Hello,
the dmlite packages of DPM 1.15.0 are now available in EPEL
As usual, It may take two or three days for it to be available in the various mirrors.
I wish to warmly thank all those who have contributed to it with their opinions, advice, testing and direct contributions.
What follows are the release notes for this release
Cheers
Fabrizio
******************************************
*********** JIRA release notes
Release Notes - LCGDM Development - Version dmlite 1.15.0
** Bug
* [LCGDM-2817] - Dualstack DPM redirected gsiftp transfers fails
from IPv4 only machines
* [LCGDM-2940] - dome_unlink ignores the request flag ignorereadonlyfs
* [LCGDM-2960] - dpm-tester in branch develop is broken on lxplus
* [LCGDM-2971] - head_disknode.pp is broken
** New Feature
* [LCGDM-2855] - The DPM COPY of a file with just a pending replica
fails with 403 (should be 500)
** Improvement
* [LCGDM-2773] - Add a paragraph about user management (incl.
banning) to the wiki
* [LCGDM-2937] - DomeAdapter should honour the groupnames suggested
by getIdMap
******************************************
*********** List of commits since v1.14.0
d0b1454 - Merge branch 'disable-http-trace-without-rewrite' into
'develop' (Fabrizio Furano)
f41eec5 - Merge branch 'improve-dbck-pool-file' into 'develop' (Fabrizio
Furano)
63fef0e - Disable HTTP TRACE with TraceEnable instead of RewriteRule
(Petr Vokac)
c9637a3 - Merge branch 'replica-rtype-fixes' into 'develop' (Fabrizio
Furano)
37a2ade - Fixed missing r_type (broken SRM / GridFTP transfers) (Petr Vokac)
3bbf2ff - Merge branch 'pfn-questionmark' into 'develop' (Fabrizio Furano)
605a646 - Improve dbck for pool-file replication (Petr Vokac)
5aaf5d4 - LCGDM-2975 avoid question mark for pfn pfn is threated as Url
in dome adapter whereToWrite and '?' character cause troubles updated
evil filename to test also this special character (Petr Vokac)
8d62f5a - Merge branch 'dmlite-shell-678' into 'develop' (Fabrizio Furano)
32198d0 - Merge branch 'cleanup-compilation-warnings' into 'develop'
(Fabrizio Furano)
72b964e - Merge branch 'replica-rtype' into 'develop' (Fabrizio Furano)
75fb715 - Merge branch 'fix-memleak-regcomp' into 'develop' (Fabrizio
Furano)
db98cd2 - LCGDM-2975 escape special characters in sql queries Legacy SQL
queries used by dmlite-shell doesn't correctly escape special characters
and that among other things lead to transfer issues during draining.
(Petr Vokac)
7bdc092 - LCGDM-2975 use url encoding for draining Draining use HTTP-TPC
push and direct call to curl must use correct url encoding otherwise
transfer of file (or path) with special characters fails. (Petr Vokac)
bf78682 - Update help for dmlite shell dbck (Petr Vokac)
4c0dd35 - Improved dbck performance and logging (Petr Vokac)
2aee082 - Add dbck support to cleanup stuck repliac (Petr Vokac)
682e63d - Use pretty size formatting also for drainig output (Petr Vokac)
a7234eb - Add dbck supports to move replica from wrong pool (Petr Vokac)
23504c5 - More dark and lost data checks (Petr Vokac)
a36dff0 - Add support for more checksum methods for lost and dark data
check (Petr Vokac)
6ccb25a - Fix shell escaping for apostrophe (Petr Vokac)
5ebcdf3 - Update draining and fix drainpool LCGDM-2974 (Petr Vokac)
1c2b3ff - Improved and tested dbck dmlite-shell implementation (Petr Vokac)
7e9ec97 - Fixed wrong TPC CRL chain check evaluation (Petr Vokac)
84be575 - Cleanup compiler warnings (Petr Vokac)
3359070 - Use common default value to replica r_type (Petr Vokac)
d089e5b - Prefer python HTTP client in dmlite-shell Historically
dmlite-shell or its DomeTalker class was just a test tool for DOME API
and that's why it was internally using Davix, because its libraries are
used also directly by internal communication between dmlite components.
