# changelog

author: Mátyás Selmeci <matyas@cs.wisc.edu> - 3.4.0-2
changelog:
  - Add python3-condor and python3-xrootd build dependencies so we don't build RPMs for repos
    which they can't be installed from.


author: Mátyás Selmeci <matyas@cs.wisc.edu> - 3.5.0-1
changelog:
  - Have the authfile updater get a grid-mapfile from Topology for
    stash-cache-auth and stash-origin-auth (SOFTWARE-5467)


author: Matt Westphall <westphall@wisc.edu> - 3.6.0-1
changelog:
  - Make redirector line in cache config customizable (SOFTWARE-5641)
  - check for *.local files in /etc/xrootd in authfile-updater (SOFTWARE-5597)


author: Mátyás Selmeci <matyas@cs.wisc.edu> - 3.7.0-1
changelog:
  - Make use of grid-mapfile downloaded from Topology.
    Requires osg-xrootd >= 3.6-24 (for OSG 3.6) or >= 23-6 (for OSG 23)


author: Mátyás Selmeci <matyas@cs.wisc.edu> - 3.7.0-2
changelog:
  - Relax main package version requirement in stash-cache and stash-origin subpackages
    to make upgrades to OSG 24 easier (SOFTWARE-6045)


author: Dave Dykstra <dwd@fnal.gov> 1.14-1
changelog:
  - Limit the number of proxy levels stripped off of %certsubject to 5.
    This is to catch programming errors where people call voms-proxy-init
    -noregen after every call to cigetcert, even when cigetcert determines
    that the previous proxy can be reused.


author: Dave Dykstra <dwd@fnal.gov> 1.15-1
changelog:
  - Fix bug that caused the proxy to be stored into MyProxy under the DN
    of a previous certificate (if it existed but could not be reused)
    rather than the newly generated one.


author: Dave Dykstra <dwd@fnal.gov> 1.16-1
changelog:
  - Fix typo in the variable name added in the last version.  This was
    not noticed because it was caught in an exception and caused it to
    always behave as if a previous proxy stored in myproxy could not be
    used.


author: Dave Dykstra <dwd@fnal.gov> 1.18-1
changelog:
  - Make source code completely compatible with python3
  - Fix check for more than 5 proxy levels to apply when verbose option
    is not set


author: Dave Dykstra <dwd@fnal.gov> 1.19-1
changelog:
  - Add setup.py for making a standard python installation
  - Use ssl.get_default_verify_paths() to find default CA paths, when possible
  - Make --listinstitutions compatible with python3


author: Dave Dykstra <dwd@fnal.gov> 1.20-1
changelog:
  - Add make sources target for koji build
  - Add make srpm target for copr build
  - Support port numbers in https urls
  - Return all received cookies in the final getcert step
  - Add sending Server Name Indication on https connections


author: Tim Theisen <tim@cs.wisc.edu> - 10.6.0-1
changelog:
  - Administrators can enable and disable job submission for a specific user
  - Work around memory leak in libcurl on EL7 when using the ARC-CE GAHP
  - Container images may now be transferred via a file transfer plugin
  - Add ClassAd stringlist subset match function
  - Add submit file macro '$(JobId)' which expands to full ID of the job
  - The job's executable is no longer renamed to 'condor_exec.exe'


author: Tim Theisen <tim@cs.wisc.edu> - 10.0.7-1
changelog:
  - Fixed bug where held condor cron jobs would never run when released
  - Improved daemon IDTOKENS logging to make useful messages more prominent
  - Remove limit on certificate chain length in SSL authentication
  - condor_config_val -summary now works with a remote configuration query
  - Prints detailed message when condor_remote_cluster fails to fetch a URL
  - Improvements to condor_preen


author: Tim Theisen <tim@cs.wisc.edu> - 10.7.0-1
changelog:
  - Support for Debian 12 (Bookworm)
  - Can run defrag daemons with different policies on distinct sets of nodes
  - Added want_io_proxy submit command
  - Apptainer is now included in the HTCondor tarballs
  - Fix 10.5.0 bug where reported CPU time is very low when using cgroups v1
  - Fix 10.5.0 bug where .job.ad and .machine.ad were missing for local jobs


author: Tim Theisen <tim@cs.wisc.edu> - 10.0.8-1
changelog:
  - Avoid kernel panic on some Enterprise Linux 8 systems
  - Fix bug where early termination of service nodes could crash DAGMan
  - Limit email about long file transfer queue to once daily
  - Various fixes to condor_adstash


author: Tim Theisen <tim@cs.wisc.edu> - 10.8.0-1
changelog:
  - Fold the classads, blahp, and procd RPMs into the main condor RPM
  - Align the Debian packages and package names with the RPM packaging
  - On Linux, the default configuration enforces memory limits with cgroups
  - condor_status -gpus shows nodes with GPUs and the GPU properties
  - condor_status -compact shows a row for each slot type
  - New ENV command controls which environment variables are present in DAGMan


author: Tim Theisen <tim@cs.wisc.edu> - 10.0.9-1
changelog:
  - The condor_upgrade_check script now provides guidance on updating to 23.0
  - The htchirp Python binding now properly locates the chirp configuration
  - Fix bug that prevented deletion of HTCondor passwords on Windows


author: Tim Theisen <tim@cs.wisc.edu> - 23.0.0-1
changelog:
  - Absent slot configuration, execution points will use a partitionable slot
  - Linux cgroups enforce maximum memory utilization by default
  - Can now define DAGMan save points to be able to rerun DAGs from there
  - Much better control over environment variables when using DAGMan
  - Administrators can enable and disable job submission for a specific user
  - Can set a minimum number of CPUs allocated to a user
  - condor_status -gpus shows nodes with GPUs and the GPU properties
  - condor_status -compact shows a row for each slot type
  - Container images may now be transferred via a file transfer plugin
  - Support for Enterprise Linux 9, Amazon Linux 2023, and Debian 12
  - Can write job information in AP history file for every execution attempt
  - Can run defrag daemons with different policies on distinct sets of nodes
  - Add condor_test_token tool to generate a short lived SciToken for testing
  - The job’s executable is no longer renamed to ‘condor_exec.exe’


author: Tim Theisen <tim@cs.wisc.edu> - 23.0.1-1
changelog:
  - Fix 10.6.0 bug that broke PID namespaces
  - Fix bug where execution times for ARC CE jobs were 60 times too large
  - Fix bug where a failed 'Service' node would crash DAGMan
  - Condor-C and Job Router jobs now get resources provisioned updates


author: Tim Theisen <tim@cs.wisc.edu> - 23.0.2-1
changelog:
  - Fix bug where OIDC login information was missing when submitting jobs
  - Improved sandbox and ssh-agent clean up for batch grid universe jobs
  - Fix bug where daemons with a private network address couldn't communicate
  - Fix cgroup v2 memory enforcement for custom configurations
  - Add DISABLE_SWAP_FOR_JOB support on cgroup v2 systems
  - Fix log rotation for OAuth and Vault credmon daemons


author: Tim Theisen <tim@cs.wisc.edu> - 23.0.3-1
changelog:
  - Preliminary support for openSUSE LEAP 15
  - All non-zero exit values from file transfer plugins are now errors
  - Fix crash in Python bindings when job submission fails
  - Chirp uses a 5120 byte buffer and errors out for bigger messages
  - condor_adstash now recognizes GPU usage values as floating point numbers


author: Tim Theisen <tim@cs.wisc.edu> - 23.0.4-1
changelog:
  - NVIDIA_VISIBLE_DEVICES environment variable lists full uuid of slot GPUs
  - Fix problem where some container jobs would see GPUs not assigned to them
  - Restore condor keyboard monitoring that was broken since HTCondor 23.0.0
  - In condor_adstash, the search engine timeouts now apply to all operations
  - Ensure the prerequisite perl modules are installed for condor_gather_info


author: Tim Theisen <tim@cs.wisc.edu> - 23.0.6-1
changelog:
  - Fix DAGMan where descendants of removed retry-able jobs are marked futile
  - Ensure the condor_test_token works correctly when invoked as root
  - Fix bug where empty multi-line values could cause a crash
  - condor_qusers returns proper exit code for errors in formatting options
  - Fix crash in job router when a job transform is missing an argument


author: Tim Theisen <tim@cs.wisc.edu> - 23.0.8-1
changelog:
  - Fix bug where ssh-agent processes were leaked with grid universe jobs
  - Fix DAGMan crash when a provisioner node was given a parent
  - Fix bug that prevented use of "ftp:" URLs in file transfer
  - Fix bug where jobs that matched an offline slot never start


author: Tim Theisen <tim@cs.wisc.edu> - 23.0.10-1
changelog:
  - Preliminary support for Ubuntu 22.04 (Noble Numbat)
  - Warns about deprecated multiple queue statements in a submit file
  - Fix bug where plugins could not signify to retry a file transfer
  - The condor_upgrade_check script checks for proper token file permissions
  - Fix bug where the condor_upgrade_check script crashes on older platforms
  - The bundled version of apptainer was moved to libexec in the tarball


author: Tim Theisen <tim@cs.wisc.edu> - 23.0.12-1
changelog:
  - Remote condor_history queries now work the same as local queries
  - Improve error handling when submitting to a remote scheduler via ssh
  - Fix bug on Windows where condor_procd may crash when suspending a job
  - Fix Python binding crash when submitting a DAG which has empty lines


