release-notes-5.1

HTML header: <title>dCache 5.1 Release Notes</title>
             <!--#include virtual="/template/default-head.shtml" -->
             <meta name="viewport" content="width=device-width, initial-scale=1.0"/>
             <!-- Bootstrap -->
             <link rel="stylesheet" href="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.6/css/bootstrap.min.css"
                   integrity="sha384-1q8mTJOASx8j1Au+a5WDVnPi2lkFfwwEAa8hDDdjZlpLegxhjVME1fgjWPGmkzs7" crossorigin="anonymous"/>
             <link rel="stylesheet" href="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.6/css/bootstrap-theme.min.css"
                   integrity="sha384-fLW2N01lMqjakBkx3l/M9EahuwpSfeNvV63J5ezn3uZzapT0u7EYsXMjQV+0En5r" crossorigin="anonymous"/>
             <!--link type="text/css" rel="stylesheet" href="jquery.tocify.css" /-->
             <style type="text/css">
             h5 {
                 font-size: 15px;
                 font-style: italic;
                 margin-top: 20px;
             }
             body {
                 padding-top: 20px;
             }
             @media (max-width: 767px) {
                 #toc {
                     position: relative;
                     width: 100%;
                     margin: 0px 0px 20px 0px;
                 }
             }
             @media print {
                 #toc {
                     display: none;
                 }
             }
             </style>

<div class="container">
<div id="banner">
   <div id="bird_large">
      <img src="/images/dcache-banner.png" class="bird"></img>
   </div>
   <div id="sidebar-b">
      <span class="dcache-nav-bar">
      <a href="/index.shtml">home</a>
      |
      <a href="/news.shtml">news</a>
      |
      <a href="/manuals/index.shtml">documentation</a>
      |
      <a href="/downloads/IAgree.shtml">downloads</a>
      |
      <a href="/feedback.shtml">feedback</a>
      |
      <a href="/manuals/googlesearch.shtml">search</a>
      |
      <a href="/imprint.shtml">imprint&#160;</a>
      </span>
   </div>
</div>
<div id="content">

<div class="row">

<div class="page-header">
<h1>What's new in dCache 5.1<br/>
<small>Release notes</small></h1>
</div>

## Highlights

The 5.1 series of dCache focuses on new data transfer features.

It introduces 3rd-party copy capabilities to the xrootd protocol.

FTP doors can now support anonymous-FTP logins, and explicit TLS
encrypted control channel (FTPS).

gPlazma has gained support for SciToken authentication as well as improved OpenID Connect support.

Pools can now send the full set of inotify events through SSE.

Pool manager can create dynamic pool groups based on defined tags.


## Incompatibilities

  * The Kafka configuration was moved from dcache.properties to a dedicated kafka.properties file.

## Acknowledgments

Once again, we are grateful for code and documentation contributions from contributors outside of our core team.

Onno Zweers provided many helpful corrections to the documentation.

Lea Morschel also provided documentation and code refinements.

Other contributions originated from a lecture at HTW Berlin; many thanks to Jonas Grabber, "tabea", "Co" and "xpinkyx" for their contributions.


## Release 5.1.26

### dcache-xrootd



The version is upgrated to xrootd4j 3.5.7 with lossen username validation, so that

usernames like `foo.1234:56` are no longer rejected.


The current release fixed  java.lang.IllegalStateException: ChecksumChannel must not be written to after getChecksums.

TPC client first will be shut down when
the pool netty channel goes inactive.




### Changelog 5.1.25..5.1.26

<!-- git log 5.1.25..5.1.26 -no-merges -format='[%h](https://github.com/dcache/dcache/commit/%H)%n:   %s%n' -->

[2a79d33](https://github.com/dcache/dcache/commit/2a79d338624a26c207f92c1eccd95be1713abe10)
:   [maven-release-plugin] prepare release 5.1.26

[a107444](https://github.com/dcache/dcache/commit/a107444393ff7495cbf4c70fbdd4af50e5bcbc66)
:   dcache-xrootd: bump to xrootd4j 3.4.7

[abe0c02](https://github.com/dcache/dcache/commit/abe0c0284ef120610790bf576042eea077632ab7)
:   dcache-xrootd: cancel TPC transfer when client disconnects unexpectedly from pool

[1fd0d60](https://github.com/dcache/dcache/commit/1fd0d60f9ef2fb0d97aea8dc95d0c16892b7b3fe)
:   [maven-release-plugin] prepare for next development iteration

## Release 5.1.25

### pool

The unix xrootd tpc security plugin was included in order to
enable the dCache TPC client to use a dCache pool as source
when signed hash verification is on. However, this is now fixed  and
no special configuration necessary for organizations (like Tier 1)
needing to communicate with EOS.  



### Changelog 5.1.24..5.1.25

<!-- git log 5.1.24..5.1.25 -no-merges -format='[%h](https://github.com/dcache/dcache/commit/%H)%n:   %s%n' -->

[6825773](https://github.com/dcache/dcache/commit/6825773bf137a68edb2d50f7f044bc07c38f2f5e)
:   [maven-release-plugin] prepare release 5.1.25

[49cf902](https://github.com/dcache/dcache/commit/49cf90285ef40f1c5f2d90c15b6db7bc93373d6e)
:   pool (xrootd): make tpc security plugin default unix

[131559a](https://github.com/dcache/dcache/commit/131559a7a74e4b97f97073f02622aada205a4a29)
:   [maven-release-plugin] prepare for next development iteration

## Release 5.1.24

### frontend

When frontend is run in a core domain and there is
no history service reachable, the retry on no route
to cell ends up spamming the message queues. This is now fixed.


