# changelog

author: Brian Lin <blin@cs.wisc.edu> - 1.4-1
changelog:
  - Add support to GLOBUS_GFS_CMD_SITE_RDEL
  - Add GRIDFTP_APPEND_XROOTD_CGI hook (environment variable) to support Xrootd space token.
  - Renamed xrootd-dsi packaging to reflect upstream


author: Brian Lin <blin@cs.wisc.edu> - 1:1.4-2
changelog:
  - Added architecture-specific provides for xrootd-dsi
  - Refer to gridftp-dsi-posix paths in globus-gridftp-server-plugin


author: Mátyás Selmeci <matyas@cs.wisc.edu> 1.6.6-1.2.osg
changelog:
  - Add ban-mapfile, ban-voms-mapfile and updated lcmaps.db with a new
    authorize_only policy that uses the ban files, voms mapfiles, and a
    modified verify_proxy.  This adds new requirements on:
    - lcmaps-plugins-voms >= 1.7.1-1.1
    - lcmaps-plugins-verify-proxy >= 1.5.9-1.1
    (SOFTWARE-2602)


author: Carl Edquist <edquist@cs.wisc.edu> - 1.20.0-1
changelog:
  - Drop glexec probe & old GRAM code (SOFTWARE-3105)
  - Fix handling of SlurmLocation in slurm probe (SOFTWARE-2795)
  - Make ProjectName case insensitive in condor probe (SOFTWARE-3017)


author: Carl Edquist <edquist@cs.wisc.edu> - 1.20.3-2
changelog:
  - Fix htcondor-ce probe's condor_config_val queries (SOFTWARE-2629)
  - Update pbs/lsf latest timestamp for empty logfiles (SOFTWARE-3041)


author: Carl Edquist <edquist@cs.wisc.edu> - 1.20.8-1
changelog:
  - Avoid setting processors twice in slurm probe (SOFTWARE-3475)
  - Add travis-ci infrastructure, add condor unit tests (#43)
  - Default to 0 processors in condor probe (SOFTWARE-3474, SOFTWARE-3476)


author: Mátyás Selmeci <matyas@cs.wisc.edu> - 0.3.0-3
changelog:
  - Add Force-aud-test-in-the-validator.patch from
    https://github.com/scitokens/scitokens-cpp/pull/8


author: Mátyás Selmeci <matyas@cs.wisc.edu> - 0.3.0-4
changelog:
  - Use double layer of const for deserialize
    (patch from https://github.com/scitokens/scitokens-cpp/commit/ac0b2f0679488fa91c14ed781268efbcdb69ed3c)


author: Derek Weitzel <dweitzel@unl.edu> - 0.3.3-1
changelog:
  - Merge OSG changes
  - Use a newer, still supported version of devtoolset
  - Fix bug in verifying EC signed tokens #13


author: Tim Theisen <tim@cs.wisc.edu> - 8.8.5-1
changelog:
  - Fixed two performance problems on Windows
  - Fixed Java universe on Debian and Ubuntu systems
  - Added two knobs to improve performance on large scale pools
  - Fixed a bug where requesting zero GPUs would require a machine with GPUs
  - HTCondor can now recognize nVidia Volta and Turing GPUs


author: Tim Theisen <tim@cs.wisc.edu> - 8.8.6-1
changelog:
  - Initial support for CentOS 8
  - Fixed a memory leak in SSL authentication
  - Fixed a bug where "condor_submit -spool" would only submit the first job
  - Reduced encrypted file transfer CPU usage by a factor of six
  - "condor_config_val -summary" displays changes from a default configuration
  - Improved the ClassAd documentation, added many functions that were omitted


author: Mischa Salle <msalle@nikhef.nl> 1.5.1-2
changelog:
  - Add minimal lcmaps version.
  - Remove configure flag for moduledir.

  - Added plugin lcmaps_ban_dn including manpage.
  - Update URL.
  - Add run-time requirement for lcmaps for basic package.
  - Add architecture to run-time requirement for ldap subpackage.
  - Updated version


author: Mischa Salle <msalle@nikhef.nl> 1.6.2-1
changelog:
  - update builddep on lcmaps-devel instead of -interface
  - prevent unnecessary linking
  - specify BuildRoot (and clean section) for EPEL5
  - remove defattr
  - updated version


author: Mischa Salle <msalle@nikhef.nl> 1.6.2-2
changelog:
  - clean up installed documentation files (breaks Fedora20)
  - correct bogus dates in changelog (breaks Fedora20)
  - correct duplicate entry in filelist


author: Tim Theisen <tim@cs.wisc.edu> - 8.8.7-1
changelog:
  - Updated condor_annex to work with upcoming AWS Lambda function changes
  - Added the ability to specify the order that job routes are applied
  - Fixed a bug that could cause remote condor submits to fail
  - Fixed condor_wait to work when the job event log is on AFS
  - Fixed RPM packaging to be able to install condor-all on CentOS 8
  - Period ('.') is allowed again in DAGMan node names