This may be optimal for testing purposes, but it is less efficient for
dmlite-shell because each call to DOME API create davix-http subprocess.
(Petr Vokac)
8fd0620 - Filter only None parameters from DomeTalker (Petr Vokac)
3000716 - Support for DOME runtime re-configuration with dmlite-shell
(Petr Vokac)
dcbe05b - Improve parsing dome_info by DomeExecutor (Petr Vokac)
90c105a - Improve checking lost and dark files (Petr Vokac)
d8a79f2 - More robust certificate subject formatting (Petr Vokac)
6bfeccf - Add new scripts to RPM package (Petr Vokac)
10264b4 - Compatible content type for StAR accounting signed data (Petr
Vokac)
77ba644 - Remove patch for replacing python2/3 shebang (Petr Vokac)
106adc0 - Base64 encode StAR data (Petr Vokac)
2fe55ea - Replace tab with space (Petr Vokac)
b792eed - Fix publishing StAR accounting data Forgot to send signed data
and even more importantly try to publish reasonable numbers for
available space calculated from all quotatokens associated with given
VO. Don't publish per role group data, because it is too complicated /
not straighforward to understand what these numbers mean. (Petr Vokac)
8817f2e - Fix processing metadata_xattr and replica_xattr columns (Petr
Vokac)
313e381 - Use new AMS interface for StaR accounting APEL Storage Account
moved from STOMP interface to AMS REST API and this allows us to drop
several dependencies including apel-ssm which is no longer necessary.
DPM can now publish storage accounting without installing packages from
UMD or directly for apel repository LCGDM-2901. (Petr Vokac)
fb03108 - LCGDM-2948 hour limit max wait time to join drain threads
(Petr Vokac)
572984b - Give drain transfers 60s even if terminated forcefully (Petr
Vokac)
085954b - Don't kill drain transfer after 10s (not sufficient for big
files) (Petr Vokac)
16d9f27 - Handle exeption for draining SFN without LFN (Petr Vokac)
dfb1c7f - Prevent shell dump run without output definition (Petr Vokac)
c9cb31a - Almost complete DOME API addedd in python executor (Petr Vokac)
74d48cf - Add more DOME functions in python DomeExecutor (Petr Vokac)
c196426 - Use default security context for new DomeTalker executor (Petr
Vokac)
d60225d - Don't limit native python talker to TLS1.0 (Petr Vokac)
383dbfc - Allow to run dbck dmlite-shell command in update mode (Petr Vokac)
82d1cc6 - Fix storageService -> StorageService also in CGI script (Petr
Vokac)
7b48f42 - Explicitely convert all catalog string parameters to str (Petr
Vokac)
5f780b4 - Decode SFN binary datatype as UTF-8 (Petr Vokac)
0ed0186 - Fix comments formatting and content (Petr Vokac)
95ece22 - mover pretty space size printer in utils (Petr Vokac)
4fe81ae - puppet configurable informer (Petr Vokac)
4aaadca - Add simple dmlite-shell test script (Petr Vokac)
dd7718d - Improve python2/3 and OS 6/7/8 compatibility (Petr Vokac)
0fa79e5 - Remove unused SetGuidCommand from dmlite-shell (Petr Vokac)
084c11d - Allow multiple commands from dmlite-shell CLI (Petr Vokac)
e1c8a8e - Update dmlite-shell man page with new commands Accounting,
dbck and dump commands were added to dmlite shell and setguid was
removed because this is not used by DOME at all. (Petr Vokac)
cde8407 - Implement file/dir modification interface for DOME Add new
dome_setutime function in DOME API to provide support for dmlite-shell
utime command (Petr Vokac)
238f88f - Use same interpreter command line in all python scripts (Petr
Vokac)
d61435d - DAVS modules doesn't depend on VOMS package (Petr Vokac)
af3970d - CApath for SRR called from CLI (Petr Vokac)
9463d66 - Forgot to add python3 patch necessary for CentOS8 build (Petr
Vokac)
b557ea4 - Don't use interpreter in python modules (Petr Vokac)
68fb515 - Added accidentally removed Content-type header in CGI output