author: Tim Theisen <tim@cs.wisc.edu> - 23.0.14-1
changelog:
  - Docker and Container jobs run on EPs that match AP's CPU architecture
  - Fixed premature cleanup of credentials by the condor_credd
  - Fixed bug where a malformed SciToken could cause a condor_schedd crash
  - Fixed crash in condor_annex script
  - Fixed daemon crash after IDTOKEN request is approved by the collector


author: Tim Theisen <tim@cs.wisc.edu> - 23.0.15-1
changelog:
  - Fix bug where Docker universe jobs reported zero memory usage on EL9
  - Fix bug where Docker universe images would not be removed from EP cache
  - Fix bug where condor_watch_q could crash
  - Fix bug that could cause the file transfer hold reason to be truncated
  - Fix bug where a Windows job with a bad executable would not go on hold


author: Tim Theisen <tim@cs.wisc.edu> - 23.0.17-1
changelog:
  - Bug fix for PID namespaces and condor_ssh_to_job on EL9
  - Augment condor_upgrade_check to find unit suffixes in ClassAd expressions


author: Tim Theisen <tim@cs.wisc.edu> - 23.0.18-1
changelog:
  - Proper error message and hold when Docker emits multi-line error message
  - The htcondor CLI now works on Windows


author: Tim Theisen <tim@cs.wisc.edu> - 23.0.19-1
changelog:
  - Numerous updates in memory tracking with cgroups
    - Fix bug in reporting peak memory
    - Made cgroup v1 and v2 memory tracking consistent with each other
    - Fix bug where cgroup v1 usage included disk cache pages
    - Fix bug where cgroup v1 jobs killed by OOM were not held
    - Polls cgroups for memory usage more often
    - Can configure to always hold jobs killed by OOM
  - Make condor_adstash work with OpenSearch Python Client v2.x
  - Avoid OAUTH credmon errors by only signaling it when necessary
  - Restore case insensitivity to 'condor_status -subsystem'
  - Fix rare condor_schedd crash when a $$() macro could not be expanded


author: Tim Theisen <tim@cs.wisc.edu> - 23.0.21-1
changelog:
  - Fix memory leak caused by periodic evaluation of bad ClassAd expressions
  - Fixes for bugs affecting grid jobs


author: Tim Theisen <tim@cs.wisc.edu> - 23.0.25-1
changelog:
  - Fix problems where parallel universe jobs could crash the condor_schedd
  - Prevent condor_starter crash when evicting job during input file transfer
  - condor_watch_q now properly displays job id ranges by using numeric sort


author: Tim Theisen <tim@cs.wisc.edu> - 23.0.26-1
changelog:
  - Fix ingestion of ads into Elasticsearch under very rare circumstances
  - DAGMan better handles being unable to write to a full filesystem
  - 'kill_sig' submit commands are now ignored on the Windows platform


author: Dave Dykstra <dwd@cern.ch>> - 2.12.7-2
changelog:
  - Apply %pretrans transaction check to all subpackages that need to
    have their version stay in sync


author: Dave Dykstra <dwd@fnal.gov> - 2.1-1
changelog:
  - Merge LIGO changes to debian packaging
  - Move packaging/debian to debian and packaging/redhat to rpm, to work
    better with OBS and new OSG github packaging standard


author: Dave Dykstra <dwd@fnal.gov> - 2.2-1
changelog:
  - Just change the version number because the OSG github-source for
    reading spec files doesn't work with dash release tags.


author: Dave Dykstra <dwd@fnal.gov> - 2.3-1
changelog:
  - Change the changelog date on version 2.0.3 from Feb 28 2017 to
    May 28 2017 because osg-build complained about non-descending order
    of the dates.
  - Change the rpm/rpmbuild-cvmfs-config-osg development test script 
    to read from rpm instead of packaging/redhat.


author: Dave Dykstra <dwd@fnal.gov> - 2.4-1
changelog:
  - Change the server urls for the config-osg repository to use openhtc.io
    aliases when the proxy url can use DIRECT.


author: Dave Dykstra <dwd@fnal.gov> - 2.4-4
changelog:
  - Skipped release 2.4-2 and 2.4-3 to make consistent with cvmfs-config-egi.
  - Change Conflicts: cvmfs-config-default to Obsoletes: to make it
    easier to replace. Add Conflicts: cvmfs-config-egi because it
    is mutually exclusive.


author: Dave Dykstra <dwd@fnal.gov> - 2.5-1
changelog:
  - Update the configuration for the config repo to apply all the logic
    from the config repo's default.conf and common.conf.  That is, support
    USE_CVMFS_CDN and CVMFS_CLIENT_PROFILE and set default CVMFS_PAC_URLS
    covering the WLCG Web Proxy Auto Discovery.
  - Reverse the order of the fallback proxies because of the bug in 
    https://sft.its.cern.ch/jira/browse/CVM-1920


author: Dave Dykstra <dwd@fnal.gov> - 1.0-1
changelog:
  - Use the same root / $CWD as the target process.  Without this, the
    authz process may utilize the incorrect file for target processes
    that are in a chroot or provide a relative path for the X509 proxy.


author: Dave Dykstra <dwd@fnal.gov> - 2.2-1
changelog:
  - Prevent exiting after the first token authentication
  - Close token file descriptor after use
  - Enable token debug messages
  - Implement WLCG bearer token discovery standard
  - Add libscitokens-dev build dependency on debian


author: Derek Weitzel <dweitzel@unl.edu> - 2.3
changelog:
  - Fix tokens that are bigger than 1024 bytes
  - Fix the use of $BEARER_TOKEN when accessing data
  - Allow for multiple read operations, needed on el9


author: Carl Vuosalo <carl.vuosalo@cern.ch> 5.8-1.1
changelog:
  - Update to squid-5.8 with release notes at
      https://www.squid-cache.org/Versions/v5/squid-5.8-RELEASENOTES.html and announcement at
      http://lists.squid-cache.org/pipermail/squid-announce/2023-February/000145.html
      Most important new features in 5.8:
      - A predefined ACL named "to_linklocal" which matches traffic attempting to access
       link-local network services has been added. It is set to "deny" in
       squid/files/postinstall/squid.conf.proto.
      - Bug fixed where cache manager API erroneously returns "mgr_index" instead of requested
       data.
   - Add support for rpmbuild on el9
   - Add object-*.cloud to the computecanada portion of MAJOR_CVMFS in
      squid/files/postinstall/squid.conf.proto.


author: Carl Vuosalo <carl.vuosalo@cern.ch> 5.8-2.1
changelog:
  - For EL9, in this spec file replace calls to obsolete "service" and add new package
     requirements.


author: Carl Vuosalo <carl.vuosalo@cern.ch> 5.9-1.1
changelog:
  - Update to squid-5.9, with announcement at
      http://lists.squid-cache.org/pipermail/squid-announce/2023-May/000147.html and
      release notes at http://www.squid-cache.org/Versions/v5/squid-5.9-RELEASENOTES.html.
      squid-5.9 contains small fixes including improvement of debug logging related to the
      reply_body_max_size parameter.
   - Consistent with squid5, disallow the combination of multiple workers, ufs cache,
      and memory_cache_shared even if collapsed_forwarding is off.
   - Limit the  maximum number of file descriptors to 65536 even if the OS would allow
      a higher number.


author: Carl Vuosalo <carl.vuosalo@cern.ch> 5.9-1.2
changelog:
  - With the addtion of an EL9 repository, this release includes an EL9 RPM that was
      compiled on EL9 and that fully supports Web Proxy Auto Discovery. The EL7/EL8
      RPM in this release is unchanged from 5.9-1.1, except for version number.


author: Carl Vuosalo <carl.vuosalo@cern.ch> 5.9-2.1
changelog:
  - Apply security patches from Squid 6 to address security concerns since 
      a version of Squid 6 suitable for frontier-squid is not available yet.
   - The following security vulnerabilities have been addressed with patches:
      https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-46724
      https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-46847
      https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-46848
      https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-49285
      https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-50269
      https://github.com/squid-cache/squid/security/advisories/GHSA-j83v-w3p4-5cqh
   - The following two vulnerabilities are addressed by disabling Gopher and TRACE
      requests, respectively, in the squid.conf.proto file:
      https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-46728
      https://megamansec.github.io/Squid-Security-Audit/trace-uaf.html
   - To support SELinux, require /sbin/restorecon and apply it to the log directory,
      in addition to the cache directory.
   - Update to shoal-1.0.2 to fix setting of external_ip.


author: Carl Vuosalo <carl.vuosalo@cern.ch> 5.9-3.1
changelog:
  - Upgrade to 5.9-3 tarball with the following release notes:
    - Add *.eessi.science to MAJOR_CVMFS in squid/files/postinstall/squid.conf.proto.
   - Move frontier-squid.sh from /etc/init.d to /usr/libexec/squid. Remove chkconfig
      because it is no longer needed. Move all steps of preparation of the
      frontier-squid-utils prototype files to this file to simplify future
      maintenance.


author: Carl Vuosalo <carl.vuosalo@cern.ch> 5.9-3.2
changelog:
  - Fix building of RPM to properly choose Python36 or Python39.
       Also, restrict building to x86_64 architecture.