author: Tim Theisen <tim@cs.wisc.edu> - 8.8.8-1
changelog:
  - Fixes addressing CVE-2019-18823
  - https://research.cs.wisc.edu/htcondor/security/vulnerabilities/HTCONDOR-2020-0001.html
  - https://research.cs.wisc.edu/htcondor/security/vulnerabilities/HTCONDOR-2020-0002.html
  - https://research.cs.wisc.edu/htcondor/security/vulnerabilities/HTCONDOR-2020-0003.html
  - https://research.cs.wisc.edu/htcondor/security/vulnerabilities/HTCONDOR-2020-0004.html


author: Tim Theisen <tim@cs.wisc.edu> - 8.8.9-1
changelog:
  - Proper tracking of maximum memory used by Docker universe jobs
  - Fixed preempting a GPU slot for a GPU job when all GPUs are in use
  - Fixed a Python crash when queue_item_data iterator raises an exception
  - Fixed a bug where slot attribute overrides were ignored
  - Calculates accounting group quota correctly when more than 1 CPU requested
  - Updated HTCondor Annex to accommodate API change for AWS Spot Fleet
  - Fixed a problem where HTCondor would not start on AWS Fargate
  - Fixed where the collector could wait forever for a partial message
  - Fixed streaming output to large files (>2Gb) when using the 32-bit shadow


author: Tim Theisen <tim@cs.wisc.edu> - 8.8.10-1
changelog:
  - condor_qedit can no longer be used to disrupt the condor_schedd
  - Fixed a bug where the SHARED_PORT_PORT configuration setting was ignored
  - Ubuntu 20.04 and Amazon Linux 2 are now supported
  - In MacOSX, HTCondor now requires LibreSSL, available since MacOSX 10.13


author: Tim Theisen <tim@cs.wisc.edu> - 8.8.10-1.3.osg
changelog:
  - Fix Bosco patch to match upstream source
  - Change permissions on /var/{lock,run}/condor to make rpm verify work


author: Tim Theisen <tim@cs.wisc.edu> - 8.8.11-1
changelog:
  - HTCondor now properly tracks usage over vanilla universe checkpoints
  - New ClassAd equality and inequality operators in the Python bindings
  - Fixed a bug where removing in-use routes could crash the job router
  - Fixed a bug where condor_chirp would abort after success on Windows
  - Fixed a bug where using MACHINE_RESOURCE_NAMES could crash the startd
  - Improved condor c-gahp to prioritize commands over file transfers
  - Fixed a rare crash in the schedd when running many local universe jobs
  - With GSI, avoid unnecessary reverse DNS lookup when HOST_ALIAS is set
  - Fix a bug that could cause grid universe jobs to fail upon proxy refresh


author: Tim Theisen <tim@cs.wisc.edu> - 8.8.12-1
changelog:
  - Added a family of version comparison functions to ClassAds
  - Increased default Globus proxy key length to meet current NIST guidance


author: Carl Edquist <edquist@cs.wisc.edu> - 1.18.44
changelog:
  - Add Slurm SystemCpu accounting when job completes (SOFTWARE-3825)
  - Add support for decimal seconds fields from sacct (SOFTWARE-3826)
  - Pull in various updates to slurm scripts from htcondor's blap (SOFTWARE-3587)
  - Move local submit attributes scripts from spec to sources (SOFTWARE-3749)


author: Carl Edquist <edquist@cs.wisc.edu> - 1.18.46
changelog:
  - Fix an issue where the slurm binpath always returned scontrol (SOFTWARE-3986)
  - Python 3 compatibility (#7)
  - Handle extra-quoted arguments to condor_submit.sh (SOFTWARE-3993)
  - Expand env vars in configured slurm_binpath (#10)
  - Fix cluster handling in slurm_status.py (#13)
  - Introduce blah_job_env_confs for dynamic env var expansion (SOFTWARE-2521)
  - Add EXIT trap to remove barrier file (SOFTWARE-3930)
  - Amended file credits for Matt Farrellee (#17)


author: Brian Lin <blin@cs.wisc.edu> - 1.18.48-1
changelog:
  - Add an option for HTCondor batch system to expand references to $HOME in the job environment (#23)
  - Add efficient querying of LSF job statuses (#14)
  - Improve logic when proxy refresh is disabled (#24)
  - Fix invalid argument, output, and error format for HTCondor job submission (#22)


author: Brian Bockelman <bbockelm@cse.unl.edu> - 0.5.0-1
changelog:
  - Add support for multiple base paths of an issuer.
  - Add concept of restricting authorized paths within an issuer's namespace.
  - Fix potential segfault when a user environment isnt available.


author: Brian Bockelman <brian.bockelman@cern.ch> - 2.1.4-1
changelog:
  - Recompute checksum on parse failure.
  - Force flush before close to hew closer to open-to-close semantics.


author: Diego Davila <didavila@ucsd.edu> - 2.1.5-1
changelog:
  - Adding directory config.d and file config.d/40-xrootd-hdfs.cfg (SOFTWARE-3535)
  - Changing xrootd requirement to 4.9.0


author: Brian Bockelman <bbockelm@cse.unl.edu> - 0.4.0-1
changelog:
  - Add support for POSIX-like umask.
  - Make multiuser plugin compatible with Macaroons.
  - Avoid a segfault if the plugin is improperly configured.


