inasfar 
as pertinent to this release.  More information can be found in the 
EUGridPMA newsletter (see https://www.eugridpma.org/):

Changes from 1.58 to 1.59
-------------------------
(release date 2014-09-29)

* Added accredited mics HPCI CA (JP)
* Updated crl_url for NCSA-slcs-2013 and NCSA-tfca-2013 (US)
* Renamed QuoVadis classic grid issuing CA to QuoVadis-Grid-ICA (CH, BM)
  NOTE: although this appears to obsolete the SWITCH-QV intermediate trust 
        anchor, it is merely a re-naming. The new QuoVadis-Grid-ICA 
        provides the same trust anchor and will continue to support the
        Swiss subscriber base of QuoVadis without any change.
  
The CA modifications, encoded in both "requires" and "obsoletes" clauses, have
been incorporated in the above-mentioned meta-package RPMs. This trust anchor 
release is best enjoyed with fetch-crl v3 or better, available from popular 
GNU/Linux OS (add-on) repositories Fedora, EPEL, Debian, and from the IGTF.

Version information: ca-policy-egi-core = 1.59-1
Dear All,

We would like to announce that NGI ZA (South Africa) is now closed. 
All references to NGI ZA (South Africa) were removed from operational tools. 
Sites belonging to NGI ZA are now part of ROC Africa Arabia.

Best regards,
Malgorzata Krakowian
EGI Operations
Dear Users,


I'm happy to announce that e-GRANT  Resource Allocation Tool 2.0.0 is now online.

From now on, e-GRANT handles allocating EGI FedCloud resources. Main new features:

1) Creating FedCloud Pools for EGI FedCloud Providers
2) Creating Requests involving FedCloud resources for EGI Customers
3) Brokering FedCloud Resources

For the full list of features and improvements, please read the release note :
https://wiki.egi.eu/wiki/E-GRANT


Don't hesitate to contact us for comments, feedback, bugs at 
egrant-support@mailman.egi.eu

Best regards ,
e-GRANT Team
Dear Resource Centre Administrators, NGI & VO Managers.
According to dCache release policy and support period, the dCache v. 2.2.X has reached end of support.
(http://www.dcache.org/downloads/1.9/index.shtml).

In compliance to the EGI Service Operations Security Policy (https://documents.egi.eu/document/669) [1], unsupported software SHOULD be decommissioned or updated to a supported version before its End of Security Updates and Support, and MUST be retired no later than 1 month after its End of Security Updates and Support. After this date, if a critical vulnerability were to emerge in the software, EGI CSIRT can request the service to be shut down immediately [2].

Because of this, as of September 22 2014, Resource Centre Administrators will start getting alerts about dCache 2.2.Xs deployed in their site. The list of the affected service end-points will be available on the Operations Dashboard of your site: https://operations-portal.egi.eu/dashboard.

Purpose of these alarms is to:
1- pro-actively alert administrators about the need to upgrade dCache services before they reach end of security updates and support;
2- collect information about decommissioning/upgrade plans of the affected products.

IMPORTANT. According to the EGI decommissioning policy [2], the decommissioning deadline expires one month after the end of security updates and support of the software.

****
*For dCache 2.2.X the hard deadline is: 31-10-2014 [3].*
****

dCache software versions are in general detected through nagios tests, which query the information discovery system (BDII), on whose accuracy they depend on.

Please get in touch with your NGI operations staff for more information, or open a GGUS ticket.

Best wishes
EGI Operations

[1] a Resource Centre Administrator ''SHOULD follow IT security best practices that include pro-actively applying software patches, updates or configuration changes related to security''.
[2] https://wiki.egi.eu/wiki/PROC16#Policy
[3] https://wiki.egi.eu/wiki/Software_Retirement_Calendar#dCache_v._2.2.X