# changelog

author: Mattias Ellert <mattias.ellert@physics.uu.se> - 8.36-1
changelog:
  - GT6 update: Replace deprecated perl POSIX::tmpnam with File::Temp::tmpnam
  - Drop patch globus-ftp-client-perl-posix.patch (accepted upstream)


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 9.1-1
changelog:
  - Switch upstream to Grid Community Toolkit
  - First Grid Community Toolkit release (9.0)
  - Use 2048 bit RSA key for tests (9.1)


author: Brian Lin <blin@cs.wisc.edu> - 3.0.4-21
changelog:
  - Add empty /etc/sysconfig/xrootd-dsi config file
  - Add descriptive header to globus-gridftp-server-plugin


author: Mátyás Selmeci <matyas@cs.wisc.edu> - 0.3.0-4
changelog:
  - Use double layer of const for deserialize
    (patch from https://github.com/scitokens/scitokens-cpp/commit/ac0b2f0679488fa91c14ed781268efbcdb69ed3c)


author: Derek Weitzel <dweitzel@unl.edu> - 0.3.3-1
changelog:
  - Merge OSG changes
  - Use a newer, still supported version of devtoolset
  - Fix bug in verifying EC signed tokens #13


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 6.1.31-1
changelog:
  - GT6 update: Use 2048 bit keys to support openssl 1.1.1
  - Drop patch myproxy-2048-bits.patch (accepted upstream)


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 6.2.3-1
changelog:
  - Switch upstream to Grid Community Toolkit
  - First Grid Community Toolkit release (6.2.0)
    - Disable usage statistics reporting by default
    - Fix option parsing bug
  - Merge GT6 update 6.1.29 into GCT (6.2.1)
  - Use 2048 bit CA key for myproxy tests (6.2.2)
  - Merge GT6 update 6.1.30 into GCT (6.2.3)


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 6.2.6-1
changelog:
  - Clean up old GPT references (6.2.5)
  - Install myproxy-get-trustroots man page (6.2.5)
  - Remove LICENSE.globus file - usage statistics collection (6.2.6)


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 12.7-1
changelog:
  - GT6 update:
    - Force IPC encryption if server configuration requires
    - Fix old IPC bug making it hard to diagnose racy connection failures


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 12.12-1
changelog:
  - GT6 update:
    - Use 2048 bit keys to support openssl 1.1.1 (12.10)
    - Log remote http connection address for legacy s3 transfers (12.11/12.12)


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 13.8-1
changelog:
  - Switch upstream to Grid Community Toolkit
  - Grid Community Toolkit merged a number of outstanding pull requests (13.0)
    - Add option to send IPv6 address in EPSV response
    - Add function to get the command string
    - Be more selective in what config files we skip
    - Add unames for GNU/Hurd and kfreebsd to chroot setup script
  - Merge GT6 update 12.5 into GCT (13.1)
  - First Grid Community Toolkit release (13.2)
    - Disable usage statistics reporting by default
    - Add man page for globus-gridftp-password - contribution from IGE
  - Use 2048 bit RSA key for tests (13.3)
  - Merge GT6 update 12.6 into GCT (13.4)
  - Merge GT6 update 12.7 into GCT (13.5)
  - Merge GT6 update 12.8 into GCT (13.6)
  - Merge GT6 update 12.9 into GCT (13.7)
  - Merge GT6 update 12.12 into GCT (13.8)
  - Drop patches globus-gridftp-server-unames.patch, -epsv-ip.patch,
    -cmd-string.patch and -config.patch (accepted upstream)
  - Drop the man page for globus-gridftp-password from the source package
    (accepted upstream)


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 13.11-1
changelog:
  - Improvements for filesystems that encounter listing timeouts (13.10)
  - Remove usage statistics collection support (13.11)


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 6.2-1
changelog:
  - GT6 update:
    - Prevent client from requesting clear control channel
    - CIPHERS config will now apply to control channel