(Petr Vokac)
ddfca9f - Fix unicode encoding for WLCG SRR via CGI (Petr Vokac)
a743923 - Direstory list can be now printed with dmlite-shell dump (Petr
Vokac)
588d602 - LCGDM-2802 Integrate all DOME scripts in dmlite-shell Added
accounting, dbck and dump section accounting - provides EMI StAR and
WLCG SRR format dbck - merged dmlite-mysql-dirspaces + dbck.pl
funtionality dump - interface for dpm-dump (Petr Vokac)
3f970b2 - Improve python 2 and 3 compatibility (Petr Vokac)
75cf768 - Merge branch 'oidc-puppet-remove-group' into 'develop'
(Fabrizio Furano)
e7f6c70 - Remove group also from OIDC configuration (Petr Vokac)
2f3a038 - Merge branch 'oidc-storage-scope-base-path' into 'develop'
(Fabrizio Furano)
ec0b06e - Remove group from OIDC allowissuer documentation (Petr Vokac)
3e7a933 - Fix head_disknode.pp (LCGDM-2971) (Fabrizio Furano)
a3c553a - Add missing free for compiled regex (Petr Vokac)
f6dd485 - Merge branch 'dmlite-htext-curl-version' into 'develop'
(Fabrizio Furano)
6d26367 - Remove group(s) from OIDC issuer configuration (Petr Vokac)
e0834db - Add missing parenthesis (Petr Vokac)
9482ac2 - Support empty list of groups for OIDC without wlcg.groups
claim Protect again adding empty group names or getting empty string in
case forced head.oidc.allowissuer groups is empty. Avoid using
ctx.groups[0] in case list is empty and instead use parent directory
group (Petr Vokac)
ad0d2cf - Use configured allowissuer base path for scope authZ Scope
based authorization with storage.*:/path should be used relative to the
given allowissuer configuration (Petr Vokac)
bcfe17d - Fix code that depends on specific curl version (Petr Vokac)
ea4835d - Merge branch 'dome_config' into 'develop' (Fabrizio Furano)
8e95829 - Merge branch 'change-apel-ssm-protocol' into 'develop'
(Fabrizio Furano)
8589c07 - Merge branch 'fix-disknode-https-without-secret' into
'develop' (Fabrizio Furano)
5a054b7 - Merge branch 'tasks-dome_info' into 'develop' (Fabrizio Furano)
26d6b1a - Merge branch 'fix-mdcache-config' into 'develop' (Fabrizio Furano)
70660c2 - Merge branch 'dont-ignore-mapfile-for-https' into 'develop'
(Fabrizio Furano)
6f08230 - Merge branch 'remove-xrootd-plugin-version' into 'develop'
(Fabrizio Furano)
aef2198 - Merge branch 'http-double-close' into 'develop' (Fabrizio Furano)
eab26d9 - Merge branch 'advertise-tpc-client' into 'develop' (Fabrizio
Furano)
60bd14a - Merge branch 'perfmarker-replace-sleep-cond' into 'develop'
(Fabrizio Furano)
2644d23 - Fix dpm-tester.py LCGDM-2960 (root)
dcdb413 - Merge branch 'use-CRL-for-TPC' into 'develop' (Fabrizio Furano)
bddd459 - Merge branch 'fix-filename-with-special-sequence' into
'develop' (Fabrizio Furano)
41d6004 - Merge branch 'fix-headnode-apache-puppet-config' into
'develop' (Fabrizio Furano)
321cdec - Merge branch 'fix-htext-complilation-dependencies' into
'develop' (Fabrizio Furano)
5a2cf59 - Merge branch 'remove-client-ip-from-token' into 'develop'
(Fabrizio Furano)
3f1abb4 - Improve error reporting and logging for failed TPC (Petr Vokac)
0c0d3b4 - Merge branch 'fix-stat-file-dir' into 'develop' (Fabrizio Furano)
3b9266f - Merge branch 'macaroon-path-subdir' into 'develop' (Fabrizio
Furano)
d2809da - LCGDM-2973 Fail stat with path including file in the middle
(Petr Vokac)
4358eb9 - LCGDM-2972 Macaroon path caveat allow subdir access (Petr Vokac)
56af361 - Compatible content type for StAR accounting signed data (Petr
Vokac)
4473308 - Revert configuration updates for TokenId Changing default
TokenId to none breaks compatibility with existing installation and can
be done only once all DPM machines upgrade to the dmlite version that
supports "TokenId none". (Petr Vokac)
1ae4fa3 - LCGDM-2961 Introduce new TokenId configuration none DPM