author: Mátyás Selmeci <matyas@cs.wisc.edu> - 7.4p1-2.3
changelog:
  - systemctl daemon-reload in post scriptlet to fix failure when upgrading from an init-based version


author: Dave Dykstra <dwd@fnal.gov> 4.6-2.1
changelog:
  - Upgrade to 4.6-2 tarball with the following release notes:
   - Add support for sending access_log through syslog
   - Add additional allowed monitoring host CERN IP range of 188.185.48.0/20


author: Dave Dykstra <dwd@fnal.gov> 4.4-2.1
changelog:
  - Upgrade the 4.4-1.1 version to the 4.4-2 tarball with the following
     release note:
   - Apply security patch for CVE-2019-12527
        http://www.squid-cache.org/Advisories/SQUID-2019_5.txt
      which can (before being patched) be exploited through the ftp protocol.


author: Dave Dykstra <dwd@fnal.gov> 4.8-1.1
changelog:
  - Upgrade to 4.8-1 tarball with the following release notes:
   - Update to squid-4.8 with release notes at
      https://www.mail-archive.com/squid-announce@lists.squid-cache.org/msg00096.html
     There was no 4.7 announcement but here's the ChangeLog:
      https://github.com/squid-cache/squid/blob/f977bfa698ab92e9474c775cef0e01fb756a4b0f/ChangeLog


author: Dave Dykstra <dwd@fnal.gov> 4.8-2.1
changelog:
  - Upgrade to 4.8-2 tarball with the following release note:
   - Add support for starting and stopping shoal-agent when installed and
     enabled by SQUID_AUTO_DISCOVER=true
  - Add compilation and installation for shoal-agent


author: Dave Dykstra <dwd@fnal.gov> 4.9-1.1
changelog:
  - Upgrade to 4.9-1 tarball with the following release notes:
   - Update to squid-4.9 with release notes at
      http://squid-web-proxy-cache.1019090.n4.nabble.com/squid-announce-Squid-4-9-is-available-td4688506.html
   - Add cvmfs01.nikhef.nl, cvmfs-stratum-one.zeuthen.desy.de, and
      grid-cvmfs-one.desy.de to the MAJOR_CVMFS acl.


author: Dave Dykstra <dwd@fnal.gov> 4.9-2.1
changelog:
  - Upgrade to 4.9-2 tarball with the following release note:
   - Fix bug in daily cron that prevented it from rotating any logs


author: Dave Dykstra <dwd@fnal.gov> 4.9-3.1
changelog:
  - Upgrade to 4.9-3 tarball with the following release notes:
   - Apply a patch for bug #4735, to prevent caching an object when its
      http/1.1 last chunk (that is, zero-length chunk) is missing.
   - Disable the URN proto by default, to avoid potential future security
      vulnerabilities.
   - Fail if the hard nofile ulimit for the squid user is less than 4096
      (which is unlikely since it is the default value on RHEL6 & 7) and
      increase the soft nofile ulimit to match the hard limit.  Squid
      uses the soft limit as the default max_filedescriptors.  Previously
      the root portion of the startup script attempted to increase the
      soft limit to 4096, but it turned out to have no effect because
      runuser resets it to its default for that user.


author: Dave Dykstra <dwd@fnal.gov> 4.9-4.1
changelog:
  - Upgrade to 4.9-4 tarball with the following release note:
   - Limit the hard nofile ulimit check to the "start" operation.


author: Dave Dykstra <dwd@fnal.gov> 4.9-5.1
changelog:
  - Upgrade to 4.9-4 tarball with the following release note:
   - Change compressing log rotation to not use logrotate's copytruncate.
      Instead, use create and a postrotate that sends squid a reconfigure
      signal.  This is needed when using rsyslog's imfile module to copy
      to syslog, but also greatly speeds up rotation when log files are
      large.


author: Dave Dykstra <dwd@fnal.gov> 4.10-1.1
changelog:
  - Upgrade to 4.10-1 tarball with the following release notes:
   - Update to squid-4.10, with release notes at
      https://www.mail-archive.com/squid-announce@lists.squid-cache.org/msg00103.html
     including a fix for a serious security vulnerability affecting
     reverse proxies and a potential information leak when proxying ftp.
   - Remove patch for bug #4735, as it has been included in the 4.10 release.
   - Change compressing log rotation back to use copytruncate when there
     are multiple workers, because the reconfigure signal triggers an
     SNMP bug when there are multiple workers (squid bug #5022).
   - Disable log rotatation when SQUID_MAX_ACCESS_LOG=0.  Using this is
      highly discouraged since standard logrotate is usually unable to
      keep up with the high volume of logs typically generated by squid.
      It also interferes with frontier-awstats support.
   - Change log rotating cron scripts to ignore commented lines in
      /etc/sysconfig/frontier-squid


author: Diego Davila <didavila@ucsd.edu> - 0.4.3-1
changelog:
  - Adding XrootD major version to the shared file name
  - building against XrootD-4.12.2 (software-4093)