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 8.0-1
changelog:
  - Switch upstream to Grid Community Toolkit
  - Grid Community Toolkit merged a number of outstanding pull requests (7.0)
    - Add option to send IPv6 address in EPSV response
    - Add function to get the command string
    - Terminate the connection if server fails to write the 220 banner
    - Fix typo in GridFTP server response type
  - First Grid Community Toolkit release (7.1)
  - Merge GT6 update 6.2 into GCT (7.2)
  - Merge GT6 update 6.3 into GCT (7.3)
  - Merge GT6 update 7.0 into GCT (8.0)
  - Drop patches globus-gridftp-server-control-epsv-ip.patch,
    -cmd-string.patch and -tcp-rst-stuck.patch (accepted upstream)


author: Mischa Salle <msalle@nikhef.nl> 0.3.5-1
changelog:
  - installed BUGS as documentation
  - add requirement on LCMAPS plus minimal version
  - use mandir for installing man pages
  - bumped version


author: Mischa Salle <msalle@nikhef.nl> 0.4.0-1
changelog:
  - update build requirement on xacml-devel plus minimal version
  - add requirement on xacml plus minimal version
  - bumped version


author: Mischa Salle <msalle@nikhef.nl> 0.5.0-1
changelog:
  - update builddep on lcmaps-devel instead of -interface
  - prevent unnecessary linking
  - specify BuildRoot (and clean section) for EPEL5
  - remove defattr
  - updated version


author: Mischa Salle <msalle@nikhef.nl> 0.5.0-2
changelog:
  - clean up installed documentation files (breaks Fedora20)
  - correct bogus dates in changelog (breaks Fedora20)


author: Matyas Selmeci <matyas@cs.wisc.edu> - 2.0.0+1612-1.cdh4.7.1.p0.12.6
changelog:
  - Add 2588-out-of-quota-msg.patch to fix error message when diskspace quota is exceeded (SOFTWARE-2588)
  - Fix SELinux build error on EL7 due to excessive pickiness about .te file names


author: Mischa Salle <msalle@nikhef.nl> 1.5.1-2
changelog:
  - Add minimal lcmaps version.
  - Remove configure flag for moduledir.

  - Added plugin lcmaps_ban_dn including manpage.
  - Update URL.
  - Add run-time requirement for lcmaps for basic package.
  - Add architecture to run-time requirement for ldap subpackage.
  - Updated version


author: Mischa Salle <msalle@nikhef.nl> 1.6.2-2
changelog:
  - clean up installed documentation files (breaks Fedora20)
  - correct bogus dates in changelog (breaks Fedora20)
  - correct duplicate entry in filelist


author: Dave Dykstra <dwd@fnal.gov>> - 1.5.11-1.1
changelog:
  - Updated to upstream 1.5.11-1.1, removed patch for unloading
      OpenSSL error strings (SOFTWARE-3282).


author: Dave Dykstra <dwd@fedoraproject.org> - 3.5.2-1.2
changelog:
  - Add patch for PR #4974.  Only the src rpm is being used, for
    building a --without-suid installation, so this won't be released
    to EPEL or Fedora other than rawhide..


author: Dave Dykstra <dwd@fedoraproject.org> - 3.6.0-1
changelog:
  - Upgrade to upstream 3.6.0.  Remove patch #4679 for el8, since
    golang-12 is now available for that build machine.


author: Mischa Salle <msalle@nikhef.nl> 1.4.0-1
changelog:
  - make Requires arch-specific
  - prevent unnecessary linking
  - specify BuildRoot (and clean section) for EPEL5
  - add requirement on pkgconfig for EPEL5 only
  - remove defattr
  - updated version


author: Mischa Salle <msalle@nikhef.nl> 1.4.1-1
changelog:
  - add AUTHORS and LICENSE to doc
  - remove the excludes since they are no longer build/installed
  - updated version


author: Matyas Selmeci <matyas@cs.wisc.edu> - 1.5.1-4
changelog:
  - Bump to rebuild against xrootd 3.3.1
  - Rename xrootd-libs-devel dependency to match what 3.3.1 calls it


author: Tom Throckmorton <throck@mcnc.org> - 1.3-4
changelog:
  - minor spec changes to enable rebuilds via mock
  - disable I2util, thrulay at buildtime; enable nuttcp


author: Mátyás Selmeci <matyas@cs.wisc.edu> - 0.5.4-25.4
changelog:
  - Add patch to enable ordered data (SOFTWARE-2436)
    - Adds dependency on globus-ftp-control >= 7.7
    - Adds build dependency on globus-gridftp-server >= 11


author: Dave Dykstra <dwd@fnal.gov> 0.2.4-1.3.osg
changelog:
  - Change gsi-authz.conf to have the callout commented out by default
    so globus will fall back to the grid-mapfile


author: Mischa Salle <msalle@nikhef.nl> 0.3.1-1
changelog:
  - remove README file which is now a manpage
  - rename gt4-interface-install script
  - add gt4-interface-install man page
  - remove globus-core and globus-gsi-callback-devel build dependencies
  - update builddep on lcmaps-devel instead of -interface
  - prevent unnecessary linking
  - specify BuildRoot (and clean section) for EPEL5
  - remove defattr
  - cleanup docdir
  - adding BUGS and NEWS files
  - updated version