provides client IP based security as a part of token that is generated
during headnode to disknode redirection. This allows "secure" operations
on disknode without using HTTPS, but it can cause issues especially on
long distance transfers, because happy-eyeball connection mechanism
implemented in recent curl can lead to different client address (IPv4
vs. IPv6) used for communication with headnode/disknode. Since we
started to use Bearer tokens all WebDAV transfers must be secured with
TLS se we can drop client ip from TokenId and avoid issues with
different client IP address. (Petr Vokac)
da1a421 - Dome headnode port (Petr Vokac)
555dc2b - Test special '[#]' sequence only with recent headnode version
(Petr Vokac)
aaa5675 - Merge branch 'single-spec-for-all-builds' into 'develop'
(Fabrizio Furano)
95cf21a - Base64 encode StAR data (Petr Vokac)
f1fe698 - Improve Apache module complilation dependencies Parallel build
sometimes fails, because of incorrect order in generating source files
from gridsite delegation WSDL. This add necessary dependencies to make
koji builds reliable. (Petr Vokac)
0bd48e4 - LCGDM-2967 disable disk on standalone headnode (Petr Vokac)
f94fc37 - Single RPM spec file for all releaeses Remove fedora specific
spec file and create single dmlite.spec used to build all EPEL and
recent Fedora releases (currently this spec file works with EPEL 6-8 and
Fedora 33-35). This is also same file used for official release builds
published to Fedora/EPEL repos. (Petr Vokac)
49633ea - Merge branch 'improve-dmlite-tester' into 'develop' (Fabrizio
Furano)
85530a6 - Merge branch 'fix-oob-memory-read' into 'develop' (Fabrizio
Furano)
f327269 - Merge branch 'fix-getdir-permissions' into 'develop' (Fabrizio
Furano)
25fb062 - Check r-x permission on listed directory (Petr Vokac)
f415f91 - LCGDM-2962 add very basic TPC test (Petr Vokac)
b01dbb6 - Gfal can calculate checksum also for root protocol (Petr Vokac)
6ad056e - Fix missing arguments (Petr Vokac)
7b696d2 - Remove unused code (Petr Vokac)
23592b1 - Fix OOB memory access mapping status/error code (Petr Vokac)
09d99c0 - Fix publishing StAR accounting data Forgot to send signed data
and even more importantly try to publish reasonable numbers for
available space calculated from all quotatokens associated with given
VO. Don't publish per role group data, because it is too complicated /
not straighforward to understand what these numbers mean. (Petr Vokac)
b3adb61 - Merge branch 'fix_negative_cache_response' into 'develop'
(Fabrizio Furano)
391f442 - LCGDM-2958 fix code preventing [#] characters in filename
Checksum code that encoded data in dictionary key used special sequence
[#] as separator and that's why it was not possible to checksum file
with this sequence in the filename. Without proper data structure this
patch at least encode all data in a way that doesn't prevent any
characters in filenames. (Petr Vokac)
ffcaa07 - LCGDM-2959 verify CRL for HTTP-TPC transfers By default verify
certificate revocation files stored in the grid certificates directory.
Two new configuration options * DiskSSLCARevocationPath path to *.r0 CRL
files refreshed by fetch-crl * DiskSSLCARevocationCheck enable (chain)
or disable (none) CRL verification (Petr Vokac)
ff8e99d - Fix XML structure for StAR accounting (Petr Vokac)
1b49785 - Provide backwards compatible CLI interface (Petr Vokac)
c0cfc75 - Improve StAR logging to be able to check AMS result (Petr Vokac)
f977d5b - Fixed missing cert key and capath in StAR puppet template
(Petr Vokac)
29fa17c - Use new AMS interface for StaR accounting APEL Storage Account
moved from STOMP interface to AMS REST API and this allows us to drop
several dependencies including apel-ssm which is no longer necessary.
