Dear all,

Following yesterday’s disruption to the STFC network, the site-wide work that was being undertaken (and would have continued until Dec 10th) has been paused until early next year. As a result, GOCDB should no longer be considered at risk.

Thanks,
The GOCDB Team

Dear all,

Following a change to the RAL network today, as part of the wider ongoing work, STFC’s externally connectivity has been degraded. This seems to be effecting some users more than others, with some users seeing connections that are slow or intermittent and other users not being able to connect at all.

This change will now be rolled back, resulting in a period of network outage between 16:30 and 17:00 UTC.

As a result of this degradation:
- There may be delays in data reaching the EGI Accounting Portal.
- GOCDB (goc.egi.eu and gocdb.hartree.stfc.ac.uk) may have been unavailable to certain users throughout the day.

Apologies for any inconvenience this is causing,

The APEL and GOCDB Team

we are dismissing the HTCONDOR-CE
ce01-htc.cr.cnaf.infn.it:9619
(cfr. ggus ticket:
https://ggus.eu/index.php?mode=ticket_info&ticket_id=155019 )

The CE currently is on scheduled down until 30/11/2021 and we do not plan to reactivate it.

Regards
Stefano

Dear all,

We would like to make you aware that GOCDB will be operating at risk from 22nd November until 10th December. This is due to site-wide work being undertaken which involves some major changes to the RAL network.

We have declared a "warning" downtime for this period: https://goc.egi.eu/portal/index.php?Page_Type=Downtime&id=31434

There are a series of changes as part of this work, with multiple site network routers being updated. Some of these will directly affect networks that underpin service components of GOCDB. We will declare specific downtimes for these periods, and have already done so for the 30th November and 2nd December.

30th November, PM - Requests to goc.egi.eu will be served by the read only failover: https://goc.egi.eu/portal/index.php?Page_Type=Downtime&id=31435
2nd December, AM - goc.egi.eu will be down: https://goc.egi.eu/portal/index.php?Page_Type=Downtime&id=31438

The failover will remain available throughout this work at https://gocdb.hartree.stfc.ac.uk/.

We would like to thank you in advance for your understanding and we apologise for the short notice and for any disruption or inconvenience this may cause.

Thanks,
The GOCDB Team

Dear all,

we have recently updated the vomsmania.cnaf.infn.it certificate, this the new subject and issuer:

subject: /DC=org/DC=terena/DC=tcs/C=IT/ST=Roma/O=Istituto Nazionale di Fisica Nucleare - INFN/CN=vomsmania.cnaf.infn.it
issuer: /C=NL/O=GEANT Vereniging/CN=GEANT eScience SSL CA 4

Please update your configurations as soon as possible.

Diego
NGI_IT

As described in https://confluence.egi.eu/display/EGIPP/PROC12+Production+Service+Decommissioning, I am writing this to notify and track the decommissioning of the following services hosted at JP-KEK-CRC-02:

kek2-lfc.cc.kek.jp (Central-LFC)
kek2-lfc03.cc.kek.jp (Central-LFC)
kek2-lfcb1.cc.kek.jp (Local-LFC)
kek2-lfcb2.cc.kek.jp (Local-LFC)

The following timeline will be applied for the decommissioning steps:

Thu, November 4th - Announcement: Creating a GGUS ticket (*1) and EGI Broadcast.

Fri, November 19th - Start the downtime (*2) with Warning of Severity six weeks before the service decommission. The services as a read-only mode will be provided until the end of the day of services. Please keep in mind no longer available to register any new data on or after this date.

Thu, December 16th - Service will be decommissioned and removed from the GOCDB. The database backup and logs on the services must be secured and preserved at least 90 days from this date.

Sincerely yours,
Go

[1] https://ggus.eu/index.php?mode=ticket_info&ticket_id=154776
[2] https://goc.egi.eu/portal/index.php?Page_Type=Downtime&id=31357

As described in https://wiki.egi.eu/wiki/PROC12_Production_Service_Decommissioning, I am writing this to notify and track the decommissioning of the following services hosted at JP-KEK-CRC-02:

kek2-ce01.cc.kek.jp (ARC-CE)
kek2-ce02.cc.kek.jp (ARC-CE)

The following timeline will be applied for the decommissioning steps:

Tue, November 2nd - Announcement: Creating a GGUS ticket [1] and EGI Broadcast

Wed, November 17th - Start the downtime with Warning of Severity two weeks before the service decommission. Jobs will be allowed to submit and run until the end of the day of services. Jobs must complete and secure outputs before the end of the service. Several queues, which name ends with _heavy, for a very long time running job are going to close on Monday, November 22nd, 2021.