author: Diego Davila <didavila@ucsd.edu> - 1.7.1-1
changelog:
  - Adding directory config.d and file config.d/40-xrootd-lcmaps.cfg (SOFTWARE-3534)
  - Changing xrootd requirement to 4.9.0


author: Brian Lin <blin@cs.wisc.edu> - 1.7.3-1
changelog:
  - Add support for unauthenticated Stash Caches and Origins
  - Fix authzfunparms syntax
  - Use the canonical LCMAPS config location in the default config


author: Dave Dykstra <dwd@fnal.gov> - 0.4.6-1.1.osg
changelog:
  - Add Provides: openssl-pkcs11 to prevent getting overriden by newer
    package by that name in epel (OO-229).


author: Diego Davila <didavila@ucsd.edu> - 7.0.21-1
changelog:
  - Update to 7.0.21 (SOFTWARE-3883)
  - Changed the -n argument on prep section to match to the untared directory name


author: Mátyás Selmeci <matyas@cs.wisc.edu> - 1.7.1-1.5
changelog:
  - Document the options to toggle between considering the first VOMS FQAN or
    considering all of them. (SOFTWARE-2932)


author: Dave Dykstra <dwd@fnal.gov> - 1.7.1-1.6
changelog:
  - Look up lcmaps_is_set_to_verify_voms_attributes symbol instead of
    always calling it, because the symbol isn't available when used by
    llrun. (SOFTWARE-3255)


author: Radek Vokal <rvokal@redhat.com> - 5.1.11-3
changelog:
  - spec file clean up by Adrian Reber <adrian@lisas.de>
  - added a URL
  - removed wrong URL from Source
  - fixed summary according to guidlines
  - removed bogus build require
  - disabled xinetd services
  - using correct path in xinetd files
  - removed unnecessary checks for BUILD_ROOT
  - replaced /etc with macro
  - added noreplace flag to %config


author: Carl Edquist <edquist@cs.wisc.edu> - 1.18.40.bosco-1
changelog:
  - Update PBS Pro qstat options for completed jobs (SOFTWARE-3675)
  - Apply patches from condor blahp (SOFTWARE-3587)
  - Use the original proxy if blahp proxy delegation is disabled (SOFTWARE-3661)
  - Use new condor env format (SOFTWARE-3589)


author: Carl Edquist <edquist@cs.wisc.edu> - 1.18.42
changelog:
  - Move glite-build-common-cpp m4 files to vendor area (SOFTWARE-3587)
  - Pull rpm spec file into source repo


author: Carl Edquist <edquist@cs.wisc.edu> - 1.18.44
changelog:
  - Add Slurm SystemCpu accounting when job completes (SOFTWARE-3825)
  - Add support for decimal seconds fields from sacct (SOFTWARE-3826)
  - Pull in various updates to slurm scripts from htcondor's blap (SOFTWARE-3587)
  - Move local submit attributes scripts from spec to sources (SOFTWARE-3749)


author: Brian Lin <blin@cs.wisc.edu> - 1.4-1
changelog:
  - Add support to GLOBUS_GFS_CMD_SITE_RDEL
  - Add GRIDFTP_APPEND_XROOTD_CGI hook (environment variable) to support Xrootd space token.
  - Renamed xrootd-dsi packaging to reflect upstream


author: Brian Lin <blin@cs.wisc.edu> - 1:1.4-2
changelog:
  - Added architecture-specific provides for xrootd-dsi
  - Refer to gridftp-dsi-posix paths in globus-gridftp-server-plugin


author: Mátyás Selmeci <matyas@cs.wisc.edu> - 2.0.14-1.6
changelog:
  - Also accept VOMS attributes that only have a top-level group (SOFTWARE-4114)
    - Drop Validate-top-level-group-of-VOMS-attribute.patch
    - Add Validate-top-level-group-of-VOMS-attribute-also-acce.patch


author: Carl Edquist <edquist@cs.wisc.edu> - 1.20.3-2
changelog:
  - Fix htcondor-ce probe's condor_config_val queries (SOFTWARE-2629)
  - Update pbs/lsf latest timestamp for empty logfiles (SOFTWARE-3041)


author: Carl Edquist <edquist@cs.wisc.edu> - 1.20.8-1
changelog:
  - Avoid setting processors twice in slurm probe (SOFTWARE-3475)
  - Add travis-ci infrastructure, add condor unit tests (#43)
  - Default to 0 processors in condor probe (SOFTWARE-3474, SOFTWARE-3476)