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 12.12-1
changelog:
  - GT6 update:
    - Use 2048 bit keys to support openssl 1.1.1 (12.10)
    - Log remote http connection address for legacy s3 transfers (12.11/12.12)


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 13.8-1
changelog:
  - Switch upstream to Grid Community Toolkit
  - Grid Community Toolkit merged a number of outstanding pull requests (13.0)
    - Add option to send IPv6 address in EPSV response
    - Add function to get the command string
    - Be more selective in what config files we skip
    - Add unames for GNU/Hurd and kfreebsd to chroot setup script
  - Merge GT6 update 12.5 into GCT (13.1)
  - First Grid Community Toolkit release (13.2)
    - Disable usage statistics reporting by default
    - Add man page for globus-gridftp-password - contribution from IGE
  - Use 2048 bit RSA key for tests (13.3)
  - Merge GT6 update 12.6 into GCT (13.4)
  - Merge GT6 update 12.7 into GCT (13.5)
  - Merge GT6 update 12.8 into GCT (13.6)
  - Merge GT6 update 12.9 into GCT (13.7)
  - Merge GT6 update 12.12 into GCT (13.8)
  - Drop patches globus-gridftp-server-unames.patch, -epsv-ip.patch,
    -cmd-string.patch and -config.patch (accepted upstream)
  - Drop the man page for globus-gridftp-password from the source package
    (accepted upstream)


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 13.11-1
changelog:
  - Improvements for filesystems that encounter listing timeouts (13.10)
  - Remove usage statistics collection support (13.11)


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 13.20-1
changelog:
  - Fake stat responses when slow listings enabled (13.12)
  - Send markers in stream mode when requested by 'OPTS RETR Markers=n;'
    (13.13)
  - Update documentation links to always point to the latest documentation
    (13.14)
  - Fix doxygen warning (13.15)
  - Remove obsolete acconfig.h file (13.16)
  - Add simple checksum read throttling (13.17)
  - Add support for supported checksum advertising (13.18)
  - Add support for SHA1, SHA256, SHA512 to POSIX DSI (13.18)
  - Avoid unknown secondary groups in test. Causes failures on launchpad
    (13.19)
  - Fix problems between dual-stack (IPv4/IPv6) servers and IPv4-only clients
    (13.20)


author: Mátyás Selmeci <matyas@cs.wisc.edu> - 13.20-1.1.osg
changelog:
  - Add patch for gridcf/gct#117 "Restore log transfer functionality that was accidentally removed" (SOFTWARE-4041)


author: Tim Theisen <tim@cs.wisc.edu> - 8.8.13-1
changelog:
  - condor_ssh_to_job now maps CR and NL to work with editors like nano
  - Improved the performance of data transfer in condor_ssh_to_job
  - HA replication now accepts SHA-2 checksums to prepare for MD5 removal
  - Submission to NorduGrid ARC CE works with newer ARC CE versions
  - Fixed condor_annex crashes on platforms with newer compilers
  - Fixed "use feature: GPUsMonitor" to locate the monitor binary on Windows
  - Fixed a bug that prevented using the '@' character in an event log path


author: Tim Theisen <tim@cs.wisc.edu> - 8.8.14-1
changelog:
  - Fix for security issue
  - https://research.cs.wisc.edu/htcondor/security/vulnerabilities/HTCONDOR-2021-0003.html


author: Tim Theisen <tim@cs.wisc.edu> - 8.8.16-1
changelog:
  - Fix for security issue
  - https://research.cs.wisc.edu/htcondor/security/vulnerabilities/HTCONDOR-2022-0003.html


author: Derek Weitzel <dweitzel@cse.unl.edu> - 1.2.0-1
changelog:
  - Add issuer for latter mapping decisions by issuer
  - Correct access control when allowing only reads


author: Mátyás Selmeci <matyas@cs.wisc.edu> - 2.0.14-1.6
changelog:
  - Also accept VOMS attributes that only have a top-level group (SOFTWARE-4114)
    - Drop Validate-top-level-group-of-VOMS-attribute.patch
    - Add Validate-top-level-group-of-VOMS-attribute-also-acce.patch


author: Tim Theisen <tim@cs.wisc.edu> - 8.7.9-1
changelog:
  - Support for Debian 9, Ubuntu 16, and Ubuntu 18
  - Improved Python bindings to support the full range of submit functionality
  - Allows VMs to shutdown when the job is being gracefully evicted
  - Can now specify a host name alias (CNAME) for NETWORK_HOSTNAME
  - Added the ability to run a job immediately by replacing a running job


author: Tim Theisen <tim@cs.wisc.edu> - 8.6.13-1
changelog:
  - Made the Python 'in' operator case-insensitive for ClassAd attributes
  - Python bindings are now built for the Debian and Ubuntu platforms
  - Fixed a memory leak in the Python bindings
  - Fixed a bug where absolute paths failed for output/error files on Windows
  - Fixed a bug using Condor-C to run Condor-C jobs
  - Fixed a bug where Singularity could not be used if Docker was not present


