Quality Criteria Verification Report ==================================== Product: gLexec Release: 1.2.3 Software Provider: gLexec RT Ticket: 8352 Provider contact: msalle@nikhef.nl Verifier: Pablo Orviz Hours worked: 2 hours Date: 10/06/2015 Status: Accepted Summary ======= WN-like gLexec verification. Using automated tool @ https://github.com/egi-qc/umd-verification Related tickets =============== None Documentation Criteria ====================== * Release notes: http://www.eu-emi.eu/releases/emi-3-monte-bianco/updates/-/asset_publisher/5Na8/content/update-25-09-03-2015-v-3-15-1-1#gLExec_wn_v_1_2_3 * User Documentation: https://wiki.nikhef.nl/grid/GLExec * API Documentation: https://wiki.nikhef.nl/grid/GLExec * Admin Documentation: https://wiki.nikhef.nl/grid/GLExec * Software License: Apache 2 Generic Criteria ================ (Possible Statuses: OK, WARN, FAIL, NA (Not Applicable) or NT (Not Tested)) * Binary Distribution: OK * Upgrade: NT * X.509 Certificate support: OK * SHA-2 Certificates Support: OK * RFC Proxy support: OK * ARGUS Integration: OK * World Writable Files: OK * Passwords in world readable files: OK * GlueSchema 1.3 Support: NA * GlueSchema 2.0 Support: NA * Middleware Version Information: NA * Service Probes: OK * Accounting Records: NA * Bug Tracking System: OK Verification Logs ================= ┌ UMD verification app ─────────────────────────────────────────────────┐ │ │ │ Quality criteria: http://egi-qc.github.io │ │ Codebase: https://github.com/egi-qc/umd-verification │ │ │ │ ─────────────────────────────────────────────────────────────────┘ │ │ Verification repositories used: │ http://admin-repo.egi.eu/sw/unverified/umd-3.glexec.glexec.sl5.x86_64/1/2/3 │ │ Repository basic configuration: │ epel_release http://download.fedoraproject.org/pub/epel/5/x86_64/epel-release-5-4.noarch.rpm │ umd_release http://repository.egi.eu/sw/production/umd/3/sl5/x86_64/updates/umd-release-3.0.1-1.el5.noarch.rpm │ igtf_repo http://repository.egi.eu/sw/production/cas/1/current/repo-files/EGI-trustanchors.repo │ │ Path locations: │ log_path /var/tmp/umd-verification │ yaim_path etc/yaim │ │ Local environment variables passed: │ MYPROXY_PASSWD XXXX │ MYPROXY_USER XXXX │ MYPROXY_SERVER gridpx01.ifca.es │ └──────────────────────────────────────────────────────────────────────── [[QC_INST_1: Binary Distribution]] [localhost] local: yum -y remove epel-release* umd-release* [localhost] local: /bin/rm -f /etc/yum.repos.d/UMD-* /etc/yum.repos.d/epel-* [localhost] local: wget http://download.fedoraproject.org/pub/epel/5/x86_64/epel-release-5-4.noarch.rpm -O /tmp/epel-release-5-4.noarch.rpm [localhost] local: yum -y install /tmp/epel-release-5-4.noarch.rpm [INFO] EPEL release package installed. [localhost] local: wget http://repository.egi.eu/sw/production/umd/3/sl5/x86_64/updates/umd-release-3.0.1-1.el5.noarch.rpm -O /tmp/umd-release-3.0.1-1.el5.noarch.rpm [localhost] local: yum -y install /tmp/umd-release-3.0.1-1.el5.noarch.rpm [INFO] UMD release package installed. [localhost] local: yum -y install yum-priorities [INFO] 'yum-priorities' (UMD) requirement installed. [localhost] local: wget -P /tmp/repofiles -r -l1 --no-parent -A.repo http://admin-repo.egi.eu/sw/unverified/umd-3.glexec.glexec.sl5.x86_64/1/2/3/repofiles [INFO] Verification repository 'http://admin-repo.egi.eu/sw/unverified/umd-3.glexec.glexec.sl5.x86_64/1/2/3' enabled. [localhost] local: yum -y install glexec lcmaps-plugins-c-pep lcmaps-plugins-c-pep-debuginfo mkgltempdir lcmaps-plugins-verify-proxy [OK] Metapackage '['glexec', 'lcmaps-plugins-c-pep', 'lcmaps-plugins-c-pep-debuginfo', 'mkgltempdir', 'lcmaps-plugins-verify-proxy']' installed successfully... [INFO] Configuration actions. [INFO] Group 'iberops' and user accounts created. [INFO] Group 'iberopses' and user accounts created. [localhost] local: cp /etc/glexec.conf /etc/glexec.conf.0 [INFO] Backup /etc/glexec.conf file. [localhost] local: sed -i 's/.*user_white_list.*/user_white_list = umd/g' /etc/glexec.conf [INFO] User 'umd' white-listed in /etc/glexec.conf [localhost] local: cp /etc/lcmaps/lcmaps-glexec.db /etc/lcmaps/lcmaps-glexec.db.0 [INFO] Backup /etc/lcmaps/lcmaps-glexec.db file. [INFO] GLExec lcmaps configured. [[QC_SEC_2: SHA-2 Certificates Support]] [NA] Product does not need certificates.. [[QC_SEC_5: World Writable Files]] [localhost] local: find / -not \( -path "/proc" -prune \) -type f -perm -002 -exec ls -l {} \; [OK] Found no world-writable file.. [localhost] local: yum -y install glue-validator [localhost] local: yum -y install openldap-clients [[QC_INFO_1: GlueSchema 1.3 Support]] [NA] Product does not publish information through BDII.. [[QC_INFO_2: GlueSchema 2.0 Support]] [NA] Product does not publish information through BDII.. [[QC_INFO_3: Middleware Version Information]] [NA] Product does not publish information through BDII.. [INFO] PRE-validate actions. [localhost] local: yum -y install myproxy voms-clients ca-policy-egi-core [[QC_FUNC_1: Basic Funcionality Test.]] [INFO] Probe 'Create myproxy for ops.vo.ibergrid.eu VO.' [localhost] local: su umd -c ./bin/user_creds/getproxy.sh [OK] Command 'su umd -c ./bin/user_creds/getproxy.sh ' ended OK with result: Your identity: /DC=es/DC=irisgrid/O=ifca/CN=pablo-orviz/CN=proxy/CN=proxy/CN=proxy Contacting voms01.ncg.ingrid.pt:40001 [/C=PT/O=LIPCA/O=LIP/OU=Lisboa/CN=voms01.ncg.ingrid.pt] "ops.vo.ibergrid.eu" Done Creating proxy Done Your proxy is valid until Thu Jun 11 04:30:36 2015 A credential has been received for user orviz in /tmp/x509up_u500. [INFO] Probe 'Testing basic functionality.' [localhost] local: su umd -c ./bin/glexec/test-basic.sh [OK] Command 'su umd -c ./bin/glexec/test-basic.sh ' ended OK with result: uid=23203(iberops003) gid=23200(iberops) groups=23210(iberopses) [INFO] Probe 'Testing transfer of a specific proxy file.' [localhost] local: su umd -c ./bin/glexec/test-transfer.sh [OK] Command 'su umd -c ./bin/glexec/test-transfer.sh ' ended OK with result: uid=23203(iberops003) gid=23200(iberops) groups=23210(iberopses) [OK] Basic functionality probes ran successfully.. [[QC_FUNC_2: New features/bug fixes testing.]] [OK] No definition found for QC_FUNC_2..