author: Carl Edquist <edquist@cs.wisc.edu> - 1.20.9-1
changelog:
  - Packaging revamp (SOFTWARE-3546)
  - Document probe xml records (SOFTWARE-3609, SOFTWARE-3641)
  - Cleanup init script (SOFTWARE-2503)
  - Fix Exception string construction (#37)
  - Support slurm v18 schema (SOFTWARE-3724)


author: Carl Edquist <edquist@cs.wisc.edu> - 1.20.13-1
changelog:
  - Fix bug for slurm version < 18 (SOFTWARE-4055)
  - Fix handling of non-word characters in slurm cluster name (SOFTWARE-4032)


author: Tim Theisen <tim@cs.wisc.edu> - 8.8.6-1
changelog:
  - Initial support for CentOS 8
  - Fixed a memory leak in SSL authentication
  - Fixed a bug where "condor_submit -spool" would only submit the first job
  - Reduced encrypted file transfer CPU usage by a factor of six
  - "condor_config_val -summary" displays changes from a default configuration
  - Improved the ClassAd documentation, added many functions that were omitted


author: Tim Theisen <tim@cs.wisc.edu> - 8.8.7-1
changelog:
  - Updated condor_annex to work with upcoming AWS Lambda function changes
  - Added the ability to specify the order that job routes are applied
  - Fixed a bug that could cause remote condor submits to fail
  - Fixed condor_wait to work when the job event log is on AFS
  - Fixed RPM packaging to be able to install condor-all on CentOS 8
  - Period ('.') is allowed again in DAGMan node names


author: Tim Theisen <tim@cs.wisc.edu> - 8.8.8-1
changelog:
  - Fixes addressing CVE-2019-18823
  - https://research.cs.wisc.edu/htcondor/security/vulnerabilities/HTCONDOR-2020-0001.html
  - https://research.cs.wisc.edu/htcondor/security/vulnerabilities/HTCONDOR-2020-0002.html
  - https://research.cs.wisc.edu/htcondor/security/vulnerabilities/HTCONDOR-2020-0003.html
  - https://research.cs.wisc.edu/htcondor/security/vulnerabilities/HTCONDOR-2020-0004.html


author: Tim Theisen <tim@cs.wisc.edu> - 8.8.9-1
changelog:
  - Proper tracking of maximum memory used by Docker universe jobs
  - Fixed preempting a GPU slot for a GPU job when all GPUs are in use
  - Fixed a Python crash when queue_item_data iterator raises an exception
  - Fixed a bug where slot attribute overrides were ignored
  - Calculates accounting group quota correctly when more than 1 CPU requested
  - Updated HTCondor Annex to accommodate API change for AWS Spot Fleet
  - Fixed a problem where HTCondor would not start on AWS Fargate
  - Fixed where the collector could wait forever for a partial message
  - Fixed streaming output to large files (>2Gb) when using the 32-bit shadow


author: Tim Theisen <tim@cs.wisc.edu> - 8.8.10-1
changelog:
  - condor_qedit can no longer be used to disrupt the condor_schedd
  - Fixed a bug where the SHARED_PORT_PORT configuration setting was ignored
  - Ubuntu 20.04 and Amazon Linux 2 are now supported
  - In MacOSX, HTCondor now requires LibreSSL, available since MacOSX 10.13


author: Tim Cartwright <cat@cs.wisc.edu> 3.4.3+15-1.cdh4.0.1.p0.4
changelog:
  - EL 7: Add tmpfiles configuration to manage /run/zookeeper (SOFTWARE-2511)
  - Own the (/var)?/run directory that the pre scriptlet makes (SOFTWARE-2511)
  - Correct hostname build requirement to use /bin/hostname


author: Mátyás Selmeci <matyas@cs.wisc.edu> 4.9.3-1.1
changelog:
  - Revert OS detection changes in pegasus-lite-common.sh that were breaking EL6 builds (SOFTWARE-4014)


author: Dave Dykstra <dwd@fnal.gov> - 1.0-1
changelog:
  - Use the same root / $CWD as the target process.  Without this, the
    authz process may utilize the incorrect file for target processes
    that are in a chroot or provide a relative path for the X509 proxy.


author: Mátyás Selmeci <matyas@cs.wisc.edu> 1.6.6-1.2.osg
changelog:
  - Add ban-mapfile, ban-voms-mapfile and updated lcmaps.db with a new
    authorize_only policy that uses the ban files, voms mapfiles, and a
    modified verify_proxy.  This adds new requirements on:
    - lcmaps-plugins-voms >= 1.7.1-1.1
    - lcmaps-plugins-verify-proxy >= 1.5.9-1.1
    (SOFTWARE-2602)


