1. SRM-2 Road Map and CASTOR Certification Shaun de Witt 3/3/08

2. SRM To Do List Major items –SL4 Support –Multiple backends and closing rfiod security hole –srmCopy fix (partly related to the above) –srmChangeSpaceForFiles Implementation –Security for Spaces

3. SL4 support Build node identified and installed (lxb6032) –RPMs built but not in swrep yet –Unit tests seem fine Used 32 bit clients –Considering establishing 64 bit preproduction service. –Only x86_64 currentlt supported (no 32 bit SL4 compatible version) Problem at RAL where machines are 32 bit.

4. Multiple Daemon Currently difficult to run multiple back ends –srmCopy requires export delegated proxy (written by FE) to be available for use by BE. –Currently done using rfio –Plan to use CLOBs and store proxy in DB Basic supported added in 2.1.4, but testing showed this did not work (threw Oracle exception or caused SIGSEGV in exception handler) –Requires additional support by castor dev team to help debug problem with CLOBS

5. srmCopy This ‘should’ work now… … but doesn’t in practice –Works OK in unit tests and pre-production –When put into production, caused all requests to hang –Reasons are unclear, esp. since there was no change to database calls or to the front end code –Needs more testing in production environment May do this at RAL to see if we have the same problem.

6. srmChangeSpaceForFiles Last method requiring implementation Plan to restrict it to –D1T1 -> D0T1 –D1T0 -> D0T0 –Other way equivalent to srmBringOnline with a space token.

7. Security for Spaces Identified at post CCRC Meeting Effectively want ACLs on spaces based on VOMS Role –Accepting can be circumented with direct gridFTP access Needed for Put, BoL and Get –General users able to read files already staged, but not stage things themselves Prob can be done adding Role to SrmUser table –To read from this pool, it will need to be in the list of default pools and users do not pass token.

8. Other Issues Deadlock –Between daemon and server when selecting file for update Cartesian join between subrequest and request table –Typo – fixed in next release. Unable to map users –Sometimes SRM can’t map a pool account to a VO. Under investigation

9. Other Issues Clients timing out –Seen by ATLAS at RAL during CCRC –SRM FE stops accepting connections No log of any errors Starts accepting connection 10 – 30 minutes later. Leaking sockets –Seen on CMS at CERN –Possibly due to copy request problems.

10. Certification System Now up and running –Thanks to Sebastien –Two problems identified Had not set fileclass Diskservers were still on 2.1.4 Agreement in Place to allow CERN staff limited and temporary root access. –Can also be used on CASTOR instances

11. Current Status Testing 2.1.6 –Some tests pass, some fail –Failures under investigation GET request return INTERNAL_ERROR ORA error logged –Need to get complete by 21 st March RAL Upgrade to 2.1.6 Currently taking higher priority than SRM –But James Jackson currently only working 20% –Should improve in about 2 weeks

12. Testing 2.1.7 Unlikely to start before 24 th Not sure when to take release –Early release will identify problems early, but likely many duplicates with problems identified at CERN –1 st ‘stable’ release may be better –After testing on PPS probably too late

13. Merging of Test Suites CERN and RAL test suite have diverged –RAL put significant effort into use of NOSE framework –CERN have put in additional effort to genericise test suite Do not want to maintain two systems! Currently James J (as independent) evaluating both –Seems to boil down to ease of use/maintainability vs. logging/graphical display

14. Merging of Test Suites Will come to agreement with CERN Developers regarding outcome and then merge appropriately –Merge effort will be led by RAL