Add initial test-suite for diagnose command
Remove clearing DIAGNOSE when setting a session
Test SRM
httpd (webadmin): Fix rerendering of cellInfo page

In Wicket, the BasePage instances is only created once (or at least
not on every page load). The basic structure of a page is cached,
independent of what caching settings have otherwise been defined
for a page.

The CellServices class, which is the implementation of the cellInfo
page, not only builds the basic page structure in the constructor,
it also builds the data model that is driving the rendering. The
CellStatus data is taken out of a shared map object. The shared map
is periodically updated by background threads, however the data is
only ever taken out of the map in the constructor of CellServices.
Wicket, when rendering the page on page reload, will use its model
abstraction to access the model of the CellServices page, however
since it is never updated, the rendering never changes - after the
first load of the cellInfo page, it stays the same (at least for
that browser session).

This patch fixes the problem by replacing the field with a getter.
The getter fetches the data from the shared cache, thus rendering
a different result on every page load.

Target: trunk
Request: 2.6
Request: 2.2 (?)
Require-notes: yes
Require-book: no
Acked-by: Albert Rossi <arossi@fnal.gov>
Patch: http://rb.dcache.org/r/5807/
admin: Add pcells subsystem to ssh2

The pcells subsystem allows the pcells GUI to establish a binary
channel to dCache.

Target: trunk
Require-notes: yes
Require-book: no
Acked-by: Paul Millar <paul.millar@desy.de>
Patch: http://rb.dcache.org/r/5792/
core: don't use reflection to invoke getPnfsId

Many messages  in dCache do have getPnfsId method.
This information is stored in diagnostic context. Unfortunately,
to invoke getPnfsId() reflection is used as there is no common
way to get this information.

This change modifies all messages which have getPnfsId() and
override getDiagnosticContext() to provide the same information,
but without reflection.

Acked-by: http://rb.dcache.org/r/5640/
Acked-by: Gerd Behrmann
Target: trunk
Require-book: no
Require-notes: no
    srm: simplify handling of time unit in srm.xml

    replaces TimeUnit.valuOf('${xxx.yyy.unit}'} with just '${xxx.yyy.unit}'

    Ticket:
    Patch: http://rb.dcache.org/r/5808/
    Acked-by: Gerd Behrmann
    Target: trunk
    Require-book: no
    Require-notes: no
Add functional test program
Update functional test
pool,poolmanager: Minor cleanup of PoolCostInfo

Recent versions of the pool always report the extended mover hash and
thus the code can be simplified.

Target: trunk
Require-book: no
Require-notes: no
Acked-by: Paul Millar <paul.millar@desy.de>
Patch: http://rb.dcache.org/r/5789/
        spacemanager: adapt to new properties naming convention

        deprecated:

        DefaultAccessLatencyForSpaceReservation
        SpaceManagerReserveSpaceForNonSRMTransfers
        SpaceManagerLinkGroupAuthorizationFileName

        added:

        spacemanager.default-access-latency
        spacemanager.enable.reserve-space-for-non-srm-tranfers
        spacemanager.authz.link-group-file-name
        spacemanager.enable.spacemanager
        spacemanager.service.poolmanager
        spacemanager.service.pnfsmanager

        spacemanager.db.host=${srm.db.host}
        spacemanager.db.name=${srm.db.name}
        spacemanager.db.user=${srm.db.user}
        spacemanager.db.password=${srm.db.password}
        spacemanager.db.driver=${srm.db.driver}
        spacemanager.db.url=${srm.db.url}
        spacemanager.db.schema.auto=${srm.db.auto}

    RELEASE NOTES:
	srmspacemanager adapted to new property
	naming convention

	deprecated:

        DefaultAccessLatencyForSpaceReservation
        SpaceManagerReserveSpaceForNonSRMTransfers
        SpaceManagerLinkGroupAuthorizationFileName

        added:

        spacemanager.default-access-latency
        spacemanager.enable.reserve-space-for-non-srm-tranfers
        spacemanager.authz.link-group-file-name
        spacemanager.enable.spacemanager
        spacemanager.service.poolmanager
        spacemanager.service.pnfsmanager

        spacemanager.db.host=${srm.db.host}
        spacemanager.db.name=${srm.db.name}
        spacemanager.db.user=${srm.db.user}
        spacemanager.db.password=${srm.db.password}
        spacemanager.db.driver=${srm.db.driver}
        spacemanager.db.url=${srm.db.url}
        spacemanager.db.schema.auto=${srm.db.auto}
    BOOK:
	SrmsSpaceManager is controlled by the following
        variables:

        spacemanager.default-access-latency
        spacemanager.enable.reserve-space-for-non-srm-tranfers
        spacemanager.authz.link-group-file-name
        spacemanager.enable.spacemanager
        spacemanager.service.poolmanager
        spacemanager.service.pnfsmanager

        spacemanager.db.host=${srm.db.host}
        spacemanager.db.name=${srm.db.name}
        spacemanager.db.user=${srm.db.user}
        spacemanager.db.password=${srm.db.password}
        spacemanager.db.driver=${srm.db.driver}
        spacemanager.db.url=${srm.db.url}
        spacemanager.db.schema.auto=${srm.db.auto}