author: Tim Theisen <tim@cs.wisc.edu> - 8.7.10-1
changelog:
  - Can now interactively submit Docker jobs
  - The administrator can now add arguments to the Singularity command line
  - The MUNGE security method is now supported on all Linux platforms
  - The grid universe can create and manage VM instances in Microsoft Azure
  - Added a single-node package to facilitate using a personal HTCondor


author: Tim Theisen <tim@cs.wisc.edu> - 8.8.0-1
changelog:
  - Automatically add AWS resources to your pool using HTCondor Annex
  - The Python bindings now include submit functionality
  - Added the ability to run a job immediately by replacing a running job
  - A new minicondor package makes single node installations easy
  - HTCondor now tracks and reports GPU utilization
  - Several performance enhancements in the collector
  - The grid universe can create and manage VM instances in Microsoft Azure
  - The MUNGE security method is now supported on all Linux platforms


author: Tim Theisen <tim@cs.wisc.edu> - 8.8.1-1
changelog:
  - Fixed excessive CPU consumption with GPU monitoring
  - GPU monitoring is off by default; enable with "use feature: GPUsMonitor"
  - HTCondor now works with the new CUDA version 10 libraries
  - Fixed a bug where sometimes jobs would not start on a Windows execute node
  - Fixed a bug that could cause DAGman to go into an infinite loop on exit
  - The JobRouter doesn't forward the USER attribute between two UID Domains
  - Made Collector.locateAll() more efficient in the Python bindings
  - Improved efficiency of the negotiation code in the condor_schedd


author: Tim Theisen <tim@cs.wisc.edu> - 8.8.2-1
changelog:
  - Fixed problems with condor_ssh_to_job and Singularity jobs
  - Fixed a problem that could cause condor_annex to crash
  - Fixed a problem where the job queue would very rarely be corrupted
  - condor_userprio can report concurrency limits again
  - Fixed the GPU discovery and monitoring code to map GPUs in the same way
  - Made the CHIRP_DELAYED_UPDATE_PREFIX configuration knob work again
  - Fixed restarting HTCondor from the Service Control Manager on Windows
  - Fixed a problem where local universe jobs could not use condor_submit
  - Restored a deprecated Python interface that is used to read the event log
  - Fixed a problem where condor_shadow reuse could confuse DAGMan


author: Tim Theisen <tim@cs.wisc.edu> - 8.8.3-1
changelog:
  - Fixed a bug where jobs were killed instead of peacefully shutting down
  - Fixed a bug where a restarted schedd wouldn't connect to its running jobs
  - Improved file transfer performance when sending multiple files
  - Fix a bug that prevented interactive submit from working with Singularity
  - Orphaned Docker containers are now cleaned up on execute nodes
  - Restored a deprecated Python interface that is used to read the event log


author: Tim Theisen <tim@cs.wisc.edu> - 8.8.4-1
changelog:
  - Python 3 bindings - see version history for details (requires EPEL on EL7)
  - Can configure DAGMan to dramatically reduce memory usage on some DAGs
  - Improved scalability when using the python bindings to qedit jobs
  - Fixed infrequent schedd crashes when removing scheduler universe jobs
  - The condor_master creates run and lock directories when systemd doesn't
  - The condor daemon obituary email now contains the last 200 lines of log


author: Mátyás Selmeci <matyas@cs.wisc.edu> - 8.4.4-1.8
changelog:
  - Add DAEMON_LIST and FS/Password auth configuration;
    autogenerate pool password on install (SOFTWARE-3795)
  - Add version to the Obsoletes for condor-cream-gahp


author: Carl Edquist <edquist@cs.wisc.edu> - 1.18.42
changelog:
  - Move glite-build-common-cpp m4 files to vendor area (SOFTWARE-3587)
  - Pull rpm spec file into source repo


author: Diego Davila <didavila@ucsd.edu> - 1.7.1-1
changelog:
  - Adding directory config.d and file config.d/40-xrootd-lcmaps.cfg (SOFTWARE-3534)
  - Changing xrootd requirement to 4.9.0


author: Brian Lin <blin@cs.wisc.edu> - 1.7.3-1
changelog:
  - Add support for unauthenticated Stash Caches and Origins
  - Fix authzfunparms syntax
  - Use the canonical LCMAPS config location in the default config


author: Brian Lin <blin@cs.wisc.edu> - 1.18.32.bosco-1
changelog:
  - Fix bug that broke shell parsing of `*_binpath` config values
  - Set default bin paths to `/usr/bin` to remove the overhead of `which` for each PBS, LSF, and SGE call.