Mon, December 3rd - Service will be decommissioned and removed from the GOCDB. The service to be replaced for decommissioning ARC-CEs has been running on kek2-ce03.cc.kek.jp and kek2-ce04.cc.kek.jp. The service quality is near the production level. All jobs should be submitted to these new ARC-CEs on and after this date.

Sincerely yours,
Go

*1 https://ggus.eu/index.php?mode=ticket_info&ticket_id=154729

CAMK site will be decommissioned soon.

CAMK site supports vo.hess-experiment.eu and vo.cta.in2p3.fr VOs. AFAIK CAMK SEs do not store any big data belonging to the HESS/CTA VOs (VO managers may want to verify this).

https://ggus.eu/index.php?mode=ticket_info&ticket_id=154368

Timeline:
2021-10-09 - announcement
2021-10-23 - deadline for VO managers replies/actions
2021-10-23 - start of downtime
2021-11-30 - removal from GOCDB

regards,

Jerzy Borkowski

Dear all,

EUGridPMA has announced a new set of CA rpms. Based on this IGTF release a new set of CA RPMs has been packaged for EGI.

Please upgrade until 2021.09.12 at your earliest convenience. When this time is over, SAM will throw critical errors on CA tests if old CAs are still detected.

Please check https://wiki.egi.eu/wiki/EGI_IGTF_Release for more details
EGI UMD software provisioning Team

The following notes accompany this version:
European Grid Infrastructure EGI Trust Anchor release 1.113 2021.10.04

------------------------------------------------------------------------------
For release DOCUMENTATION available on this EGI Trust Anchor release see
https://wiki.egi.eu/wiki/EGI_IGTF_Release
------------------------------------------------------------------------------

This is the EGI Trust Anchor release, based on the updated IGTF Accredited CA
distribution version 1.113-1 with the specific DOGWOOD CA in
meta-package "ca-policy-egi-combined-adequacy-model-1.113-1"
that supports the model of joint assurance provision as detailed in the
EGI Policy on Acceptable Authentication Assurance.

The following notices are republished from the IGTF, inasfar as pertinent to
this release. Details are found in the newsletter https://www.eugridpma.org/

Changes from 1.112 to 1.113
---------------------------
(4 October 2021)

* Suspended MD-GRID CA due to network resolution issues (MD)

The CA modifications encoded in both "requires" and "obsoletes" clauses (RPM)
and Conflicts/Replaced clauses (Debian) have been incorporated in the above-
mentioned meta-packages. This release is best enjoyed with fetch-crl v3 or
better, available from GNU/Linux OS add-on repositories Fedora, EPEL, Debian,
and from the IGTF at https://www.igtf.net/fetch-crl

IMPORTANT NOTICE:
This release contains a new "cam" (combined assurance/adequacy) package
based on the approved policy on differentiated assurance. See details on
the EGI Wiki at https://wiki.egi.eu/wiki/EGI_IGTF_Release#cam-impl
TECHNICALLY THIS MEANS THAT
you must ONLY install the new ca-policy-egi-cam packages if you ALSO
at the same time implement VO-specific authorization controls in your
software stack. This may require reconfiguration or a software update. See
https://wiki.egi.eu/wiki/EGI_IGTF_Release#cam-impl
OTHERWISE
just only install or update the regular ca-policy-egi-core package. There
are no changes in this case. The ca-policy-egi-core package is approved for
all VOs membership and assurance models. No configuration change is needed.

Policy on Acceptable Authentication Assurance (Updated 1 Feb 2017)
------------------------------------------------------------------
If a VO registration service or e-Infrastructure registration service is
accredited by EGI to meet the approved authentication assurance, an IGTF
"DOGWOOD" accredited Authority - used solely in combination with said
registration service - is also adequate for user authentication. See
the policy at https://documents.egi.eu/document/2930 for details.
This additional restriction policy must be implemented by each service
in the authorization software. The "combined assurance" model package MUST NOT
be installed unless the additional authorization is in place. You will need
to reconfigure and may need to install upgrades.

Version information: ca-policy-egi-combined-adequacy-model = 1.113-1