author: Carl Vuosalo <carl.vuosalo@cern.ch> 5.10-1.1
changelog:
  - Update to squid-5.10, with release notes at
      https://github.com/squid-cache/squid/commits/v5.
      The security patches included in frontier-squid-5.9-2 have been incorporated
      into the baseline Squid code in this release.
      It also contains fixes for minor bugs and these security issues:
      https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-25617
      https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23638
      https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-37894
      https://megamansec.github.io/Squid-Security-Audit/esi-underflow.html
      https://megamansec.github.io/Squid-Security-Audit/ftp-fatal.html
      https://megamansec.github.io/Squid-Security-Audit/ipv6-assert.html
      https://megamansec.github.io/Squid-Security-Audit/stream-assert.html
   - For SELinux, provide proper labeling for /usr/libexec/squid/frontier-squid
      script to prevent log rotation failures.


author: Dave Dykstra <dwd@fnal.gov> 4.15-2.1
changelog:
  - Upgrade to 4.15-2 tarball with the following release notes:
   - Fix SQUID_COMPRESS_LOGS=false, which was broken since 4.13-3.  Change
      it to also use the external logrotate command instead of the squid
      builtin log rotation.


author: Edita Kizinevic <edita.kizinevic@cern.ch> 4.17-1.1
changelog:
  - Upgrade to 4.17-1 tarball with the following release notes:
   - Update to squid-4.17.  Includes squid-4.16 with release announcement at
       http://lists.squid-cache.org/pipermail/squid-announce/2021-July/000134.html
      and squid-4.17 with release announcement at
       http://lists.squid-cache.org/pipermail/squid-announce/2021-October/000137.html
      The latter includes a security fix, but it is to code disabled in
      frontier-squid.
  - Avoid including standard system libraries with pyinstaller.


author: Carl Vuosalo <carl.vuosalo@cern.ch> 4.17-2.1
changelog:
  - Upgrade to 4.17-2 tarball with the following release notes:
   - Add sites sampacs*.if.usp.br and cvmfs-*.hpc.swin.edu.au to MAJOR_CVMFS in
       squid/files/postinstall/squid.conf.proto.


author: Carl Vuosalo <carl.vuosalo@cern.ch> 5.7-1.1
changelog:
  - Upgrade to 5.7-1 tarball with the following release notes:
   - Update to squid-5.7 with release notes at https://wiki.squid-cache.org/Squid-5 and
      http://www.squid-cache.org/Versions/v5/RELEASENOTES.html.
      Most important new feature in 5.7:
      - "Happy Eyeballs" feature uses the first destination IP address that responds
         from DNS, whether it is IPv4 (A records) or IPv6 (AAAA records). A consequence
         of this feature is that the dns_v4_first directive is no longer supported.
   - Add sites cvmfs-stratum-one.cc.kek.jp and cvmfs*.sdcc.bnl.gov
      to MAJOR_CVMFS in squid/files/postinstall/squid.conf.proto.
   - Remove obsolete frontier*.racf.bnl.gov from ATLAS_FRONTIER
      in squid/files/postinstall/squid.conf.proto.


author: Carl Vuosalo <carl.vuosalo@cern.ch> 5.7-1.2
changelog:
  - Add pretrans scriplet to this spec file to fix problem with squid-4 to
     squid-5 upgrade where a link becomes a directory.


author: Carl Vuosalo <carl.vuosalo@cern.ch> 5.7-1.3
changelog:
  - Complete the fix from 5.7-1.2. An additional work-around was needed
     for the squid-4 to squid-5 upgrade to change a directory that was generating
     yum transaction errors into a link, which silenced the errors.


author: Marco Mambelli <marcom@fnal.gov> - 3.10.1
changelog:
  - Glideinwms v3.10.1
  - Release Notes: http://glideinwms.fnal.gov/doc.v3_10_1/history.html
  - Release candidates 3.10.1-01.rc1


author: Marco Mambelli <marcom@fnal.gov> - 3.10.2
changelog:
  - Glideinwms v3.10.2
  - Release Notes: http://glideinwms.fnal.gov/doc.v3_10_2/history.html
  - Release candidates 3.10.2-01.rc1 to 3.10.2-02.rc2


author: Marco Mambelli <marcom@fnal.gov> - 3.10.3
changelog:
  - Glideinwms v3.10.3
  - Release Notes: http://glideinwms.fnal.gov/doc.v3_10_3/history.html
  - Release candidates 3.10.3-01.rc1 to 3.10.3-02.rc2


author: Marco Mambelli <marcom@fnal.gov> - 3.10.6
changelog:
  - Glideinwms v3.10.6
  - Release Notes: http://glideinwms.fnal.gov/doc.v3_10_6/history.html
  - Release candidates 3.10.6-01.rc1 to 3.10.6-02.rc2


author: Marco Mambelli <marcom@fnal.gov> - 3.10.7-3
changelog:
  - Glideinwms v3.10.7
  - 3.10.7-1 was on Fri Jun 21 2024
  - Removed bash mangling in 3.10.7-3
  - Release Notes: http://glideinwms.fnal.gov/doc.v3_10_7/history.html
  - Release candidates 3.10.7-01.rc1 to 3.10.7-03.rc3


author: Marco Mambelli <marcom@fnal.gov> - 3.10.8
changelog:
  - Glideinwms v3.10.8
  - Release Notes: http://glideinwms.fnal.gov/doc.v3_10_8/history.html
  - Release candidates 3.10.8-01.rc1


author: Marco Mambelli <marcom@fnal.gov> - 3.10.9
changelog:
  - Glideinwms v3.10.9
  - Release Notes: http://glideinwms.fnal.gov/doc.v3_10_9/history.html
  - Release candidates 3.10.9-01.rc1 to 3.10.9-03.rc3


author: Marco Mambelli <marcom@fnal.gov> - 3.10.10
changelog:
  - Glideinwms v3.10.10
  - Release Notes: http://glideinwms.fnal.gov/doc.v3_10_10/history.html
  - Release candidates 3.10.10-01.rc1


author: Marco Mambelli <marcom@fnal.gov> - 3.10.11
changelog:
  - Glideinwms v3.10.11
  - Release Notes: http://glideinwms.fnal.gov/doc.v3_10_11/history.html
  - Release candidates 3.10.11-01.rc1 to 3.10.11-02.rc2


author: Marco Mambelli <marcom@fnal.gov> - 3.10.12
changelog:
  - Glideinwms v3.10.12
  - Release Notes: http://glideinwms.fnal.gov/doc.v3_10_12/history.html
  - Release candidates 3.10.12-01.rc1


author: Marco Mambelli <marcom@fnal.gov> - 3.10.13
changelog:
  - Glideinwms v3.10.13
  - Release Notes: http://glideinwms.fnal.gov/doc.v3_10_13/history.html
  - Release candidates 3.10.13-01.rc1


author: Bruno Coimbra <coimbra@fnal.gov> - 3.9.4
changelog:
  - Glideinwms v3.9.4
  - Release Notes: http://glideinwms.fnal.gov/doc.v3_9_4/history.html
  - Release candidates 3.9.4-01.rc1 to 3.9.4-01.rc5


author: Bruno Coimbra <coimbra@fnal.gov> - 3.9.5
changelog:
  - Glideinwms v3.9.5
  - Release Notes: http://glideinwms.fnal.gov/doc.v3_9_5/history.html
  - Release candidates 3.9.5-01.rc1 to 3.9.5-03.rc3


author: Marco Mambelli <marcom@fnal.gov> - 3.9.6
changelog:
  - Glideinwms v3.9.6
  - Release Notes: http://glideinwms.fnal.gov/doc.v3_9_6/history.html
  - Release candidates 3.9.6-01.rc1 to 3.9.6-06.rc6


author: Marco Mambelli <marcom@fnal.gov> - 3.10.0
changelog:
  - Glideinwms v3.10.0
  - Release Notes: http://glideinwms.fnal.gov/doc.v3_10_0/history.html
  - Release candidates 3.10.0-01.rc1


author: Marco Mambelli <marcom@fnal.gov> - 3.10.7-2
changelog:
  - Glideinwms v3.10.7
  - Release Notes: http://glideinwms.fnal.gov/doc.v3_10_7/history.html
  - Release candidates 3.10.7-01.rc1 to 3.10.7-03.rc3


author: Marco Mambelli <marcom@fnal.gov> - 3.10.8
changelog:
  - Glideinwms v3.10.8
  - Release Notes: http://glideinwms.fnal.gov/doc.v3_10_8/history.html
  - Release candidates 3.10.7-01.rc1


author: Carl Edquist <edquist@cs.wisc.edu> - 2.6.3-1
changelog:
  - Restore ProbeConfig symlinks, and other dcache-transfer fixes (SOFTWARE-5241)
  - Replace default_prefix with _datadir; drop relocatable Prefixes


author: Carl Edquist <edquist@cs.wisc.edu> - 2.7.0-1
changelog:
  - Prefer CpusProvisioned over RequestCpus if set (SOFTWARE-5246)
  - Prefer MachineAttrGLIDEIN_ResourceName0 for ResourceName calculation;
  - Include GLIDEIN_ResourceName in SYSTEM_JOB_MACHINE_ATTRS (SOFTWARE-5249)


author: Brian Lin <blin@cs.wisc.edu.> - 2.8.4-1
changelog:
  - HTCondor AP and CE probes now drop privileges to the 'condor' user
    if run as 'root' (SOFTWARE-5531)
  - Improve logging and failure modes when encountering unwriteable
    directories (SOFTWARE-5531)


author: Matt Westphall <westphall@wisc.edu.> - 2.8.5-1
changelog:
  - Log gratia probe failures to aid debugging (SOFTWARE-6037)
  - Fix NameError in post-install script (SOFTWARE-5558)


