UVOS v.1.4.1

Release Notes

What's new for UVOS Server

• Added support for CRLs (I #3163915)
• Updated many dependencies, removed deprecated or proprietary code usage. (I #3163913)
• Added endorsed directory. (I #3163913)
• Updated underlying security libraries. xmlsec and commons-logging must be in endorsed directory. (I #3163913)
• Updated to Jetty 6.1.26 (I #3163913)
• Fixed SF bug #3041189: error occurring in group's authorization policy management.
• Fixed a bug which occurred in duplicate reporting of implied groups for users being members of multiple child groups. (B #3163916)
• Fixed a bug which prevented server to function normally when there was no web module installed. (B #3163919)
• Fixed a bug which resulted incomplete attributes list when querying for all attributes including implied. The error was that not only attributes that were defined in a group where the client had no permission to read were hidden but also all attributes implied by those hidden (while sometimes in a parent group the client had permission to read). (B #3163920)
• Meaningful error messages are provided when incorrect key alias is configured. (I #3163913)
• Changed a default logging configuration to be more similar to the other UNICORE servers: daily log file rolling is used now. (I #3163913)
• Fixed the SF bug #3020090. The fixed memory leak caused the server to hang after serving ca 500000 requests.

What's new for UVOS Client

• Fixed bug with attribute value encoding. Currently all UTF-8 characters are properly passed to the server, regardless of the local system settings. (B #3163928)
• Added quit alias to exit

What's new for UVOS webapp

• Updated for compatibility with UVOS server 1.4.0 (won't work with older versions)
• Updated to the latest SpringWebFlow 2.0.
• It is possible to eliminate agreement form. Simply use empty agreement in form definition. (FR #3163908)
• Option to submit additional CA certificate is not rendered if email identity format was chosen. (FR #3123576)
• Full verification of submitted certificate was implemented. (FR #3123570)
• Possibility to enforce additional groups or additional attributes was added. (FR #3163907)
• It is possible to control in application form whether submission of an additional CA certificate is enabled. (FR #3123576)

What's new for UVOS webauthn

• Updated for compatibility with UVOS server 1.4.0 (won't work with older versions)
• Added highly experimental support for SAML Redirect binding which allow to use UVOS with this module installed as IdP for Shibboleth SP.

Deployment notes

• NONE - this is the first release of UVOS in RPM packages.

Known issues

• NONE

List of RFCs

• Attribute value encoding in client calls
• To restrictive attributes filtering by the UVOS server
• UVOS fails when there is no web module
• Duplicate reporting of implied groups
• CRL support in UVOS server
• Update UVOS server to use latest libraries/UNICORE
• Possibility to eliminate agreement form
• Possibility to enforce additional groups or attributes
• SecurityContext not released
• Creating a group's policy error
• uvos-webapp:checking uploaded certificate against truststore
• uvos-webapp:turning off upload of CA certificate

Documentation

UVOS Server

• Functional Description (section "Introduction")
• System Administrator Guide (sections from 'Installation' to the end)
• Service Reference Card
• Service Configuration Template : Available in package (in /etc/unicore/uvos-server folder)

UVOS Client

• Functional Description
• System Administrator Guide

UVOS webauth

• Functional Description (section "Introduction")
• System Administrator Guide (sections from 'Installation' to the end)
• Service Configuration Template: available in distribution (included in war file)

UVOS wepapp

• Functional Description (section "Introduction")
• http://unicore-dev.zam.kfa-juelich.de/documentation/uvos-webapp-1.5.0/manual.pdf (sections from 'Installation' to the end)
• Service Configuration Template: available in distribution (included in war file)

Artefacts

-- MarcelinaBorcz - 04-May-2011