
Revised EGI Service Operations Security Policy
2013-05-24 16:02:40 - From david kelsey
The EGI Security Policy Group is pleased to announce that a revised security policy will come into effect on 1st June 2013.
The revised "Service Operations Security Policy" contains several changes:
a) The statement on IPR is removed as this is addressed in other document(s).
b) Introduces a new requirement to implement automated procedures to download the security emergency suspension lists defined centrally by Security Operations. This feature is being worked on by the EGI CSIRT and others and will be made available later.
c) It addresses the end of security support for deployed software components
d) It addresses the auditing requirements of services that have been retired.
This policy not only applies to Resource Centres but also to anyone (e.g. a VO) providing or running a service on the Infrastructure.
The new version is to be found at:
https://documents.egi.eu/document/1475
(it replaces the old version at https://documents.egi.eu/document/669)
The full list of adopted security policies is always available on the SPG wiki at
https://wiki.egi.eu/wiki/SPG:Documents
Yours
David Kelsey (STFC-RAL)
Chair of EGI SPG

UMD-2 update 2.5.0 have been released
2013-05-24 14:25:18 - From Peter Solagna
Dear all,
UMD v2.5.0 was released today, this is the tenth update for UMD-2 made available for the EGI production infrastructure. This release has been released for Scientific Linux 5, SL6 and Debian 6. It includes also a security update for BLAH.
The products included in this release are the following:
From EMI:
CREAM Torque 2.0.1
- Bug fix release
WMS 3.4.1
-Bug fixes
Blah 1.18.3
- This release solves a vulnerability bug
TORQUE server config v. 1.0.1-1:
- Bug fixes release
L&B version 3.2.10 released in both SL5 and SL6:
- Bug fixes release, including: nagios probe customization, proper handling of rarely used authorization roles, and purging of jobs from the L&B Proxy.
From IGE:
GridFTP 5.2.3
- Provides by default disk and network stacks enabled. It also provides server support for setting file modification time and more features.
Gsisshterm 1.3.4
- Enabled VOMS support.
Gram5
- Bug fixes release
Please, read the extensive release notes for change logs, installation notes and more:
http://repository.egi.eu/2013/05/24/release-umd-2-5-0/
Wiki page: https://wiki.egi.eu/wiki/UMD-2:UMD-2.5.0
This wiki page also contains additional information like the known issues of the distributed products.
UMD repositories information:
http://repository.egi.eu/category/umd_releases/distribution/umd-2/
To be directly notified about future releases, please subscribe the UMD
release feed at: http://repository.egi.eu/category/umd_releases/feed
Regards
Peter Solagna - EGI Operations Manager

UMD-1 StoRM retirement calendar *UPDATE*
2013-05-23 18:19:55 - From Peter Solagna
Dear site manager,
in response to our request for an extension of the security support period of the StoRM version currently released in UMD-1 (latest UMD-1 version of StoRM is v1.8.3), the product team agreed to provide security updates for UMD-1 StoRM until a new StoRM release (EMI-3) has successfully finished the UMD verification and staged rollout for UMD-3, plus three weeks.
Based on the expected release of the patched EMI-3 version of StoRM the new calendar for the decommission of the UMD-1 StoRM instances is:
- End of security support for the EMI-1 StoRM version: June 21st
- New deadline for the decommissioning of the old EMI-1 StoRM instances (considering the current EGI policy): July 21st
- The dates above can shift forward if there will be delays in the release of the patched StoRM, or if there will be issues found during Staged Rollout
Currently StoRM from UMD-1 are not generating anymore alarms in the operational dashboard, ROD teams have been instructed that related tickets can be closed. The alarms for UMD-1 StoRM instances will be turned on again at the end of June.
Sites will have time until - at least - July 21st to upgrade to the new version of StoRM.
Thanks
Regards
Peter Solagna
EGI Operations Manager