author: Mátyás Selmeci <matyas@cs.wisc.edu> - 0.8-1
changelog:
  - Download osg-ca-manage from GitHub instead of using a tarball client for fetching CAs (SOFTWARE-4242)


author: Mátyás Selmeci <matyas@cs.wisc.edu> - 0.11-1
changelog:
  - Generalize cvmfsexec-osg-wrapper (SOFTWARE-4722)
  - Have make-cvmfsexec-tarball generate a multiplatform tarball


author: Carl Edquist <edquist@cs.wisc.edu> - 1.0-1
changelog:
  - Release hosted-ce-tools 1.0 (SOFTWARE-5130)
  - Convert scripts to python3 (SOFTWARE-5131)
  - Timeout rsync in update-remote-wn-client (SOFTWARE-4670)
  - Dereference hardlinks when extracting tarball (SOFTWARE-5254)


author: Mark Coatsworth <coatsworth@cs.wisc.edu> - 5.1.0-1
changelog:
  - Fix an issue where the CE removed running jobs prematurely (HTCONDOR-350)
  - Add optional job router transform syntax (HTCONDOR-243)
  - Add username and X.509 accounting group mapfiles for use by job router transforms (HTCONDOR-187)
  - Replace custom mappings in condor_mapfile with /etc/condor-ce/mapfiles.d/ (HTCONDOR-244)
  - Require regular expressions in the second field of the unified mapfile be enclosed by '/'(HTCONDOR-244)
  - Update maxWallTime logic to accept BatchRuntime (HTCONDOR-80)
  - Append SSL to the default authentication methods list (HTCONDOR-366)
  - APEL reporting scripts now use the local HTCondor's PER_JOB_HISTORY_DIR to collect job data. (HTCONDOR-293)
  - Use the `GlobalJobID` attribute as the APEL record `lrmsID` (#426)
  - Update HTCondor-CE registry app to Python 3 (HTCONDOR-307)
  - Enable SSL authentication by default for `READ`/`WRITE` authorization levels (HTCONDOR-366)
  - Downgrade errors in the configuration verification startup script to support routes written in the transform syntax (#465)
  - Allow required directories to be owned by non-`condor` groups (#451)
  - Fix an issue with an overly aggressive default `SYSTEM_PERIODIC_REMOVE` (HTCONDOR-350)
  - Fix incorrect path to Python 3 Collector plugin (HTCONDOR-400)
  - Fix faulty validation of `JOB_ROUTER_ROUTE_NAMES` and `JOB_ROUTER_ENTRIES` in the startup script (HTCONDOR-406)
  - Fix various Python 3 incompatibilities (#460)


author: Brian Lin <blin@cs.wisc.edu> - 5.1.1-1
changelog:
  - Improve restart time of HTCondor-CE View (HTCONDOR-420)
  - Fix bug that caused HTCondor-CE to ignore incoming BatchRuntime requests (#480)
  - Fix blahp packaging requirement (HTCONDOR-504)


author: Tim Theisen <tim@cs.wisc.edu> - 5.1.2-1
changelog:
  - Fixed the default memory and CPU requests when using job router transforms
  - Apply default MaxJobs and MaxJobsIdle when using job router transforms
  - Improved SciTokens support in submission tools
  - Fixed --debug flag in condor_ce_run
  - Update configuration verification script to handle job router transforms
  - Corrected ownership of the HTCondor PER_JOBS_HISTORY_DIR
  - Fix bug passing maximum wall time requests to the local batch system


author: Tim Theisen <tim@cs.wisc.edu> - 5.1.3-1
changelog:
  - The HTCondor-CE central collector requires SSL credentials from client CEs
  - Fix BDII crash if an HTCondor Access Point is not available
  - Fix formatting of APEL records that contain huge values
  - HTCondor-CE client mapfiles are not installed on the central collector


author: Tim Theisen <tim@cs.wisc.edu> - 5.1.4-1
changelog:
  - Fix whole node job glidein CPUs and GPUs expressions that caused held jobs
  - Fix bug where default CERequirements were being ignored
  - Pass whole node request from GlideinWMS to the batch system
  - Since CentOS 8 has reached end of life, we build and test on Rocky Linux 8


author: Tim Theisen <tim@cs.wisc.edu> - 5.1.5-1
changelog:
  - Rename AuthToken attributes in the routed job to better support accounting
  - Prevent GSI environment from pointing the job to the wrong certificates
  - Fix issue where HTCondor-CE would need port 9618 open to start up


author: Tim Theisen <tim@cs.wisc.edu> - 5.1.6-1
changelog:
  - HTCondor-CE now uses the C++ Collector plugin for payload job traceability
  - Fix HTCondor-CE mapfiles to be compliant with PCRE2 and HTCondor 9.10.0+
  - Add support for multiple APEL accounting scaling factors
  - Suppress spurious log message about a missing negotiator
  - Fix crash in HTCondor-CE View


author: Tim Theisen <tim@cs.wisc.edu> - 6.0.0-1
changelog:
  - Align HTCondor-CE security configuration with HTCondor defaults
  - Add example configuration on how to ban users
  - Add condor_ce_transform_ads command
  - Improve essential directory checking and creation at startup


author: Tim Theisen <tim@cs.wisc.edu> - 6.0.1-1
changelog:
  - Add grid CA and host certificate/key locations to default SSL search paths
  - Verifies that HTCondor-CE can access the local HTCondor's SPOOL directory
  - Can use condor_ce_trace without SciToken to test batch system integration
  - condor_ce_upgrade_check checks compatibility with next HTCondor version
  - Adds deprecation warnings for old job router configuration syntax


author: Tim Theisen <tim@cs.wisc.edu> - 23.0.6-1
changelog:
  - Fix CE job route transform for job environment
  - Fix CERequirements when the default_CERequirements is not set
  - Add condor_ce_test_token tool to generate short lived SciToken for tests
  - Remove GSI from security method list to eliminate annoying warnings


author: Tim Theisen <tim@cs.wisc.edu> - 23.0.18-1
changelog:
  - Does not pass WholeNode request expressions to non-HTCondor batch systems
  - Fix certificate subject parsing in condor_ce_host_network_check


author: Dave Dykstra <dwd@fnal.gov> 1.13-1
changelog:
  - Disable kerberos reverse DNS lookup in order to work when the vault
    server is using a DNS alias.
  - Intelligently handle multiple IP addresses in a DNS name, timing out
    connection attempts after 5 seconds and not reusing addresses that
    failed to connect.  Tries IPv4 before IPv6.
  - Update python dependencies to current versions in pip.


author: Dave Dykstra <dwd@fnal.gov> 1.13-2
changelog:
  - Suppress python warnings in order to avoid CryptographyDeprecationWarning
    about python3.6 being deprecated.


author: Dave Dykstra <dwd@fnal.gov> 1.14-1
changelog:
  - Support wildcard host certs for all https connections.  They used to be
    supported for everything but the --vaultalias option but that support 
    was broken in version 1.13.


author: Dave Dykstra <dwd@fnal.gov> 1.15-1
changelog:
  - Revert to prior method for allowing --vaultalias as an alternate name
    for matching the host cert.  It doesn't support wildcard certs, but it
    permits allowing either the original host name or the alias and avoids
    needing separate alias options for kerberos and https.


author: Dave Dykstra <dwd@fnal.gov> 1.16-1
changelog:
  - Fix httokendecode -H functionality to only attempt to convert a parsed word
    if it is entirely numeric, not if it just contains one digit.  At the same
    time, rewrite the functionality in native bash instead of using grep and sed.
  - Add htdestroytoken command.
  - Add a symlink htdecodetoken pointing to httokendecode.


author: Dave Dykstra <dwd@fnal.gov> 1.17-1
changelog:
  - Fix the usage of getaddrinfo, which caused a fatal error on python3.9
    on Mac.
  - Make --showbearerurl work properly in combination with --nobearertoken.
  - Change the httokendecode error message for a missing token file to
    stderr instead of stdin.


author: Dave Dykstra <dwd@fnal.gov> 1.18-1
changelog:
  - Fix crash introduced in 1.17 when using --nobearertoken while the
    credkey is not known.
  - Make source rpm buildable on el9.


author: Dave Dykstra <dwd@fnal.gov> 1.20-1
changelog:
  - Update httokensh to by default set the minimum vault token time to live to
    6 days, and to make sure that the background refresh never gets a new vault
    token.
  - Changed the preferred name of httokendecode to htdecodetoken, keeping
    links in the opposite direction.
  - Add man pages for httokensh, htdestroytoken, and htdecodetoken.


author: Dave Dykstra <dwd@fnal.gov> 2.0-1
changelog:
  - Replace use of m2crypto and pyOpenSSL with urllib3
  - Replace use of pykerberos with gssapi
  - Use standard Requires for Python modules instead of PyInstaller
  - Add --vaultcertname option to specify an alternative certificate name.
    That used to be an additional optional meaning of the --vaultalias option,
    but urllib3 requires only one name to match.
  - Add setuptools build infrastructure
  - Refactor htgettoken script into module with entry point.
    This enables invoking htgettoken as `htgettoken.main()` from Python.
  - Use wheels to build/install Python package, which simplified the entry
    points and improves (slightly) the metadata
  - Fix the httokensh background process's check for its parent process.
    That is only a backup in case only the parent process is hard-killed,
    because normally the parent process kills the background process when
    the parent exits.
  - Use newer `sts` secrets API for token exchanges.
  - Fix the `-o`/`--outfile` option to work with relative paths. 
  - Change the `--nobearertoken` option to always get and save a vault token.