DPM can now publish storage accounting without installing packages from
UMD or directly for apel repository LCGDM-2901. (Petr Vokac)
28e59ec - Final updates for perf marker thread synchronization (Petr Vokac)
1cfb9d8 - Avoid performance marker with headnode RemoteConnections info
(Petr Vokac)
80649a9 - Fix perfmarker mutex lock/unlock (Petr Vokac)
4aba1e6 - Remove forgotten debug line (Petr Vokac)
9a1fc6b - LCGDM-2964 fix gridmap usage for https protocol Just to be
consistent update source code to apply gridmapfile for all protocols
(gsiftp, xroot, https) (Petr Vokac)
e1829ca - Add dome_config for runtime config read and update Provide
interface that can be used to read and update DOME configuration. The
scope of updated configuration is limited to the direct usage of CFG
singleton plus specific configuration options are modified individualy
(e.g. log level). (Petr Vokac)
438bb45 - Avoid usage sleep(1) in perfmarker code By analyzing WebDAV
transfers from DPM it was found suspicious structure in transfer time -
transfers finished in 1s intervals. This was caused by sleep(1) function
called in the code that sends performance markers every second. To
sucessfully finish transfer it was necesary to wait for last performance
marker. (Petr Vokac)
473a62f - Advertise DPM name and version in HTTP-TPC headers (Petr Vokac)
d521fa9 - Ruggedize the sending of pfnrm to the disk servers (root)
21aa7fe - Improve dmlite performance info * add disknode tasks info in
the dome_info output * improve checksum running/waiting queue dome_info
* fix logging of entry states in priority queue (QState::Completed)
(Petr Vokac)
970329f - Fix disknode HTTPS access without xrdhttpkey (Petr Vokac)
c389b80 - LCGDM-2953 filehandle double close with http downloads
Filehandle used for reading disknode files was closed twice, because two
independent cleanup function were registered. (Petr Vokac)
d08c0f0 - dmlite-shell: prettyprint the poolinfo output (Fabrizio Furano)
fa3a050 - Less fancy and more working implementation of
pprint_dictionary. Also print the traceback of internal command
exceptions (Fabrizio Furano)
542ff87 - Fix DOME cache initialization (correctly use legacy config
variables) (Petr Vokac)
8cc5bbc - DOME cache configuration should be done only after processing
config file (Petr Vokac)
4d7c998 - Merge branch 'http-content-length-zero' into 'develop'
(Fabrizio Furano)
d0d28a6 - Merge branch 'pass-tpc-error' into 'develop' (Fabrizio Furano)
b5e7bc7 - Merge branch 'py3' into 'develop' (Fabrizio Furano)
7d08a7c - Merge branch 'same-ciphers-for-all-protocols' into 'develop'
(Fabrizio Furano)
35dffc1 - Merge branch 'skip-dmliteshell-dpm2' into 'develop' (Fabrizio
Furano)
358954e - Allow to set environment for all serivices (systemd only)
(Petr Vokac)
72d088e - Simplify globus service environment configuration (Petr Vokac)
e965431 - LCGDM-2957 Use same ciphers for all protocols Use same ciphers
for http, xroot and gsiftp protocol and provide puppet (hierra)
configuration options (Petr Vokac)
78c7fe1 - LCGDM-2955 fix draining in with stopped legacy DPM (Petr Vokac)
4759de3 - LCGDM-2954 attempt to improve TPC error reporting Try to
propagate more details about transfer failures to be able to better
diagnose storage issues directly from transfer status mesages (Petr Vokac)
0f6dd99 - Remove explicit xrootd plugin version (Petr Vokac)
239e6ea - Use puppet-firewalld 3.4.0 instead than 4.4.0 (Fabrizio Furano)
67d1ed8 - Untar the newly added firewalld puppet module (Fabrizio Furano)
477db6e - Add firewalld (Fabrizio Furano)
b545a70 - Log the userid when creating a write token (Fabrizio Furano)
3894c7f - Merge branch 'fix_https_zero_upload' into 'develop' (Fabrizio
Furano)
509963c - Merge branch 'puppet-xroot_secd_level' into 'develop'
(Fabrizio Furano)
3409688 - Merge branch 'fix_typo_reading_config' into 'develop'
(Fabrizio Furano)
7a0b44d - Merge branch 'patch-1' into 'develop' (Fabrizio Furano)
5941987 - Update head_disknode.pp - added missing parenthesis reported
at
https://github.com/cern-it-sdc-id/lcgdm-puppet-examples/issues/1#issuec…
(Andrea Manzi)
d659742 - Cleanup the getidmap implementation in dome. Support
hierarchical parsing of groups and more comfortable logging (Fabrizio
Furano)