author: Brian Lin <blin@cs.wisc.edu> - 1.18.33.bosco-1
changelog:
  - Fix bug that caused jobs submitted to PBS batch systems to be held
    with "Error parsing classad or job not found" (SOFTWARE-2875)
  - Fix parsing of time fields for slurm jobs (SOFTWARE-2871)


author: Brian Lin <blin@cs.wisc.edu> - 1.18.34.bosco-1
changelog:
  - Fix memory usage parsing for SLURM and PBS (SOFTWARE-2929)
  - Fix UnicodeDecodeError when reading blah.config (SOFTWARE-2953)


author: Brian Lin <blin@cs.wisc.edu> - 1.18.36.bosco-1
changelog:
  - Verify input file existence before submission (SOFTWARE-3154)
  - Save debugging dirs if job submission fails (SOFTWARE-2827)


author: Carl Edquist <edquist@cs.wisc.edu> - 1.18.40.bosco-1
changelog:
  - Update PBS Pro qstat options for completed jobs (SOFTWARE-3675)
  - Apply patches from condor blahp (SOFTWARE-3587)
  - Use the original proxy if blahp proxy delegation is disabled (SOFTWARE-3661)
  - Use new condor env format (SOFTWARE-3589)


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 6.1.31-1
changelog:
  - GT6 update: Use 2048 bit keys to support openssl 1.1.1
  - Drop patch myproxy-2048-bits.patch (accepted upstream)


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 6.2.3-1
changelog:
  - Switch upstream to Grid Community Toolkit
  - First Grid Community Toolkit release (6.2.0)
    - Disable usage statistics reporting by default
    - Fix option parsing bug
  - Merge GT6 update 6.1.29 into GCT (6.2.1)
  - Use 2048 bit CA key for myproxy tests (6.2.2)
  - Merge GT6 update 6.1.30 into GCT (6.2.3)


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 6.2.6-1
changelog:
  - Clean up old GPT references (6.2.5)
  - Install myproxy-get-trustroots man page (6.2.5)
  - Remove LICENSE.globus file - usage statistics collection (6.2.6)


author: Brian Bockelman <brian.bockelman@cern.ch> - 1.7.0-1
changelog:
  - Add key=value config syntax.
  - Prior config syntax no longer requires a minimum of three arguments.


author: Dave Dykstra <dwd@fnal.gov> 4.10-2.1
changelog:
  - Upgrade to 4.10-2 tarball with the following release notes:
   - Apply patch for squid bug #5022, to prevent a reconfigure from crashing
      the coordinator process when there are multiple workers.
   - Use reconfigure signal for log rotation in all cases again.


author: Dave Dykstra <dwd@fnal.gov> 4.10-3.1
changelog:
  - Upgrade to 4.10-3 tarball with the following release notes:
   - Update patch for squid bug #5022 to final version.
   - Add patch for squid bug #5030 which reported that negative caching
      was not working.  This is an important feature for keeping load
      down on CVMFS stratum 1s that are not hosting a repository.


author: Dave Dykstra <dwd@fnal.gov> 4.10-4.1
changelog:
  - Upgrade to 4.10-4 tarball with the following release note:
   - Add patch for bug 5036 which caused a varying number of capital 'L's
      to appear at the beginning of access.log lines when the log buffer
      overflows.


author: Dave Dykstra <dwd@fnal.gov> 4.11-1.1
changelog:
  - Upgrade to 4.11-1 tarball with the following release notes:
   - Update to squid-4.11.  There's no announcement yet but the change log
      is at http://www.squid-cache.org/Versions/v4/changesets/.
   - Remove patches for bugs #5022 and #5036 which are in version 4.11. The
      patch for #5030 is still applied.


author: Dave Dykstra <dwd@fnal.gov> 4.11-2.1
changelog:
  - Upgrade to 4.11-2 tarball with the following release notes:
   - The 4.11 release announcement is now at
       https://www.mail-archive.com/squid-announce@lists.squid-cache.org/msg00108.html
      The announcement was delayed because security vulnerabilities were
      being double-checked.
   - frontier-squid was not susceptible to the ESI vulnerability, because of
      missing libraries on the build machine.  Add --disable-esi to make
      sure it doesn't get accidentally enabled.


author: Dave Dykstra <dwd@fnal.gov> 4.11-3.1
changelog:
  - Upgrade to 4.11-3 tarball with the following release notes:
   - Apply patch for bug #5051 which prevents a negative cache from
      persisting indefinitely with if-modified-since and collapsed forwarding.
   - Fix shoal when there are multiple squid workers.
   - Add cc.*\.in2p3\.fr to MAJOR_CVMFS.  It was already in ATLAS_FRONTIER
      so it was included for installations that accept both, but not for
      those that accept only MAJOR_CVMFS.


author: Dave Dykstra <dwd@fnal.gov>> - 1.5.11-1.1
changelog:
  - Updated to upstream 1.5.11-1.1, removed patch for unloading
      OpenSSL error strings (SOFTWARE-3282).


author: Diego Davila <didavila@ucsd.edu> - 1.7.7-3
changelog:
  - Removig patches: dont_link and find_libXrdSec
  - Making sure upcoming version is higher than testing


author: Dave Dykstra <dwd@fnal.gov> - 1.0-1
changelog:
  - Use the same root / $CWD as the target process.  Without this, the
    authz process may utilize the incorrect file for target processes
    that are in a chroot or provide a relative path for the X509 proxy.