author: Dave Dykstra <dwd@fnal.gov> 2.0-2
changelog:
  - Fix broken httokendecode symlink.
  - Use python wheels to build/install on el9.  It didn't work on el8 so
    the use of wheels was removed at the last minute before the 2.0-1
    release (without removing it from the changelog like it should have).


author: Dave Dykstra <dwd@fnal.gov> 2.1-1
changelog:
  - Fix htdecodetoken to work with token files that do not end in a newline.
  - Support args in htgettoken.main() Python entry point.


author: Dave Dykstra <dwd@fnal.gov> 2.2-1
changelog:
  - Add BuildRequires python3-devel to generate correct Python metadata.
  - Remove explicit Requires for python dependencies, rely on Python metadata.
  - Always build with wheels.
  - Remove Python root logger configuration.


author: Dave Dykstra <dwd@fnal.gov> 1.7-1
changelog:
  - Require at least vault version 1.8.4
  - Remove support for coarse-grained kerberos; requires htgettoken >= 1.3
  - Use /etc/krb5-<name>.keytab if it exists even for the first defined
    kerberos service, in preference to /etc/krb5.keytab.
  - Update to vault-plugin-secrets-oauthapp 3.0.0
  - Update to vault-plugin-auth-jwt 0.11.1


author: Dave Dykstra <dwd@fnal.gov> 1.8-1
changelog:
  - Restore part of the setup of kerberos; too much was taken out in 1.7
  - When an issuer is deleted, clean out the policies and kerberos modules
    related to its roles
  - Make policy names more consistent with module names


author: Dave Dykstra <dwd@fnal.gov> 1.10-1
changelog:
  - Fix problem that /etc/krb5-<name>.keytab was preferred for first service
    only when the kerbservice was explicitly defined for an issuer.  Now it
    also works for default first kerberos service.


author: Dave Dykstra <dwd@fnal.gov> 1.12-1
changelog:
  - Require vault-1.10.0 and update vault-plugin-auth-jwt to version 0.12.1
    and vault-plugin-auth-ssh to version 0.1.1.


author: Dave Dykstra <dwd@fnal.gov> 1.13-1
changelog:
  - Remove support for old-style per issuer/role secret plugins.  Requires
    htgettoken >= 1.7.
  - Add ability to delete a previously defined configuration by using
    a keyword "delete:" under the configuration name and setting it to
    any value.
  - Update vault-plugin-auth-jwt to the latest commit (because the patches
    had been rebased on it).


author: Dave Dykstra <dwd@fnal.gov> 1.14-1
changelog:
  - Add auditlog configuration option.  As part of that, disable the
    vault systemd ProtectFull and ProtectHome options.
  - Require vault >= 1.12.1.
  - Update the vault-plugin-auth-jwt to the latest upstream commit.
  - Include gox in the source tarball.


author: Dave Dykstra <dwd@fnal.gov> 1.15-1
changelog:
  - Update vault-plugin-secrets-oauthapp to 3.1.1 which adds support for token
    exchange at a /sts path instead of /creds.  Keep applying the PR patch
    that also adds it under /creds for a transition period until htgettoken
    is updated everywhere to use the new path.
  - Update vault-plugin-auth-jwt to 0.15.2.
  - Update vault-plugin-auth-ssh to 0.3.0.
  - Require vault >= 1.13.
  - Require diffutils.
  - Fix bug where the kerberos policydomain option was ignored.


author: Dave Dykstra <dwd@fnal.gov> 1.16-1
changelog:
  - Add 'ratelimits' keyword to put a limit on the number of requests per
    client per interval.
  - Allow '@' to be included in the ssh plugin's keys.
  - Fix bug that prevented reconfiguration when a policy name changed.
  - Update vault-plugin-auth-jwt to 0.18.0.
  - Update vault-plugin-auth-ssh to 0.3.1.
  - Require vault to be >= 1.15.


author: Dave Dykstra <dwd@fnal.gov> 1.17-1
changelog:
  - Add a patch of PR #90 to vault-plugin-secrets-oauthapp which adds caching
    of tokens exchanged via the /sts path and adds a minimum_seconds option to
    the API.
  - Give vault tokens the capabilities of deleting secrets and revoking
    themselves.
  - Update required vault to 1.17.
  - Update vault-plugin-auth-jwt to 0.21.0.
  - Update vault-plugin-auth-ssh to 0.3.2 which includes the patch for '@' 
    that was previously applied.


author: Dave Dykstra <dwd@fnal.gov> 1.18-1
changelog:
  - Restore patch #41 on vault-plugin-secrets-oauthapp which was accidentally
    dropped.
  - Update to latest commit on vault-plugin-auth-jwt because one of the
    other patches now depends on it in order to apply cleanly.


author: Dave Dykstra <dwd@fnal.gov> 1.19-1
changelog:
  - Replace vault with openbao-2.2.0 and remove vault-plugin-secrets-jwt
    (since the builtin version works with openbao).
  - Replace vault-plugin-secrets-oauthapp with openbao-plugin-secrets-oauthapp
    3.2.0 but still install it as vault-plugins-secrets-oauthapp for upgrade
    compatibility.
  - Update vault-plugin-auth-ssh to 0.3.4.


author: Dave Dykstra <dwd@fnal.gov> 2.0.0-1
changelog:
  - Remove the external auth/oidc plugin registration to switch to the
    builtin plugin.
  - Change to semantic versioning starting at 2.0.0.  Compared to 1.18,
    the removal of the external vault-plugin-secrets-jwt plugin causes
    some incompatibility and requires a careful upgrade path in HA
    installations (that is, upgrade all vault/openbao first).


author: Edgar Fajardo <efajardo@cern.ch> 1.1.0-1
changelog:
  Updated to the 1.1.0 release. It could not be a pass through build since the dist was missing in the Release entry in the spec file


author: Dave Dykstra <dwd@fnal.gov> 1.11.1-1
changelog:
  - Update to upstream 1.11.1, which includes a fix to avoid denial of
    service on HA installation.
  - Remove $GOPATH/mod/*.* from the source tarball, leaving just
    $GOPATH/mod/cache/download.  That saves about 300M while still
    allowing offline builds.


author: Dave Dykstra <dwd@fnal.gov> 1.17.2-1
changelog:
  - Update to upstream 1.17.2
  - Add a temporary wrapper script on the vault command to avoid an irrelevant
    warning issued by the gosnowflake dependency when DBUS_SESSION_BUS_ADDRESS
    is not set


author: Dave Dykstra <dwd@fnal.gov> 1.17.2-2
changelog:
  - Stop including go in the source tarball, instead assume the build pulls
    in a new enough version of golang.


author: Dave Dykstra <dwd@fnal.gov> 2.2.0-2
changelog:
  - Update to use official build instructions, including showing the correct
    version number in the `bao status` command and not using the testonly
    build tag unless the go_debug macro is enabled.


author: Mátyás Selmeci <matyas@cs.wisc.edu> - 1.4-1
changelog:
  - Remove osg-release requirement; ignore missing compat packages; only try to
    update packages that are installed (SOFTWARE-2146)


author: Mátyás Selmeci <matyas@cs.wisc.edu> - 1.6-1
changelog:
  - Replace references to OSG Twiki with links to current docs (SOFTWARE-3083)
  - Replace help email (SOFTWARE-3015)


author: Brian Lin <blin@cs.wisc.edu> 1.1.6-1
changelog:
  - Change software.grid.iu.edu to repo.grid.iu.edu in osg-ca-scripts (SOFTWARE-2666)
  - Remove unsupported compat links for old OpenSSL hashes
  - Added `ITB` options back to help text


author: Brian Lin <blin@cs.wisc.edu> - 3.6-1
changelog:
  - Remove stale provides/obsoletes (SOFTWARE-4469)
  - Use gratia-probe-htcondor-ce across all batch systems (SOFTWARE-3819, SOFTWARE-4469)
  - Drop LCMAPS requirements (SOFTWARE-4469)
  - Remove Gratia-specific configurations (SOFTWARE-4490)


author: Brian Lin <blin@cs.wisc.edu> - 3.6-5
changelog:
  - Add OSG release series SchedD attribute (SOFTWARE-4984)
  - Remove upstreamed blahpd location configuration (SOFTWARE-4984)


author: Mátyás Selmeci <matyas@cs.wisc.edu> 3.1.1-1
changelog:
  - Relax hostname validation in 40-siteinfo.ini (failing to resolve is now a warning) (SOFTWARE-3953)
  - No longer make resource_group mandatory for CEs in 40-siteinfo.ini (SOFTWARE-3949)


author: Mátyás Selmeci <matyas@cs.wisc.edu> 3.11.0-1
changelog:
  - Add Pilot entries (SOFTWARE-4177)
  - Don't try to resolve Squid on the CE (SOFTWARE-4362)
  - Ignore all fetch-crl errors, but warn if no CRLs exist (SOFTWARE-4364)


author: Mátyás Selmeci <matyas@cs.wisc.edu> 4.0.0-1
changelog:
  - Drop lcmaps-db-templates dependency (SOFTWARE-4503)
  - Turn osg-configure-misc into a dummy package (SOFTWARE-4507)
  - Rename 30-gip.ini to 31-cluster.ini and osg-configure-gip to osg-configure-cluster (SOFTWARE-4485)
  - Deprecate RSV  (SOFTWARE-4511)


