PPS Pilot Follow-up Meeting Minutes Tue 23 Jun 2009

• Date: Tue 23 Jun 2009
• Agenda: 61392
• Description: Pilot of glexec/SCAS: check-point
• Chair: Antonio Retico
• Home: PpsPilotSCAS

Attendance

• PPS: Antonio Retico
• SA3/Certification: Andy Elwell
• JRA1/Development: Oscar Koeroo; Mischa Salle
• Atlas: Jose Caballero
• LHCb: Absent
• IN2P3: Apologise
• Lancaster: Absent
• FZK: Angela Poschlad

Review of action items (tasks)

SA1/SA3 tasks

Status of the subtasks of TASK:8986 (see them in the PPS tracker ) .

The tasks for SA1 sites were updated. Site administrators are welcome to verify the estimated effort (in person-hours) and to update it if needed.

other tasks

---

All open actions at PpsPilotSCAS#Tasks_and_actions were reviewed and closed (see individual comments for the update)

Status and results of the pilot service (by VOs and sites)

Atlas

nothing to report

LHCb

Absent

---

Antonio: PATCH:3050 (scripts to manage the environment are now available in the repositories at CNAF, hte documentation is available on the pilot wiki pages and the sites have been invited to upgrade on the 17th of June.

Lancaster

Absent. Oscar reported that intense debugging activity at the ite is in progress with good feedback from the site (see later for report). Antonio asked to be kept in the loop or at least to receive updates from time to time

Update received via e-mail from Peter: 1. glexec-wrapper-scripts-0.0.3-1.noarch.rpm is now installed at Lancaster 2. if he agrees, Jose should test the wrapper script for ATLAS at Lancaster

IN2P3

Apologise. Pierre sent the following report via e-mail

---

I [...] took the time to internally discuss the possibility to consider glexec as a component apart of glite-WN, and so as a component close to the OS part. My colleagues are not really enthusiastic because one point that is strongly disapproved is the use of shared libraries for a setuid-capable executable. By the way, my colleagues would have prefered a glexec statically compiled. That means a WN-specific version of glexec.

Anyway, once back from Avignon, my plan is to start to reinstall from scratch Glexec + WN as proposed by Maarten. We also think that glexec must be separated from the glite-WN.

---

Following that Antonio suggested that IN2P3 should focus on the deployment issues and be exonerated for the time being from the user testing (environment script)

FZK

will install the scripts to manage the environment very soon and notify when done

Antonio: it would be good if testing could be done before the next GDB (8th of June)

Status and results of the development (by developers)

Oscar: we have been doing debugging at LANCASTER for the issue of glexec rejecting the regenerated proxy in case it contains a VOMS attribute that has expired in the meantime. We suspect that the problem is not in glexec but a bug found in the LCAS framework, this is causing a segfault in the VOMS API. VOMS API should fail gracefully so Mischa has opened BUG:52054 against it. Maybe that a workaround is possible at the client side, but investigation is still in progress.

Antonio invited to test solutions at LANCASTER before releasing the patch and demands to be kept informed of the progresses. Until a better understanding of the issue (or of the possible impact in production) is not reached, the newly certified patches 2973 and 2990 will be held in PPS.

Status of the certification (SA3, certification)

PATCH:2973 and PATCH:2990 have been certified and will be soon released to PPS

Open Issues (by VOs, sites, deployment teams)

Two main open issues:

• deployment at sites running WNs on a user file system (e.g. IN2P3)
• issue with expired VOMS attribute at LANCASTER still to be understood

Recommendations for release and deployment

The version of the glexec and SCAS currently under certification (PATCH:2973) should be released to production as soon as certified, provided that the issue currently affecting LANCASTER is understood and proved of limited impact.

Decision about termination/extension of the pilot

We will have another check-point on the 1st of July at 16:00 CEST

AOB

---