Note: This version of the VDT (1.10.1) is supported, but is not our latest stable release. The current stable release is 2.0.0.

VDT 1.10.1r Update

On 2008-12-19, the VDT team announced the release of VDT 1.10.1r.

Changes to VDT 1.10.1r

  1. Glexec 0.5.3's configuration has been updated to fix a a security issue. (VDT ticket 4582)

    Details on this security fix (Restricted to people with an OSG Twiki account.)

    If you are running on a Scientific Linux 5 or Red Hat Enterprise Linux 5 platform, do not apply the fix before reading this link.

  2. The LFC server configuration template now allows core dumps. (VDT ticket 4501)
    The LFC server logs are now automatically rotated. (VDT ticket 4500)
  3. Generic Information Provider has been updated to version 1.0.7. (VDT ticket 4094)
  4. Bestman has been updated to version 2.2.1.2.e8 to fix an srmLs issue with FTS. (VDT ticket 4570)

Updating to VDT 1.10.1r

If you installed VDT 1.10.1 after VDT 1.10.1r was released on 2008-12-19, you do not need to do any of these update operations because you will have 1.10.1r.

The best way to do the update is to update the individual packages that have changed. To be clear, we do not recommend using pacman -update without specifying specific package names. Also note that you only need to update packages if you installed them. You can see what packages have been installed with:

pacman -lc

Pre-update directions

Before you do any of the update directions that follow, please run the following commands to stop services and take a backup of your installation. This applies for all of the updates.

cd $VDT_LOCATION
. setup.sh
vdt-control --off
cp -pr $VDT_LOCATION BACKUP-LOCATION

The copy command makes a complete backup of your VDT installation, in case something goes wrong. Do not skip this step!

Updating CA-Certificates

Note: if you have not yet updated your CA-Certificates package (released on September 11th in VDT 1.10.1i), some of the following updates may automatically include this update for you. After this update, you will need to do a one-time configuration to re-install the certificates on your system. Many of the components installed by the VDT will not work until the certificates are re-installed. See the full instructions

1. Updating Glexec's configuration

This update does not require an update of the Glexec program, but it will update the VDT's configuration script for Glexec. A new configuration file will be generated which must be manually installed. Please follow the directions below:

pacman -update Configure-Glexec

# These two steps must be done as root
vdt/setup/configure_glexec
cp glexec-osg/etc/lcmaps/lcmaps-suexec.db /etc/glexec/lcmaps/

Instructions for testing glexec, to verify it still works correctly.

2. Updating Configure-LFC

pacman -update Configure-LFC
vdt/setup/configure_lfc

3. Updating Generic Information Provider

pacman -update Generic-Information-Provider

4. Updating Bestman

pacman -update Bestman

Post-update directions

If you are finished applying all lettered updates, do not forget to restart services, typically using vdt-control. For example, to turn on all services:

vdt-control --on

Fixing Glexec configuration without an update

Details on editing your glexec configuration file manually (Restricted to people with an OSG Twiki account.)