3a5ca41 - Python 3 support (Mattias Ellert)
38a023a - Better logging of the checkPermission decisions (Fabrizio Furano)
70cef55 - Add the plain vo name to the group list of a user with no
groups (Fabrizio Furano)
5b0dca7 - Make dmlite::voFromRole do what it is supposed to do (Fabrizio
Furano)
c11ec3a - Fix error msg (Fabrizio Furano)
3c396b6 - Merge branch 'improve_group_logging' into 'develop' (Fabrizio
Furano)
c165b5f - Merge branch 'db_time_monitoring' into 'develop' (Fabrizio Furano)
2ab9f63 - Merge branch 'dmlite-oidc_authorized-init' into 'develop'
(Fabrizio Furano)
6338e68 - Constructor should initialize even unused variables (Petr Vokac)
c0a6601 - Fix uninitialized variable (Petr Vokac)
77c5040 - Log internal uid and groups of users connecting (Fabrizio Furano)
cd79d22 - Fix logging of permission denied checks (Fabrizio Furano)
46c5208 - LCGDM-2952 use head.mdcache.* options for metadata cache (Petr
Vokac)
2a4c02d - Merge branch 'gridftp-debug' into 'develop' (Fabrizio Furano)
6f1ed35 - Merge branch 'update-puppet-fetchcrl' into 'develop' (Fabrizio
Furano)
984d37d - Merge branch 'update_default_http_config' into 'develop'
(Fabrizio Furano)
b5a8a69 - Merge branch 'fix_xrootd_libs_config' into 'develop' (Fabrizio
Furano)
074ecee - Merge branch 'fix-exception-fd-format' into 'develop'
(Fabrizio Furano)
3849244 - Bump release to 1.15.0 (Fabrizio Furano)
cced986 - LCGDM-2951 fix file descriptor string formatting (Petr Vokac)
caf9597 - Typo (Fabrizio Furano)
7514eba - More info in the error message "Error in getting the request
body." (Fabrizio Furano)
a76489f - Don't remove EMI StAR configuration by puppet with default
configure_star disabled (Petr Vokac)
be57766 - LCGDM-2949 Add basic configuration for XRootD TLS (Petr Vokac)
f5aaf7b - Remove explicity library version from XRootD configs (Petr Vokac)
994b99f - Streamline checkPermissions, this fixes the broken tests
(Fabrizio Furano)
f1a5af7 - Go to 1.14.1 for xrd5 support (Oliver Keeble)
ce2c558 - fix uninitialised iterator (Oliver Keeble)
9fadf85 - Patch from Michal for xrootd5 (Oliver Keeble)
ead08f5 - LCGDM-2456 synchronize default apache config with default
generated by puppet (Petr Vokac)
683800a - LCGDM-2945 update puppet/fetchcrl to 4.1.0 (puppet/stdlib >
6.x) Cleanup one of two warning described in LCGDM-2945 (Petr Vokac)
136a2bb - LCGDM-2947 Apache workaround for HEAD Content-Length "00"
(Petr Vokac)
582e635 - Keep other functionalities of trev function (Petr Vokac)
6d3fead - LCGDM-2928 Inter process race for gsiftp uploads DPM in DOME
mode threats delayed passive transfers differently and with completed
data transfer DOME is informed only from globus trev callback. This is
too late, because for GridFTP server reports to client file was
successfully transferred before trev callback is called. This can lead
to inter-process race, because from DOME point of view file was not yet
successfully closed (its replica is still in kBeingPopulated state)
while for GridFTP server everything was already finished and different
process can try to serve next client requests - e.g. for TPC transfers
with same source/destination storage there are two processes where one
reads data and second write them to new location, when client try to
stat uploaded file using process which read file (and already think
transfer is complete) DOME can reject such request because write process
did not yet reached globus trev callback. (Petr Vokac)
008adf3 - Fix division by zero with no DB transactions (Petr Vokac)
a75a000 - LCGDM-2946 Remove special case for creating zero size files
with HTTP Uploaded files with HTTP protocol and Content-Legth zero were
threated differently and instead of dome_put they were created with
dome_create. This lead to issues with downloads, checksums and probably
other operations, because these files did not register replica in DPM
database and did not have correstponding stored file. (Petr Vokac)
dcd5418 - Revert "Checksum calculation for zero size files" (Petr Vokac)
cfbc14e - Improve database query and transaction monitoring Provide
individual database query execution time and also transaction time with
verbose logging. In addition collect time necessary to finish
transaction and provide average duration of transaction in dome_info.