author: Mátyás Selmeci <matyas@cs.wisc.edu> 4.1.0-0.15
changelog:
  - Depend on /usr/bin/condor_remote_cluster instead of condor-bosco (SOFTWARE-4973)
  - Split libs into separate RPM
  - Add osg-ce-attributes-generator (SOFTWARE-4895)
  - Don't require base osg-configure package in osg-configure-siteinfo and osg-configure-cluster
    because they can also be used by osg-ce-attributes-generator
  - Advertise batch system used by bosco (SOFTWARE-3720)


author: Mátyás Selmeci <matyas@cs.wisc.edu> 4.2.0-1
changelog:
  - Turn osg-configure-rsv into a dummy package (SOFTWARE-4511)
  - Add "queue" to OSG_ResourceCatalog for Pilot sections (SOFTWARE-5881)


author: Mats Rynge <rynge@isi.edu> 1.7-1
changelog:
  - Moved to the new ospool.osg-htc.org central managers in high
    availability setup
  - Removed pre-9.0 HTCondor config - this is no longer
    supported by the OSPool (IDTOKENS only)
  - Change the VO override to the lowercase "osg" (SOFTWARE-4905)


author: Carl Edquist <edquist@cs.wisc.edu> - 1.8-1
changelog:
  - Include the package version in the schedd classad (SOFTWARE-5105)
  - Disable .sif images on 3.x kernels (OSPOOL-18)
  - Improve OS_VERSION handling
  - Drop Map* ProbeConfig overrides (SOFTWARE-5042)


author: Dave Dykstra <dwd@fnal.gov> - 3.3.0
changelog:
  - Bump to new middle version number because of the new -O/--orgid option.
  - Slightly reorganize the man page documentation of the new option.


author: Brian Lin <blin@cs.wisc.edu> - 3.6.0
changelog:
  - Add configuration file for osg-incommon-cert-request (SOFTWARE-5668)
  - Update default CSR key length to 4096, add CLI option (SOFTWARE-5651)


author: Brian Lin <blin@cs.wisc.edu> - 3.6.1
changelog:
  - Fix bug with default CA config file option (SOFTWARE-5668)
  - Update default InCommon IGTF CA IDs to point to CA 3


author: Dave Dykstra <dwd@fnal.gov> - 3.7.0
changelog:
  - Convert osg-incommon-cert-request to use urllib3 instead of M2crypto 
    for its https connection, to make it work properly on EL9.


author: Dave Dykstra <dwd@fnal.gov> - 3.7.0
changelog:
  - Convert osg-incommon-cert-request to use urllib3 instead of M2crypto
    for its https connection, to make it work properly on EL9.


author: Dave Dykstra <dwd@fnal.gov> - 3.7.2
changelog:
  - Fix bug in invocation of urllib3.request() in restclient's get_request();
    it was passing headers as the 4th parameter instead of identifying it
    by name.  Broke retrieval of cert with osg-incommon-cert-request in
    some cases.


author: Mátyás Selmeci <matyas@cs.wisc.edu> - 3.6-9
changelog:
  - Replace RPM-GPG-KEY-OSG-3 with something that's accepted by rpm on both EL7 and EL9 (SOFTWARE-5408)


author: Mátyás Selmeci <matyas@cs.wisc.edu> - 23-6
changelog:
  - Use osg-htc.org (SOFTWARE-5986)
  - Use "distrepo" repos for minefield (SOFTWARE-5986)
  - Drop osg-next repo files (SOFTWARE-5986)


author: Matyas Selmeci <matyas@cs.wisc.edu> 1.3.0-1
changelog:
  - Add SELinux audit logs to osg-system-profiler and URL support to
    osg-system-profiler-viewer (SOFTWARE-2275)


author: Carl Edquist <edquist@cs.wisc.edu> - 1.4.0-1
changelog:
  - Include dump of tomcat server config (SOFTWARE-1099)
  - Create osg-profile.txt in temp dir, do not include old profiles in
    directory dumps (SOFTWARE-1773)


author: Mátyás Selmeci <matyas@cs.wisc.edu> - 1.4.1-1
changelog:
  - Drop osg-version check (SOFTWARE-2916)
  - Update instructions for getting help (SOFTWARE-2908)
  - Don't include logs for deprecated software (SOFTWARE-2905)


author: Mátyás Selmeci <matyas@cs.wisc.edu> - 1.4.3-1
changelog:
  - Drop unused files:
      - httpcert.pem
      - tomcat config
      - edg-mkgridmap.log
      - bestman2 logs


author: Mátyás Selmeci <matyas@cs.wisc.edu> - 1.6.0-1
changelog:
  - Query multiple python executables, not just `which python` (which may not exist on EL8) (SOFTWARE-4146)


author: Mátyás Selmeci <matyas@cs.wisc.edu> - 1.7.0-1
changelog:
  - Convert osg-system-profiler-viewer to Python 3
  - Add XRootD cconfig dumps (SOFTWARE-4933)
  - Print crypto policy if available (SOFTWARE-5330)
  - Fix email address in help message


author: Brian Lin <blin@cs.wisc.edu> - 0.8.1-1
changelog:
  - Add the --pw-store option to the invocation of oidc-add and add a default
    scope of blank if no scopes are configured.  These are needed for the
    CILogon issuer (SOFTWARE-4983).


author: Carl Edquist <edquist@cs.wisc.edu> - 0.8.2-1
changelog:
  - Increase renewal frequency to ensure continual validity (SOFTWARE-5137)
  - Fix password file handling for restricted permissions in setup script (#17)
  - Use newer --pw-file option for oidc-add (SOFTWARE-5050)
  - Bump version requirement for oidc-agent package (SOFTWARE-5050)


author: Mátyás Selmeci <matyas@cs.wisc.edu> - 1.1-1
changelog:
  - Use --location argument to specify destination; use /etc or $OSG_LOCATION/etc if not specified (SOFTWARE-2527)


author: Mátyás Selmeci <matyas@cs.wisc.edu> - 1.3.0-1
changelog:
  - Add osg-release requirement
  - Allow taking osg repo definition from osg-release installed in a tarball client (SOFTWARE-2527)


author: Mátyás Selmeci <matyas@cs.wisc.edu> 3.6-12
changelog:
  - Set grid-mapfile location (http.gridmap and -gridmap in sec.protocol gsi)
    to the standard location (SOFTWARE-4937)


author: Diego Davila <didavila@ucsd.edu> 3.6-14
changelog:
  - Configure Xrootd to send caching monitoring data (SOFTWARE-5026)
  - Make the ShovelerHostPort variable to use as the monitoring collector if there is a shoveler


author: Mátyás Selmeci <matyas@cs.wisc.edu> - 23-5
changelog:
  - Log DNs of incoming certificates (SOFTWARE-5370); raise required XRootD version to 1:5.6.0 for the feature


author: Mátyás Selmeci <matyas@cs.wisc.edu> - 5.0.1-1.1
changelog:
  - Build for OSG; add setuptools_scm build dependency (SOFTWARE-4877)
    Ignore byte-compile errors: they fail on Python 2 code in the examples


author: Mátyás Selmeci <matyas@cs.wisc.edu> - 5.5.1-1.13
changelog:
  - Replace SOFTWARE-5418.redirector-hostnames.patch with an updated 1868-env-hostname-override.patch (SOFTWARE-5414/SOFTWARE-5418)


author: Mátyás Selmeci <matyas@cs.wisc.edu> - 5.5.3-1.2
changelog:
  - Update to 5.5.3-1 from upstream and merge OSG patches (SOFTWARE-5436):
    - Drop 1826-HTTP-TPC-PULL.patch (upstreamed)
    - Drop voms-mapfile-handle-missing-role.patch (upstreamed)
  - Add 1918-Fix-direct-read-for-PFC.patch
  - Add 1920-XrdHttp-Fix-byte-range-requests.patch
  - Disable compat build on EL9


author: Mátyás Selmeci <matyas@cs.wisc.edu> - 5.5.4-1.1
changelog:
  - Update to 5.5.4-1 from upstream and merge OSG changes (SOFTWARE-5539)
    - Drop 1918-Fix-direct-read-for-PFC.patch (upstreamed)
    - Drop 1920-XrdHttp-Fix-byte-range-requests.patch (upstreamed)


author: Mátyás Selmeci <matyas@cs.wisc.edu> - 5.5.5-1.2
changelog:
  - Add 2026-Switch-to-a-fixed-set-of-DH-parameters-compatible-with-older-OpenSSL.patch (SOFTWARE-5594)
    for compatibility between EL7 clients and EL9 servers
  - Drop debugging patches


author: Mátyás Selmeci <matyas@cs.wisc.edu> - 5.6.1-1.1
changelog:
  - Update to 5.6.1-1 from upstream and merge OSG changes (SOFTWARE-5623)
    - Drop 2026-Switch-to-a-fixed-set-of-DH-parameters-compatible-with-older-OpenSSL.patch (upstreamed)


author: Matt Westphall <westphall@wisc.edu> - 5.6.1-1.2
changelog:
  - Add patch for PR 2059: Add back parsing of Transfer-Encoding header (SOFTWARE-5623)
  - Add patch for PR 2064: Fix logic error in user mapping (SOFTWARE-5623)


author: Mátyás Selmeci <matyas@cs.wisc.edu> - 5.6.9-1.4
changelog:
  - Add SOFTWARE-5870-only-if-cached.patch (SOFTWARE-5870)
  - Add 2262-fix-timing-on-throttle-plugin.patch (SOFTWARE-5873, SOFTWARE-5875)
  - Add 2269-defer-or-disable-tls-client-auth.patch (SOFTWARE-5876)


author: Mátyás Selmeci <matyas@cs.wisc.edu> - 5.6.9-1.6
changelog:
  - Split 2269-defer-or-disable-tls-client-auth.patch into 3 patches
    and re-do its conflict resolution (SOFTWARE-5876)


author: Mátyás Selmeci <matyas@cs.wisc.edu> - 5.7.0-1.1
changelog:
  - Update to 5.7.0 and merge OSG patches (SOFTWARE-5925)
      - Drop SOFTWARE-5800-pelican-url.patch (applied upstream)
      - Drop 2206-io-time-gstream-monitoring.patch (applied upstream)
      - Drop SOFTWARE-5870-only-if-cached.patch (applied upstream)
      - Drop 2262-fix-timing-on-throttle-plugin.patch (applied upstream)
      - Drop 2269-defer-or-disable-tls-client-auth-*.patch (applied upstream)


author: Mátyás Selmeci <matyas@cs.wisc.edu> - 5.7.0-1.5
changelog:
  - Bump to rebuild for aarch64
  - Don't make the generated documentation (i.e., xrootd-doc subpackage) noarch
    because the generation results are different based on the arch of the builder.


