gLite > gLite 3.2 > glite-UI > Update to glite-UI 3.2.7-0  



gLite 3.2

glite-UI - Update to version 3.2.7-0

Date 24.03.2010
Priority Normal


glite-SE_dpm_mysql, glite-WN, glite-UI, glite-VOBOX, glite-LFC_mysql

New version of LFC and DPM

This is version 1.7.3 for both the LFC and DPM. It contains bug fixes for both services with respect to version 1.7.2; in particular

  • Bug 53568, which could cause the DPM's SRM 2.2 server to crash
  • Bug 50686, which meant a malformed request could crash the LFC or the DPNS

Other issues which may be noticed by users or administrators:

  • DPM will now only publish information regarding static spaces to the information system, rather than information about all spaces.
  • dpm-listspaces reports space in units of powers of 1024 for normal user use, to be consistent with other DPM tools. When providing data for the information system quantities are reported in SI units, as required by the glue schema.

The xrootd plugin for ALICE for the DPM has been upgraded to version 2.1.0. As previously, in order to enable xrootd access the xroot daemons must be obtained separately - they are not included in the glite release. Plugin 2.1.0 is intended for use with xrootd-20090729.0855, see:

The updated xrootd base is expected to bring increased stability to the service. The DPM plugin is also has updated defaults for some settings, extra authentication settings and uses the most recent ALICE security plugin.

See the CHANGES and RELEASE files in the CVS repository for a complete list of changes.

DPM Known issues:

For those upgrading from DPM 1.6.x please check the following for known issues and considerations relating to the database schema change:

In case the DPM gridftp fails to startup with the error message:

Starting dpm-gsiftp: /etc/sysconfig/dpm-gsiftp says NO: [FAILED]

please check that your /etc/sysconfig/dpm-gsiftp contains the line:


(for configuration files built from the 1.6 template this setting is missing)

glite-LFC_mysql, glite-SE_dpm_mysql, glite-UI, glite-WN, glite-VOBOX

Vulnerability fix for bug #54623

Important note for the UI and WN:

Due to a problem of the versioning scheme used by VDT, upgrading an already existing gLite 3.2 UI and WN fails. Using the commands "yum groupupdate glite-UI" resp. "yum groupupdate glite-WN" fails with an error message "package vdt_globus_essentials-VDT1.10.1x86_64_rhap_5-3.x86_64 (which is newer than vdt_globus_essentials-VDT1.10.1x86_rhap_5-4.i386) is already installed". The workaround is to uninstall the vdt_globus_essentials rpms manually:

rpm -e --nodeps vdt_globus_essentials-VDT1.10.1x86_rhap_5-3 vdt_globus_essentials-VDT1.10.1x86_64_rhap_5-3

Then do "yum groupupdate glite-UI" resp. "yum groupupdate glite-WN"


glite-UI rpm removal to fix vulnerability issue for bug #54623

This patch removes several rpms currently not needed on the UI. Sites already having these rpms installed should remove them manually with the command:

yum remove glite-data-agents-common glite-data-config-service glite-data-srm2-api-c glite-data-srm-util-cpp glite-data-srm-api-c

This is highly recommended as these rpms suffer from security bug #54623.

glite-UI, glite-VOBOX, glite-WN

Vulnerability fix for bug #54623

Update to patch #3040 to fix vulnerability issue bug #54623

This update fixes various bugs. For the full list of bugs, please see list below.

Fixed bugs

Number Description
 #35879 python module for LFC and DPM should be improved
 #39280 DPM 1.6.10: dpm_getspacetokens() returns an error message when no token exists
 #50686 There is a vulnerability concerning LFC
 #50818 operation with entries with wrong/unexisten uid crashed lfcdaemon
 #50962 dpm-listspaces should use consistent units
 #51493 DPM/https: fix Yaim configuration on disk only servers
 #51530 DPM should only publish static spaces
 #52075 DPM 1.7.2-4: /etc/sysconfig files overwritten by RPM
 #53568 DPM: srm daemon can attempt to use DB connection before it is opened
 #54542 LFC license issue
 #54792 [yaim lfc] reflect LFC sysconfig changes in YAIM configuration
 #54848 DPM/SRM: srmLs should return proper checksum algorithms
 #55699 LFC/Yaim: should handle remote DB
 #55777 DPM: httpd-cgi sets expire time too short on PUT/POST requests
 #55980 DPM: gridftp behavior for CKSM length argument
 #55982 LFC/DPM: Addition of liblcgdm library