author: Dave Dykstra <dwd@fnal.gov> - 2.2-1
changelog:
  - Prevent exiting after the first token authentication
  - Close token file descriptor after use
  - Enable token debug messages
  - Implement WLCG bearer token discovery standard
  - Add libscitokens-dev build dependency on debian


author: Carl Edquist <edquist@cs.wisc.edu> - 1.20.9-1
changelog:
  - Packaging revamp (SOFTWARE-3546)
  - Document probe xml records (SOFTWARE-3609, SOFTWARE-3641)
  - Cleanup init script (SOFTWARE-2503)
  - Fix Exception string construction (#37)
  - Support slurm v18 schema (SOFTWARE-3724)


author: Dave Dykstra <dwd@fnal.gov> 3.5.28-2.1
changelog:
  - Upgrade to 3.5.28-2 tarball with the following release notes:
   - Set umask and PATH in fn-local-squid.sh because /etc/init.d/functions
     used to set them.  This fixes problems with log rotation from cron.
   - Invoke /etc/init.d/functions from /etc/init.d/frontier-squid if it
     exists, because that is how systemd-based systems invoke systemctl
     to keep track of the service.  If it does not exist, set the PATH.


author: Dave Dykstra <dwd@fnal.gov> 4.3-1.1
changelog:
  - Upgrade to 4.3-1 tarball with the following release notes:
   - Major update to squid-4.3.
   - Removed patch for bug 4616 (patch was already applied in 4.3).
   - Replaced patch for bug 3952 with new --foreground option.
   - Ported patch for bug 7 forward.
  - Compile with devtoolset-2-toolchain on el6, in order to use c++11
  - Add PAM basic authentication module
  - Disable security-cert-validators to avoid perl Crypt::OpenSSL:X509
    dependency


author: Dave Dykstra <dwd@fnal.gov> 4.4-1.1
changelog:
  - Upgrade to 4.4-1 tarball with the following release notes:
   - Update to squid-4.4 with release notes at
      https://www.mail-archive.com/squid-announce@lists.squid-cache.org/msg00086.html
     including one fairly significant security fix for a potential denial
     of service due to memory leaks on rejected SNMP queries.
   - If different squid services have different numbers of workers (for
      example by using setserviceoption on "workers") then use the biggest
      number when creating cache and log directories.


author: Dave Dykstra <dwd@fnal.gov> 4.6-1.1
changelog:
  - Upgrade to 4.6-1 tarball with the following release notes:
   - Update to squid-4.6 with release notes at
      https://www.mail-archive.com/squid-announce@lists.squid-cache.org/msg00090.html
     squid-4.5 release notes are at
      https://www.mail-archive.com/squid-announce@lists.squid-cache.org/msg00089.html
   - If a rotate is blocked because processing awstats logs is running long,
     do the rotate during the next rotateiflarge cron instead.


author: Derek Weitzel <dweitzel@unl.edu> - 0.6.0-1
changelog:
  - Fix compilation errors on c++11
  - Update to jwt-cpp-0.4.0 vendor
  - Change scitoken profile name to match spec, scitoken:2.0


author: Dave Dykstra <dwd@fnal.gov> - 0.6.3-1
changelog:
  - Add support for building Debian packages on the OpenSUSE Build System
  - Add patch to jwt-cpp to update its picojson dependency in order to
    enable it to compile on Debian 11 and Ubuntu 21.04
  - Fix el7 build by requiring epel-rpm-macros


author: Derek Weitzel <dweitzel@unl.edu> - 0.7.0-1
changelog:
  - Changes from static analysis
  - If only one key is available, do not error on no kid
  - Support at+jwt profile


author: Tim Cartwright <cat@cs.wisc.edu> 3.4.3+15-1.cdh4.0.1.p0.4
changelog:
  - EL 7: Add tmpfiles configuration to manage /run/zookeeper (SOFTWARE-2511)
  - Own the (/var)?/run directory that the pre scriptlet makes (SOFTWARE-2511)
  - Correct hostname build requirement to use /bin/hostname


author: Diego Davila <didavila@ucsd.edu> - 2.3.6
changelog:
  - Hardcoding the version (SOFTWARE-3820) 
  - Changing Source0 to match the downloaded tarball name from github


author: Matyas Selmeci <matyas@cs.wisc.edu> - 2.0.0+1612-1.cdh4.7.1.p0.12.6
changelog:
  - Add 2588-out-of-quota-msg.patch to fix error message when diskspace quota is exceeded (SOFTWARE-2588)
  - Fix SELinux build error on EL7 due to excessive pickiness about .te file names


author: Mátyás Selmeci <matyas@cs.wisc.edu> - 4.2.3-1.1
changelog:
  - Update to 4.2.3-1 from upstream (SOFTWARE-4885)
  - Add Check-for-DT_REG-macro.patch to avoid compile error on EL7 due to missing DT_REG macro


author: Dave Dykstra <dwd@fnal.gov> 0.2.4-1.3.osg
changelog:
  - Change gsi-authz.conf to have the callout commented out by default
    so globus will fall back to the grid-mapfile


author: Mischa Salle <msalle@nikhef.nl> 0.3.1-1
changelog:
  - remove README file which is now a manpage
  - rename gt4-interface-install script
  - add gt4-interface-install man page
  - remove globus-core and globus-gsi-callback-devel build dependencies
  - update builddep on lcmaps-devel instead of -interface
  - prevent unnecessary linking
  - specify BuildRoot (and clean section) for EPEL5
  - remove defattr
  - cleanup docdir
  - adding BUGS and NEWS files
  - updated version


author: Mátyás Selmeci <matyas@cs.wisc.edu> - 7.4p1-5.1
changelog:
  - Merge OSG changes:
      * Mon Dec 16 2019 Carl Edquist <edquist@cs.wisc.edu> - 7.4p1-4.5
      - Move gsisshd.sysconfig changes to osg-gsi-openssh-addons (SOFTWARE-3915)