author: Mátyás Selmeci <matyas@cs.wisc.edu> - 5.7.0-1.7
changelog:
  - Add bbockelm-3-oss-statistics.patch (SOFTWARE-5967)
  - Add bbockelm-4-defer-client-auth (as 3 patches) (SOFTWARE-5968);
      this adds libXrdOssStats-5.so to xrootd-server-libs


author: Matt Westphall <westphall@wisc.edu> - 5.7.1-1.3
changelog:
  * Thu Oct 03 2024 Mátyás Selmeci <matyas@cs.wisc.edu> - 5.7.1-1.2
  - Update 2300-stat-call-reduction.patch (SOFTWARE-6003)
  - Add 2348-cache-age-logic.patch (SOFTWARE-6003)


author: Mátyás Selmeci <matyas@cs.wisc.edu> - 5.7.1-1.2
changelog:
  - Update 2300-stat-call-reduction.patch (SOFTWARE-6003)
  - Add 2348-cache-age-logic.patch (SOFTWARE-6003)


author: Mátyás Selmeci <matyas@cs.wisc.edu> - 5.7.2-1.1
changelog:
  - Update to 5.7.2 and drop upstreamed patches (SOFTWARE-6036)
    - Drop 2300-stat-call-reduction.patch
    - Update 2348-cache-age-logic.patch
      (replace with https://github.com/bbockelm/xrootd/commit/2160a23febe1782cc3590a473209f0e74f965084)
    - Drop 2357-fix-errSocketTimeout-loop.patch
    - Drop 2363-reset-runstatus-in-redrive-thread.patch


author: Mátyás Selmeci <mselmeci@wisc.edu> - 5.7.2-1.3
changelog:
  - Use patches from PelicanPlatform/xrootd (SOFTWARE-6063)
      - Replace 1868-env-hostname-override.patch with 0001-Allow-hostname-used-by-XRootD-to-be-overridden-by-en.patch (PelicanPlatform/xrootd #1)
      - Replace 2348-cache-age-logic.patch with 0002-XrdHttp-determines-the-presence-of-the-Age-header-in.patch (PelicanPlatform/xrootd #2)
      - Replace 2395-cinfo-read-fd-leak.patch with 0003-Fix-FD-leak-when-reading-file-size-from-cinfo-file-i.patch (PelicanPlatform/xrootd #3)
      - Replace 2269-defer-client-auth.patch with 0004-Defer-client-TLS-auth-until-after-HTTP-parsing.patch (PelicanPlatform/xrootd #4)
      - Replace bbockelm-3-oss-statistics.patch with 0005-Add-new-filesystem-load-counter-plugin.patch (PelicanPlatform/xrootd #5)
      - Add 0006-XrdSciTokens-Handle-multiple-authorization-token-set.patch (PelicanPlatform/xrootd #6)
      - Add 0007-XrdHttp-Add-http.staticheader.patch (PelicanPlatform/xrootd #7)
      - Add 0008-XrdHttp-Set-oss.asize-if-object-size-is-known.patch (PelicanPlatform/xrootd #8)


author: Mátyás Selmeci <mselmeci@wisc.edu> - 5.7.2-1.4
changelog:
  - Two more patches from PelicanPlatform/xrootd (SOFTWARE-6063)
      - Add 0010-do_WriteSpan-Add-written-bytes-in-file-statistics.patch (PelicanPlatform/xrootd #10)
      - Add 0011-Xrd-Fix-MacOS-poller.patch (PelicanPlatform/xrootd #11)


author: Mátyás Selmeci <mselmeci@wisc.edu> - 5.7.2-1.4.purge
changelog:
  - Add purge plugin patch 0009-Second-rebase-of-alja-purge-main-rb1-onto-master-5.7.patch
      (PelicanPlatform/xrootd #9)


author: Mátyás Selmeci <mselmeci@wisc.edu> - 5.7.3-1.1
changelog:
  - Update to XRootD 5.7.3 (SOFTWARE-6071)
  - Drop upstreamed patches:
      - 0003-Fix-FD-leak-when-reading-file-size-from-cinfo-file-i~a219487.patch
      - 0008-XrdHttp-Set-oss.asize-if-object-size-is-known~d710312.patch
      - 0010-do_WriteSpan-Add-written-bytes-in-file-statistics~98a22ba.patch
      - 0011-Xrd-Fix-MacOS-poller~79a5439.patch
  - Replace patches with updated versions:
      - 0004-Defer-client-TLS-auth-until-after-HTTP-parsing~323a16b.patch
          -> 0003-XrdTls-Allow-disabling-of-X.509-client-auth.patch~18e1c81.patch
      - 0005-Add-new-filesystem-load-counter-plugin~3c1be23.patch
          -> 0004-Add-new-filesystem-load-counter-plugin.patch~3c1be23.patch
      - 0006-XrdSciTokens-Handle-multiple-authorization-token-set~7433116.patch
          -> 0005-XrdSciTokens-Handle-multiple-authorization-token-set.patch~a33ca13.patch
      - 0007-XrdHttp-Add-http.staticheader~2175ae2.patch
          -> 0006-XrdHttp-Add-http.staticheader.patch~5c6ee05.patch


author: Mátyás Selmeci <mselmeci@wisc.edu> - 5.7.3-1.2
changelog:
  - Fix patch file names
  - Add:
      - 0007-XrdPfc-Check-for-a-null-pointer-dereference~121f60b.patch
      - 0008-XrdHttp-Undo-HTTP-PUT-response-code-change~956b9fa.patch


author: Mátyás Selmeci <mselmeci@wisc.edu> - 5.7.3-1.5
changelog:
  - Add:
      - 0010-Fix-gstream-configuration-processing~bece0de.patch
  - Re-add (with update):
      - 0011-Xrd-Fix-MacOS-poller~9704d2a.patch


author: Mátyás Selmeci <mselmeci@wisc.edu> - 5.7.3-1.5
changelog:
  - Add:
      - 0010-Fix-gstream-configuration-processing~bece0de.patch
      - 0012-Temporary-workaround-for-segfault-noted-in-upstream~3b485c0.patch
  - Re-add (with update):
      - 0011-Xrd-Fix-MacOS-poller~9704d2a.patch


author: Mátyás Selmeci <mselmeci@wisc.edu> - 5.8.0-1.1
changelog:
  - Update to 5.8.0 (SOFTWARE-6114)
      - Patches added:
          - 0005-Since-the-XrdPss-did-not-implement-the-auto-stat-pro~4c5e0ae.patch
          - 0006-XrdPss-Fix-proxy-when-using-tokens-and-crc32c~328ae18.patch
          - 0007-XrdHttp-Fix-HTTP-protocol-errors-on-failure~4fb2221.patch
      - Patches kept:
          - 0003-XrdTls-Allow-disabling-of-X.509-client-auth~18e1c81.patch -> 0002-XrdTls-Allow-disabling-of-X.509-client-auth~18e1c81.patch
          - 0008-XrdHttp-Undo-HTTP-PUT-response-code-change~956b9fa.patch -> 0004-XrdHttp-Undo-HTTP-PUT-response-code-change~956b9fa.patch
      - Patches updated:
          - 0001-Allow-hostname-used-by-XRootD-to-be-overridden-by-en~e13587e.patch -> 0001-Allow-hostname-used-by-XRootD-to-be-overridden-by-en~7c119b0.patch
          - 0005-XrdSciTokens-Handle-multiple-authorization-token-set~a33ca13.patch -> 0003-XrdSciTokens-Handle-multiple-authorization-token-set~ec1eb0c.patch
      - Patches dropped:
          - 0002-XrdHttp-determines-the-presence-of-the-Age-header-in~092c7a5.patch
          - 0004-Add-new-filesystem-load-counter-plugin~3c1be23.patch
          - 0006-XrdHttp-Add-http.staticheader~5c6ee05.patch
          - 0007-XrdPfc-Check-for-a-null-pointer-dereference~121f60b.patch
          - 0009-Add-ResourceMonitor-and-PurgePlugin~f34a39d.patch
          - 0010-Fix-gstream-configuration-processing~bece0de.patch
          - 0011-Xrd-Fix-MacOS-poller~9704d2a.patch
          - 0012-Temporary-workaround-for-segfault-noted-in-upstream~3b485c0.patch