Updated rpms

Name Version Full RPM name Description
GFAL-client 1.11.8-3.sl5 GFAL-client-1.11.8-3.sl5.i386.rpm v1.11.8-3
GFAL-client 1.11.8-3.sl5 GFAL-client-1.11.8-3.sl5.x86_64.rpm v1.11.8-3
glite-ce-cream-cli 1.11.1-4.sl5 glite-ce-cream-cli-1.11.1-4.sl5.x86_64.rpm org.glite.ce.cream-cli (1.11.1)
glite-ce-cream-client-api-c 1.11.1-4.sl5 glite-ce-cream-client-api-c-1.11.1-4.sl5.x86_64.rpm org.glite.ce.cream-client-api-c (1.11.1)
glite-ce-monitor-client-api-c 1.11.1-4.sl5 glite-ce-monitor-client-api-c-1.11.1-4.sl5.x86_64.rpm org.glite.ce.monitor-client-api-c (1.11.1)
glite-data-delegation-api-c 2.0.0-7.sl5 glite-data-delegation-api-c-2.0.0-7.sl5.x86_64.rpm gLite Data
glite-data-delegation-cli 2.0.1-3.sl5 glite-data-delegation-cli-2.0.1-3.sl5.x86_64.rpm gLite Data
glite-data-hydra-cli 3.1.2-4.sl5 glite-data-hydra-cli-3.1.2-4.sl5.x86_64.rpm gLite Data Encrypted Data Storage client and libraries
glite-data-transfer-cli 3.6.2-2.sl5 glite-data-transfer-cli-3.6.2-2.sl5.x86_64.rpm gLite Data
glite-lb-client 4.0.1-2.sl5 glite-lb-client-4.0.1-2.sl5.x86_64.rpm
glite-security-voms-admin-client 2.0.8-1 glite-security-voms-admin-client-2.0.8-1.noarch.rpm gLite VOMS Admin service - client package
glite-security-voms-admin-interface 2.0.2-1 glite-security-voms-admin-interface-2.0.2-1.noarch.rpm gLite VOMS Admin service - wsdl interface package
glite-service-discovery-api-java 2.0.2-2 glite-service-discovery-api-java-2.0.2-2.noarch.rpm org.glite.service-discovery.api-java v. 2.0.2-2
glite-UI-version 3.2.7-0 glite-UI-version-3.2.7-0.x86_64.rpm Version tag/marker for glite-UI
glite-wms-ui-commands 3.3.1-2.sl5 glite-wms-ui-commands-3.3.1-2.sl5.x86_64.rpm org.glite.wms-ui.commands v 3.3.1-2
gpt 3.2autotools2004_NMI_9.0_x86_64_rhap_5-1 gpt-3.2autotools2004_NMI_9.0_x86_64_rhap_5-1.x86_64.rpm The Grid Packaging Toolkit (GPT)
gsiopenssh VDT1.10.1x86_64_rhap_5-4.3 gsiopenssh-VDT1.10.1x86_64_rhap_5-4.3.x86_64.rpm Virtual Data Toolkit
lcg_util 1.7.6-2.sl5 lcg_util-1.7.6-2.sl5.i386.rpm v1.7.6-2
lcg_util 1.7.6-2.sl5 lcg_util-1.7.6-2.sl5.x86_64.rpm v1.7.6-2
myproxy VDT1.10.1x86_64_rhap_5-4.2 myproxy-VDT1.10.1x86_64_rhap_5-4.2.x86_64.rpm Virtual Data Toolkit
uberftp-client VDT1.10.1x86_64_rhap_5-1.27 uberftp-client-VDT1.10.1x86_64_rhap_5-1.27.x86_64.rpm Virtual Data Toolkit
vdt_globus_rm_client VDT1.10.1x86_64_rhap_5-4 vdt_globus_rm_client-VDT1.10.1x86_64_rhap_5-4.x86_64.rpm Virtual Data Toolkit
vdt_globus_rm_essentials VDT1.10.1x86_64_rhap_5-4 vdt_globus_rm_essentials-VDT1.10.1x86_64_rhap_5-4.x86_64.rpm Virtual Data Toolkit

The RPMs can be updated using yum via

Service reconfiguration after update

Not needed.

Service restart after update

Not needed.

How to apply the fix

  1. Update the RPMs (see above)
  2. Update configuration (see above)
  3. Restart the service if necessary (see above)