      * Fri Dec 13 2019 Carl Edquist <edquist@cs.wisc.edu> - 7.4p1-4.4
      - Move OSG-specific items to osg-gsi-openssh-addons (SOFTWARE-3915)

      * Mon Sep 16 2019 Carl Edquist <edquist@cs.wisc.edu> - 7.4p1-4.1
      - Merge OSG changes (SOFTWARE-3828)


author: Carl Edquist <edquist@cs.wisc.edu> - 1.20.13-1
changelog:
  - Fix bug for slurm version < 18 (SOFTWARE-4055)
  - Fix handling of non-word characters in slurm cluster name (SOFTWARE-4032)


author: Carl Edquist <edquist@cs.wisc.edu> - 1.20.14-1
changelog:
  - Fix unquoted cluster names in slurm probe sql (SOFTWARE-4189)
  - Detect condor vs htcondor-ce probe config (SOFTWARE-4195)


author: Diego Davila <didavila@ucsd.edu> - 7.0.21-1
changelog:
  - Update to 7.0.21 (SOFTWARE-3883)
  - Changed the -n argument on prep section to match to the untared directory name


author: Brian Lin <blin@cs.wisc.edu> - 7.1.7-1
changelog:
  - Update to 7.1.7 (SOFTWARE-4237)
  - Add Python3 to the packaging for EL8 even though it's not yet supported upstream


author: Mátyás Selmeci <matyas@cs.wisc.edu> - 0.5.4-25.4
changelog:
  - Add patch to enable ordered data (SOFTWARE-2436)
    - Adds dependency on globus-ftp-control >= 7.7
    - Adds build dependency on globus-gridftp-server >= 11


author: Edgar Fajardo <efajardo@cern.ch> - 4.0.2-7
changelog:
  - Addded the obsoletes part to the doc subpackage so a clean upgrade is done in cases users had older versions


author: Dave Dykstra <dwd@fnal.gov> 3.5.27-5.2
changelog:
  - Add %verify (not user group) to the %ghost statements for cache dir
    and log dir, and add %verify (not user group mode) on squid.conf and
    squid.conf.old.  Without those, rpm -V complains on el7 only, not el6.


author: Dave Dykstra <dwd@fnal.gov> 3.5.28-1.1
changelog:
  - Upgrade to 3.5.28-1 tarball with the following release notes:
   - Update to squid-3.5.28.  Here is the release announcement:
      https://www.mail-archive.com/squid-announce@lists.squid-cache.org/msg00083.html
      Removed patches for advisories SQUID-2018_1 and SQUID-2018_2 and
      for bug 4767 because fixes are included in the release.
   - Remove including /etc/init.d/functions from fn-local-squid.sh and from
     /etc/init.d/frontier-squid.  It wasn't being used and isn't in some
     docker containers such as slc6-lite.
   - If there are *.log.0.gz files in the presence of awstats, remove
     them before rotating.  They prevented rotation from working on el7.
  - When creating an account for running squid under, use a home directory of
     /var/lib/squid instead of defaulting to /home/${FRONTIER_USER:-squid}.
     The old default doesn't work on systems with automounted /home.


author: Mátyás Selmeci <matyas@cs.wisc.edu> - 1.7.1-1.5
changelog:
  - Document the options to toggle between considering the first VOMS FQAN or
    considering all of them. (SOFTWARE-2932)


author: Dave Dykstra <dwd@fnal.gov> - 1.7.1-1.6
changelog:
  - Look up lcmaps_is_set_to_verify_voms_attributes symbol instead of
    always calling it, because the symbol isn't available when used by
    llrun. (SOFTWARE-3255)


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 12.7-1
changelog:
  - GT6 update:
    - Force IPC encryption if server configuration requires
    - Fix old IPC bug making it hard to diagnose racy connection failures


author: Dave Dykstra <dwd@fnal.gov> 3.5.27-5.1
changelog:
  - Upgrade to 3.5.27-5 tarball with the following release note:
   - Avoid a reverse DNS lookup for every client connection by using the
     workaround in https://bugs.squid-cache.org/show_bug.cgi?id=4575,
     which is to override the defaults for url_rewrite_extras and
     store_id_extras.


author: Mattias Ellert <mattias.ellert@fysast.uu.se> - 2.0.13-1
changelog:
  - Update to version 2.0.13
  - Drop patches: voms-nossl3.patch, voms-tls1.patch, voms-gcc6.patch,
    voms-paren.patch, voms-comment-in-comment.patch and voms-doxygen.patch