author: Mátyás Selmeci <mselmeci@wisc.edu> - 5.8.1-1.1
changelog:
  - Update to 5.8.1 (SOFTWARE-6114)
      - Patches added:
          - 0006-XrdPosix-Map-operation-timeouts-to-ETIME~9480232.patch
          - 0007-XrdSciTokens-Automatically-add-WLCG-audiences-upon-r~92c168c.patch
      - Patches kept:
          - 0007-XrdHttp-Fix-HTTP-protocol-errors-on-failure~4fb2221.patch -> 0005-XrdHttp-Fix-HTTP-protocol-errors-on-failure~4fb2221.patch
      - Patches dropped:
          - 0005-Since-the-XrdPss-did-not-implement-the-auto-stat-pro~4c5e0ae.patch
          - 0006-XrdPss-Fix-proxy-when-using-tokens-and-crc32c~328ae18.patch


author: Mátyás Selmeci <mselmeci@wisc.edu> - 5.8.1-1.2
changelog:
  - Comment out 0007-XrdSciTokens-Automatically-add-WLCG-audiences-upon-r~92c168c.patch
  - Add 0008-Include-additional-XrdPfc-headers.patch


author: Mátyás Selmeci <mselmeci@wisc.edu> - 5.8.1-1.5
changelog:
  - Patches added:
      - 0008-Tweak-throttle-manager-after-large-scale-testing~273c58e.patch
      - 0009-Modify-XrdThrottle-to-be-an-OSS-plugin~580a3f1.patch
      - 0010-CMake-changes-for-XrdThrottle-overhaul~fe965e8.patch
  - Patches dropped:
      - 0007-XrdSciTokens-Automatically-add-WLCG-audiences-upon-r~92c168c.patch
  - Patches kept:
      - 0008-Re-engineer-concurrency-limits-for-throttles~0ef6dbc.patch -> 0007-Re-engineer-concurrency-limits-for-throttles~0ef6dbc.patch


author: Mátyás Selmeci <mselmeci@wisc.edu> - 5.8.2-1.1
changelog:
  - Update to XRootD 5.8.2 (SOFTWARE-6151)
      - Patches added:
          - 0008-XRootD-s-xml-response-for-PROPFIND-will-now-include~aacf631.patch
      - Patches kept:
          - 0001-Allow-hostname-used-by-XRootD-to-be-overridden-by-en~7c119b0.patch
          - 0002-XrdTls-Allow-disabling-of-X.509-client-auth~18e1c81.patch
          - 0003-XrdSciTokens-Handle-multiple-authorization-token-set~ec1eb0c.patch -> 0003-XrdSciTokens-Handle-multiple-authorization-token-set~b82ddc3.patch
          - 0004-XrdHttp-Undo-HTTP-PUT-response-code-change~956b9fa.patch
          - 0005-XrdHttp-Fix-HTTP-protocol-errors-on-failure~4fb2221.patch
          - 0007-Re-engineer-concurrency-limits-for-throttles~0ef6dbc.patch -> 0006-Re-engineer-concurrency-limits-for-throttles~39fea57.patch
          - 0009-Modify-XrdThrottle-to-be-an-OSS-plugin~580a3f1.patch -> 0007-Modify-XrdThrottle-to-be-an-OSS-plugin~921fef5.patch
      - Patches dropped:
          - 0006-XrdPosix-Map-operation-timeouts-to-ETIME~9480232.patch
          - 0008-Tweak-throttle-manager-after-large-scale-testing~273c58e.patch
          - 0010-CMake-changes-for-XrdThrottle-overhaul~fe965e8.patch


author: Mátyás Selmeci <mselmeci@wisc.edu> - 5.8.3-1.1
changelog:
  - Update to XRootD 5.8.3 (SOFTWARE-6164)
      - Patches added:
          - 0009-Avoid-reference-beyond-end-of-table~80b938c.patch
          - 0010-XrdPfc-Ensure-a-reference-to-the-file-is-kept-when-s~aa225e2.patch
      - Patches kept:
          - 0001-Allow-hostname-used-by-XRootD-to-be-overridden-by-en~7c119b0.patch
          - 0002-XrdTls-Allow-disabling-of-X.509-client-auth~18e1c81.patch
          - 0003-XrdSciTokens-Handle-multiple-authorization-token-set~b82ddc3.patch
          - 0004-XrdHttp-Undo-HTTP-PUT-response-code-change~956b9fa.patch -> 0004-XrdHttp-Undo-HTTP-PUT-response-code-change~43ed40b.patch
          - 0006-Re-engineer-concurrency-limits-for-throttles~39fea57.patch
          - 0007-Modify-XrdThrottle-to-be-an-OSS-plugin~921fef5.patch
          - 0008-XRootD-s-xml-response-for-PROPFIND-will-now-include~aacf631.patch
      - Patches dropped:
          - 0005-XrdHttp-Fix-HTTP-protocol-errors-on-failure~4fb2221.patch
          - 0009-Fix-life-time-of-a-variable-used-for-signaling-that~286b8ca.patch
          - 0010-Correct-concurrency-and-state-tracking-around-Redriv~86d48f1.patch
          - 0011-Fix-race-conditions-around-use-of-ecMsg~803dc26.patch


author: Brian Lin <blin@cs.wisc.edu> - 132-1
changelog:
  - Update certificates for FNAL and SLAC VOMS servers
  - Update certificates for CLAS12, EIC, GLOW, and HCC
  - Drop stale certificates for nanohub, STAR, and wisc.edu lz


author: Mátyás Selmeci <mselmeci@wisc.edu> - 138-1
changelog:
  - Add new CERN IAM endpoint for CMS (SOFTWARE-6072)
  - Remove lcg-voms2.cern.ch and voms2.cern.ch LSC files and vomses entries (SOFTWARE-6072)


author: Mátyás Selmeci <matyas@cs.wisc.edu> - 2.1.0-0.14.rc2.4
changelog:
  - Fix voms_install_db cert parsing to deal with OpenSSL 1.1+ format and "Let's Encrypt" (SOFTWARE-4882)
    - Add 4882-voms_install_db-cert-parsing.patch


author: Mátyás Selmeci <matyas@cs.wisc.edu> - 2.1.0-0.14.rc2.5
changelog:
  - Increase default key size to 2048 bits in voms-proxy-direct (SOFTWARE-4889)
    - Add Set-default-key-size-to-2048-bits-in-voms-proxy-dire.patch


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 2.1.0-0.27.rc3
changelog:
  - Update to version 2.1.0-rc3
  - Drop patches accepted upstream
  - Add new patches (the PRs have been accepted upstream)


author: Brian Bockelman <bbockelman@morgridge.org> - 0.9.2-1
changelog:
  - Add support for the `pelican://` protocol, allowing XCache to consume
    the federation metadata directly.


author: Brian Bockelman <bbockelman@morgridge.org> - 0.9.3-1
changelog:
  - Add support for requesting reversed connections from the Pelican connection broker.
  - Plugin no longer drops query parameters when `pelican://` is used; fixes
    issues with missing authorization from URL.


author: Brian Bockelman <bbockelman@morgridge.org> - 1.0.0-1
changelog:
  - Switch to using PROPFIND for stat, preventing opening a directory as a file
  - Implement directory listings at the cache
  - Cache the results of the director response, skipping director lookup when not needed
  - Forward pelican.timeout header to the remote origin
  - Fix a bug that invoked a callback twice, potentially segfaulting the process
  - Add unit tests to the project


author: Brian Bockelman <bbockelman@morgridge.org> - 1.1.0-1
changelog:
  - Add support for Write and VectorRead operations
  - Add support for checksum query and caching
  - Add support for COPY verb to enable third-party-copy
  - Fix the returned stat flags
  - Fix uninitialized read when using the broker


author: Brian Bockelman <bbockelman@morgridge.org> - 1.2.0-1
changelog:
  - Add progress- and stall-based timeout checks.
  - Add timeout check while requests are queued.
  - Increase the default number of workers to 8.
  - Add ability to tune more parameters via environment variables.
  - Fix bug where uploads fail for files that don't exist
  - Fix thread-safety issues which could cause a libcurl deadlock.


author: Brian Bockelman <bbockelman@morgridge.org> 1.2.2-1
changelog:
  - Fix invocation of `Fail` in the callback which could lead to a use-after-free
    of the callback object.


author: Carl Edquist <edquist@cs.wisc.edu> - 2.0.4-1
changelog:
  - Initialize crc32
  - Fix assert in el8 due to vector reserve
  - Reorder variables to address compiler warning/error


author: Mátyás Selmeci <matyas@cs.wisc.edu> - 2.1.3-1
changelog:
  - Fail plugin initialization if we can't get the OSS (SOFTWARE-5388)
  - If user cannot be mapped to uid, continue as anonymous
  - Change from named daemon to exec


author: Mátyás Selmeci <matyas@cs.wisc.edu> - 2.1.3-1.1
changelog:
  - Add 47-thread-specific-supplementary-groups.patch
    (https://github.com/opensciencegrid/xrootd-multiuser/pull/47)


author: Mátyás Selmeci <matyas@cs.wisc.edu> - 2.1.3-1.2
changelog:
  - Add 48-gsi-clients-may-use-tokens.patch
    (https://github.com/opensciencegrid/xrootd-multiuser/pull/48)