    Patch: http://rb.dcache.org/r/5791/
    Acked-by: Gerd Behrmann
    Target: trunk
    Require-book: yes
    Require-notes: yes
dir: Comply with new property policy

New properties

dir.cell.name
dir.service.pnfsmanager

Target: trunk
Require-book: yes
Require-notes: yes
Acked-by: Paul Millar <paul.millar@desy.de>
Patch: http://rb.dcache.org/r/5809/
statistics: Comply with new configuration policy

New properties

statistics.cell.name
statistics.location
httpd.statistics.location

Deprecated

statisticsLocation

Require-book: yes
Require-notes: yes
Target: trunk
Acked-by: Paul Millar <paul.millar@desy.de>
Patch: http://rb.dcache.org/r/5811/
admin,ssh1: Comply with new property policy

The admin service is split into admin and ssh1, with ssh1 being the
legacy admin door, and admin only providing ssh2.

Code inspection shows that the acm cell has to be a well-known
cell and has to be called acm. This is because the cell name is
hardcoded in all cells for admin acl verification. The configurable
cell name is thus removed, and the cell is moved into dCacheDomain
and loaded implicitly through the preload functionality.

To the admin this means that any configured ssh1 admin shell passwords
and admin acl rules have to be moved to the host holding the
dCacheDomain. These are the
etc/dcache/admin/{acls,relations,meta,users} files and directories as
well as /var/lib/dcache/config/passwd.

New properties

admin.cell.name
admin.net.port
admin.authz.gid
admin.paths.history
admin.paths.authorized-keys
admin.paths.dsa-host-key.private
admin.paths.dsa-host-key.public
admin.service.gplazma
admin.service.gplazma.timeout
admin.service.gplazma.timeout.unit
admin.enable.colors
ssh1.cell.name
ssh1.net.port
ssh1.net.listen
ssh1.paths.history
ssh1.paths.known-users
ssh1.paths.server-key
ssh1.paths.host-key
ssh1.paths.user-password
ssh1.enable.colors
dcache.paths.admin

Deprecated properties

admin.ssh2AdminPort
admin.ssh2.gid
adminHistoryFile
admin.colors.enable
admin.authorizedKey2
admin.dsaHostKeyPrivate
admin.dsaHostKeyPublic
dcache.paths.ssh-keys

Obsolete properties

AccessControlCell
knownUsersFile
serverKeyFile
hostKeyFile
userPasswordFile
sshVersion

Target: trunk
Require-book: yes
Require-notes: yes
Acked-by: Paul Millar <paul.millar@desy.de>
Patch: http://rb.dcache.org/r/5806/
Remove scoped cell.name property

All services now use <service>.cell.name to identify the name
of their primary cell. This patch removes the legacy cell.name
property (marked forbidden) and updates all scripts and batch
files to use the <service>.cell.name property instead.

There is no way to still support the legacy cell.name property
without the scoping operator.

Target: trunk
Require-book: yes
Require-notes: yes
Acked-by: Paul Millar <paul.millar@desy.de>
Patch: http://rb.dcache.org/r/5812/
Add a new gPlazma account phase plugin

gPlazma2 was still missing a simple way to ban users. This patch adds a
new plugin that allows blacklisting users based on <principal
type>:<value>
pairs given in a plain text file.

Example file:

---

alias name=org.dcache.auth.LoginNamePrincipal
alias dn=org.globus.gsi.jaas.GlobusPrincipal

ban dn:/C=XY/O=org/OU=Some Where/CN=Some One
ban javax.security.auth.kerberos.KerberosPrincipal:SOMEONE@SOMEWHERE.ORG
ban name:someone
ban dn:/C=XY/O=org/OU=Some Where/CN=Some One Else
ban javax.security.auth.kerberos.KerberosPrincipal:SOMEONEELSE@SOMEWHERE.ORG
---

Acked-by: Paul
Acked-by: Gerd
Target: master
Request: 2.6
Require-book: yes
Require-notes: yes
Patch: http://rb.dcache.org/r/5777/
spacemanager: Fix property annotations

The property annotation of DefaultAccessLatencyForSpaceReservation is
missing the default value. The patch also addresses the problem that
spacemanager.default-access-latency was not defined in terms of the
property it is deprecating.

Target: trunk
Require-notes: no
Require-book: no
Acked-by: Paul Millar <paul.millar@desy.de>
Patch: http://rb.dcache.org/r/5820/
spacemanager: Add missing properties and fix system-test config

Target: trunk
Require-book: no
Require-notes: no
Acked-by: Paul Millar <paul.millar@desy.de>
Patch: http://rb.dcache.org/r/5821/
Fix time unit related properties

Fixes a number of bugs and omissions in time unit properties.

Target: trunk
Require-notes: no
Require-book: no
Acked-by: Paul Millar <paul.millar@desy.de>
Acked-by: Albert Rossi <arossi@fnal.gov>
Patch: http://rb.dcache.org/r/5765/
Removed scoped db.* properties.

Replaces all db.* properties with equivalent
<service>.db.* properties. The old db.* properties
are marked forbidden.

Scripts are updated to use the new names.

Target: trunk
Require-book: yes
Require-notes: yes
Acked-by: Paul Millar <paul.millar@desy.de>
Patch: http://rb.dcache.org/r/5822/