UMD 3.0.0 released on May 14th
2013-05-15 10:58:41 - From Peter Solagna
Dear all,
UMD v3.0.0 was released yesterday, this is the third Major release of UMD (Unified Middleware Distribution) made available for the EGI production infrastructure. This release contains products supported for Scientific Linux 5, SL6 and Debian 6.
This release contains some backward incompatibilities, please read the full release notes of UMD 3.0.0 for known issues or installation notes.
The products included in this release are the following:
WMS v. 3.4.0
- GLUE2 support, integration with Condor 7.8.0 and new DAG engine
- Support for RFC proxies
- Dismissed support for WMProxy java and python
CREAM v. 1.15.1
- EMIR integration
- TORQUE module 2.1.0
- TORQUE server config 1.0.1-2
- *Note*: This CREAM version comes with the new APEL clients. The upgrade of APEL requires particular attention, please read the UMD release notes. If needed, SA2 made available a tutorial for the deployment of CREAM with the APEL clients from UMD-2.
BDII-Top v. 1.1.0
- Packaging fixes
BDII-Core v. 1.5.0
- Support for ARC resources
- EMIR integration
- Bug fixes and enhancements
BDII-Site v. 1.2.0
- Bug fixes and enhancements
CANL v2.0.7
- Bug fixes and enhancements
- Support for SHA-2 and OCSP
gLite-gsoap/gss v. 3.2.0
- Repackaging
APEL publisher v. 4.1.0
- Major update, only compatible with APEL Parsers v.2.1.0 and above.
- Support for SLURM
- *Note*: the deployment of the APEL clients requires particular attention, please read carefully the release notes
APEL parsers v. 2.1.0
- Major update, compatible with APEL publisher v. 4.1.0 and above
- Support for SLURM
ARGUS v. 1.6.0
- CANL support, and new VOMS library
- First release for Debian6
glExec-WN v. 1.2.0
- Bug fixes and enhancements
EMI-WN v. 3.0.0
- Bug fixes and enhancements
- VOMS clients based on the new java libraries
TORQUE-WN v. 1.0.0-3
- Repackaging
L&B v. 4.0.4
- Several new features: VM status monitoring, RSS feeds, bug fixes and enhancements.
- DB schema update required
DPM v. 1.8.6, LFC v. 1.8.6
- Repackaging
GFAL/lcg_util v. 1.14.0
- Bug fixes and enhancements
EMI-UI v. 3.0.0
- Bug fixes and enhancements
Gridsite v. 2.0.4
- Integration with CANL
- Bug fixes and enhancements
lcg-info-clients v. 1.0.1
- Repackaging
gLite-yaim-core v. 5.1.1
- Bug fixes
Please, read the extensive release notes for change logs, installation notes and more:
http://repository.egi.eu/2013/05/14/release-umd-3-0-0/
Wiki page: https://wiki.egi.eu/wiki/UMD-3:UMD-3.0.0
This wiki page also contains additional information like the known issues of
the distributed products.
UMD repositories information:
http://repository.egi.eu/category/umd_releases/distribution/umd-3/
To be directly notified about future releases, please subscribe the UMD
release feed at: http://repository.egi.eu/category/umd_releases/feed
Regards
Peter Solagna - EGI.eu Operations Manager

Acknowledging use of resources (short survey - final call)
2013-05-13 16:43:10 - From Sergio Andreozzi
Dear VO Manager,
We need your collaboration to help us demonstrating the capability of EGI to empower your VO members in achieving research outcomes. A couple of weeks ago, we circulated a short survey that was answered only by 5 VOs. We have extended the deadline until Friday 17 May.
Your inputs are important in improving the demonstration of EGI impact and ensuring long-term sustainability. Please, dedicate few minutes to participate in this survey: https://www.surveymonkey.com/s/SNJDD3F
Kind regards,
Sergio Andreozzi
EGI.eu Strategy and Policy Manager
---Previous message---
Dear VO Manager,
The OpenAIRE project (http://www.openaire.eu/) established and operates an
electronic infrastructure for handling peer-reviewed articles as well as
other important forms of publications (pre-prints or conference
publications). This initiative has a strong support from the European
Commission as a tool to promote and implement the Open Access policy to
research outputs.
EGI is collaborating with OpenAIRE representatives to extend their current
service in order to be able to link publications to the supporting
e-Infrastructures. By offering this functionality, we will be able to
automatically collect the scientific publications that have benefited from
our services, helping to demonstrate the scientific impact.
One of the actions is to identify all current acknowledgement statements in
use within the EGI VO's so to configure OpenAIRE to automatically discover
existing publications available from the connected repositories. We prepared
a very short survey to collect this information:
https://www.surveymonkey.com/s/SNJDD3F
Please, provide your inputs by next 10 May.
Kind regards,
Sergio Andreozzi
EGI.eu Strategy and Policy Manager