(Petr Vokac)
a5d6868 - LCGDM-2943 Avoid congestion in Cns_unique_id Reduce
transaction scope that is used to generate unique fileid while creating
new file. This improves behavior when dmlite is stressed with many
concurrent writes. (Petr Vokac)
03882e0 - LCGDM-2941 Fix ENOENT response for negative cached entries
(Petr Vokac)
c880347 - Honour the ignorereadonlyfs flag in a request (fix typo)
LCGDM-2940 (Fabrizio Furano)
260ed9f - make checkPermissions() able to describe denials into the
context (Fabrizio Furano)
77972fd - show gid and banned status for request groups (Petr Vokac)
111fbb4 - Improve security context group loggign (Petr Vokac)
31c6735 - Fix typo in reading glb.restclient.cli_private_key (Petr Vokac)
16e5c89 - Requires: xrootd >= 1:4.12.3 (Fabrizio Furano)
d891b27 - Fix xrootd_sec_level puppet data type (Petr Vokac)
ddc9fe3 - Merge branch 'puppet-boolean' into 'develop' (Fabrizio Furano)
24afbcb - Add headnode FQDN in list of allowed OIDC audiences (Petr Vokac)
c432db2 - LCGDM-2911 Puppet/hiera configurable Apache SSLProtocol (Petr
Vokac)
2543039 - LCGDM-2935 Enable GridFTP redirection by default DPM DOME
default config should not provide non-optimal configuration for GridFTP
protocol where all data gets tunneled through DPM headnode. Enable
GridFTP redirection by default, because this configuration is better for
DOME and should work fine also with legacy DPM (SRM). (Petr Vokac)
bb8dc9e - MKCOL on an existing resource now returns 405:
METHOD_NOT_ALLOWED (Fabrizio Furano)
c97c73d - Replace legacy puppet fact (Petr Vokac)
520e813 - Apache is using MPM event by default on CentOS8 (Petr Vokac)
79bc61f - Improve puppet configuration for EGI StAR accounting (Petr Vokac)
c66c0ee - Fix misspelled xrootd_async in puppet headnode classes (Petr
Vokac)
36011c0 - Forgotten file for typed puppet classes parameters (Petr Vokac)
3dcbfbb - Better support for python3 build (Petr Vokac)
14c5628 - Replace print with python logging for DB utils (Petr Vokac)
ba86a22 - Make xrootd_async configurable by puppet disknode declaration
(Petr Vokac)
15d7308 - Use typed parameter for main puppet classes (Petr Vokac)
23cf31a - Prevent duplicit declaration of ca-policy-egi-core This
package is normally declared/installed directly by puppet-fetchcrl (Petr
Vokac)
a8605f1 - Remove dependency on finger package also from puppet (Petr Vokac)
edb4d0e - Update DPM puppet dependencies and drop support for puppet 4
(Petr Vokac)
7a2e4fd - Use puppet-lint to unify module formatting (Petr Vokac)
87afeed - Add missing OIDC allowed audience puppet configuration (Petr
Vokac)
0292085 - Allow multiple OIDC issuers in puppet configuration (Petr Vokac)
0f409e7 - Allow to configure jemalloc also on SLC6 (Petr Vokac)
a1699a1 - Remove redundant config.h generated by cmake (Petr Vokac)
d1f35a6 - Enable debug logging also for HEAD request htext download
(Petr Vokac)
208d72e - LCGDM-2927 protect fsadd to add special prefix /dpm (Petr Vokac)
d79a8c3 - Don't assume that an authorization header is a macaroon
(Fabrizio Furano)
d6af6bd - Better macaroon detection in the Auth header field (Fabrizio
Furano)
c65e6c2 - Puppet merge (Fabrizio Furano)