Quality Criteria Verification Report ==================================== Product: globus.gridftp Release: globus.gridftp.sl5.x86_64-6.1.0 Software Provider: Globus RT Ticket: 8828 Provider contact: mattias.ellert@fysast.uu.se Verifier: Pablo Orviz Hours worked: 30 min Date: 07-10-2015 Status: Accepted Summary ======= Product verified together with globus-security: https://rt.egi.eu/rt/Ticket/Display.html?id=8832 Related tickets =============== None. Documentation Criteria ====================== * Release notes: http://toolkit.globus.org/toolkit/docs/6.0/gridftp/#gridftp * User Documentation: http://toolkit.globus.org/toolkit/docs/6.0/gridftp/#gridftp * API Documentation: http://toolkit.globus.org/toolkit/docs/6.0/gridftp/#gridftp * Admin Documentation: http://toolkit.globus.org/toolkit/docs/6.0/gridftp/#gridftp * Software License: - Generic Criteria ================ (Possible Statuses: OK, WARN, FAIL, NA (Not Applicable) or NT (Not Tested)) * Binary Distribution: OK * Upgrade: OK * X.509 Certificate support: OK * SHA-2 Certificates Support: OK * RFC Proxy support: NT * ARGUS Integration: NT * World Writable Files: * Passwords in world readable files: OK * GlueSchema 1.3 Support: NA * GlueSchema 2.0 Support: NA * Middleware Version Information: NA * Service Probes: OK * Accounting Records: NA * Bug Tracking System: OK Verification Logs ================= ┌ UMD verification app ─────────────────────────────────────────────────┐ │ │ │ Quality criteria: http://egi-qc.github.io │ │ Codebase: https://github.com/egi-qc/umd-verification │ │ │ │ ─────────────────────────────────────────────────────────────────┘ │ │ Verification repositories used: │ http://admin-repo.egi.eu/sw/unverified/umd-3.globus.globus-default-security.sl5.x86_64/6/1/0 │ http://admin-repo.egi.eu/sw/unverified/umd-3.globus.gridftp.sl5.x86_64/6/1/0 │ │ Repository basic configuration: │ umd_release http://repository.egi.eu/sw/production/umd/3/sl5/x86_64/updates/umd-release-3.0.1-1.el5.noarch.rpm │ igtf_repo http://repository.egi.eu/sw/production/cas/1/current/repo-files/EGI-trustanchors.repo │ epel_release http://download.fedoraproject.org/pub/epel/5/x86_64/epel-release-5-4.noarch.rpm │ │ Path locations: │ log_path /var/tmp/umd-verification │ yaim_path etc/yaim │ puppet_path etc/puppet │ └──────────────────────────────────────────────────────────────────────── [INFO] Installation type: install [INFO] Metapackage/s selected: + ige-meta-globus-gridftp ───────────────────────────────────────────────────────────────────────── [localhost] local: wget http://repository.egi.eu/sw/production/cas/1/current/repo-files/EGI-trustanchors.repo -O /etc/yum.repos.d/EGI-trustanchors.repo [localhost] local: yum -y install ca-policy-egi-core [localhost] local: mkdir -p /root/UMDVerificationOwnCA [localhost] local: openssl req -x509 -nodes -days 1 -newkey rsa:2048 -out ca.pem -outform PEM -keyout ca.key -subj '/DC=es/DC=UMDverification/CN=UMDVerificationOwnCA' [localhost] local: openssl x509 -noout -hash -in ca.pem [localhost] local: cp ca.pem /etc/grid-security/certificates/7564b85a.0 [[QC_DIST_1: Binary Distribution]] [localhost] local: yum -y remove epel-release* umd-release* [localhost] local: /bin/rm -f /etc/yum.repos.d//epel-* /etc/yum.repos.d//UMD-* [localhost] local: wget http://download.fedoraproject.org/pub/epel/5/x86_64/epel-release-5-4.noarch.rpm -O /tmp/epel-release-5-4.noarch.rpm [localhost] local: yum -y install /tmp/epel-release-5-4.noarch.rpm [INFO] EPEL release package installed. [localhost] local: wget http://repository.egi.eu/sw/production/umd/3/sl5/x86_64/updates/umd-release-3.0.1-1.el5.noarch.rpm -O /tmp/umd-release-3.0.1-1.el5.noarch.rpm [localhost] local: yum -y install /tmp/umd-release-3.0.1-1.el5.noarch.rpm [INFO] UMD release package installed. [localhost] local: yum -y install yum-priorities [INFO] 'yum-priorities' requirement installed. [localhost] local: rm -rf /tmp/repofiles/* [localhost] local: wget -P /tmp/repofiles -r --no-parent -R*.html* http://admin-repo.egi.eu/sw/unverified/umd-3.globus.globus-default-security.sl5.x86_64/6/1/0 [INFO] Verification repository 'GLOBUS.globus-default-security.sl5.x86_64.repo' enabled. [localhost] local: rm -rf /tmp/repofiles/* [localhost] local: wget -P /tmp/repofiles -r --no-parent -R*.html* http://admin-repo.egi.eu/sw/unverified/umd-3.globus.gridftp.sl5.x86_64/6/1/0 [INFO] Verification repository 'GLOBUS.gridftp.sl5.x86_64.repo' enabled. [localhost] local: yum repolist [INFO] Using repositories: ['EGI-trustanchors', 'GLOBUS.globus-default-security.sl5.x86_64 GLOBUS.globus-default-s enabled:', 'GLOBUS.gridftp.sl5.x86_64', 'LCG-trustanchors', 'UMD-3-base', 'UMD-3-updates', 'epel', 'puppetlabs-deps', 'puppetlabs-products', 'sl-base', 'sl-security'] [localhost] local: yum -y install ige-meta-globus-gridftp [INFO] Package 'ige-meta-globus-gridftp' installed version: ige-meta-globus-gridftp-3.3-1.el5.noarch (already installed). [OK] Installation ended successfully.. [[QC_SEC_2: SHA-2 Certificates Support]] [localhost] local: openssl req -newkey rsa:2048 -nodes -sha1 -keyout cert.key -keyform PEM -out cert.req -outform PEM -subj '/DC=es/DC=UMDverification/CN=verif-ca-sl5.privatevlan.cloud.ifca.es' [localhost] local: openssl x509 -req -in cert.req -CA ca.pem -CAkey ca.key -CAcreateserial -out cert.crt -days 1 [localhost] local: chmod 600 cert.key [localhost] local: cp cert.key /etc/grid-security/hostkey.pem [INFO] Private key stored in '/etc/grid-security/hostkey.pem' (with 600 perms). [localhost] local: cp cert.crt /etc/grid-security/hostcert.pem [INFO] Public key stored in '/etc/grid-security/hostcert.pem'. [localhost] local: facter -p puppetversion [localhost] local: yum -y install puppet [localhost] local: puppet module install lcgdm-gridftp --force [localhost] local: puppet apply -l /var/tmp/umd-verification/puppet.log --modulepath /etc/puppet/modules etc/puppet/gridftp.pp --detail-exitcodes [INFO] Puppet execution ended successfully. [OK] Product services can manage SHA-2 certs.. [[QC_SEC_5: World Writable Files]] [localhost] local: find / -not \( -path "/proc" -prune \) -type f -perm -002 -exec ls -l {} \; [OK] Found no world-writable file.. [localhost] local: yum -y install glue-validator [localhost] local: yum -y install openldap-clients [[QC_INFO_1: GlueSchema 1.3 Support]] [NA] Product does not publish information through BDII.. [[QC_INFO_2: GlueSchema 2.0 Support]] [NA] Product does not publish information through BDII.. [[QC_INFO_3: Middleware Version Information]] [NA] Product does not publish information through BDII.. [[QC_MON_1: Service Probes]] [NA] Product cannot be tested by Nagios.. [localhost] local: yum -y install myproxy [localhost] local: echo '/DC=es/DC=UMDverification/CN=verif-ca-sl5.privatevlan.cloud.ifca.es umd' > /etc/grid-security/grid-mapfile [[QC_FUNC_1: Basic Funcionality Test.]] [INFO] Probe 'Retrieve myproxy for ops.vo.ibergrid.eu VO.' [localhost] local: su umd -c "./bin/myproxy/client-test.sh retrieve" 2>&1 [INFO] Command 'su umd -c "./bin/myproxy/client-test.sh retrieve"' ran successfully [INFO] Probe 'GridFTP transfer check using globus-url-copy.' [localhost] local: su root -c "./bin/gridftp/client-test.sh " 2>&1 [INFO] Command 'su root -c "./bin/gridftp/client-test.sh "' ran successfully [OK] Basic functionality probes ran successfully.. [[QC_FUNC_2: New features/bug fixes testing.]] [NA] No definition found for QC_FUNC_2..