### xrootd

The current release fixed compatible level security for sigver. 

The xrootd client has a command-line option, `--path`, which
tells the server to create missing directories. This option
is included in two-party copy, but setting it for TPC has
no effect. TPCs which wish to write to dCache (as destination)
to a non-existent subdirectory fail. This is now fixed and dCache no longer fails in these cases.


### Changelog 5.1.23..5.1.24

<!-- git log 5.1.23..5.1.24 -no-merges -format='[%h](https://github.com/dcache/dcache/commit/%H)%n:   %s%n' -->

[e0eba6e](https://github.com/dcache/dcache/commit/e0eba6e786e2cab814cefc76a7c2aaf6463d032b)
:   [maven-release-plugin] prepare release 5.1.24

[bfd8792](https://github.com/dcache/dcache/commit/bfd8792083baa8beb0e5f4513109c99ce25cf9b0)
:   dcache-xrootd: always create missing directories on write

[1eb17c8](https://github.com/dcache/dcache/commit/1eb17c84c6f06ecb5dc97c82892cbb045aad144e)
:   dcache-xrootd: fix compatible level security for sigver

[7bb61a4](https://github.com/dcache/dcache/commit/7bb61a422f6c88fc3a4ed5cbf6c943d2821d036e)
:   dcache-frontend: remove retry flag on sendAndWait to history service

[11ef455](https://github.com/dcache/dcache/commit/11ef4553fc8a022833a17aa7f627c6c43fe7d4e0)
:   [maven-release-plugin] prepare for next development iteration

## Release 5.1.23

### dcache

QOS migration policy engine was  raising JVM error when no tape pool found. 
This is now fixed and the normal behavior is that HTTP error code reported back with `No HSM pool found`.
 
### frontend

The current release improved error responses and they are more specific  now.

The current release fixed the NPE  stack trace arised because the pool
data could be sent with a default sweeper data
object. 


### Changelog 5.1.22..5.1.23

<!-- git log 5.1.22..5.1.23 -no-merges -format='[%h](https://github.com/dcache/dcache/commit/%H)%n:   %s%n' -->

[c4b6e8c](https://github.com/dcache/dcache/commit/c4b6e8c524d0d8c86f0c0c000ad41597209bc421)
:   [maven-release-plugin] prepare release 5.1.23

[224fec2](https://github.com/dcache/dcache/commit/224fec27d25c8145e04aa9057eabe97f708b410e)
:   dcache-frontend: make ErrorResponseProvider return the more specific error message

[0f086a2](https://github.com/dcache/dcache/commit/0f086a2ab0bd1c4f8ed8d0ebf70c3db776503a59)
:   dcache: qos migration policy engine should not raise JVM error when no tape pool foundMotivation:

[369645c](https://github.com/dcache/dcache/commit/369645cb1cf68fed7aed4cf6a3e65ebee6d0fd13)
:   dcache-history,dcache-frontend: guard against unconfigured sweeper histogram

[3d372db](https://github.com/dcache/dcache/commit/3d372db9d5bf2dd638cdc7aeaccb73993cfb23b0)
:   [maven-release-plugin] prepare for next development iteration

## Release 5.1.22

### frontend

From RESTful admin API, the POST to
`pools/{name}/usage/mode -d {"rdonly":true}` failed  but `{"rdonly": "true"}` succeeded.

This is fixed now and both boolean and string work.

The current release fixed stack trace in logs.


### Changelog 5.1.21..5.1.22

<!-- git log 5.1.21..5.1.22 -no-merges -format='[%h](https://github.com/dcache/dcache/commit/%H)%n:   %s%n' -->

[b3747a1](https://github.com/dcache/dcache/commit/b3747a159b9681bc0a2e0b0cfd8f7a8f3ae09a0f)
:   [maven-release-plugin] prepare release 5.1.22

[3626313](https://github.com/dcache/dcache/commit/3626313250ba1b6413dd42d4ad8297ad0bd37720)
:   dcache-frontend: allow pool enable/disable to use boolean JSON value

[c7759c4](https://github.com/dcache/dcache/commit/c7759c44ba11ebc03b49175a4b82396e23862f20)
:   dcache-frontend,history: protect against missing highest bin in histogram data

[c6d1545](https://github.com/dcache/dcache/commit/c6d1545532e8d58f75c57299ac656d96b81abcb2)
:   [maven-release-plugin] prepare for next development iteration

## Release 5.1.22

### frontend

From RESTful admin API, the POST to
`pools/{name}/usage/mode -d {"rdonly":true}` failed  but `{"rdonly": "true"}` succeeded.

This is fixed now and both boolean and string work.

The current release fixed stack trace in logs.


### Changelog 5.1.21..5.1.22

<!-- git log 5.1.21..5.1.22 -no-merges -format='[%h](https://github.com/dcache/dcache/commit/%H)%n:   %s%n' -->

[b3747a1](https://github.com/dcache/dcache/commit/b3747a159b9681bc0a2e0b0cfd8f7a8f3ae09a0f)
:   [maven-release-plugin] prepare release 5.1.22

[3626313](https://github.com/dcache/dcache/commit/3626313250ba1b6413dd42d4ad8297ad0bd37720)
:   dcache-frontend: allow pool enable/disable to use boolean JSON value

[c7759c4](https://github.com/dcache/dcache/commit/c7759c44ba11ebc03b49175a4b82396e23862f20)
:   dcache-frontend,history: protect against missing highest bin in histogram data

[c6d1545](https://github.com/dcache/dcache/commit/c6d1545532e8d58f75c57299ac656d96b81abcb2)
:   [maven-release-plugin] prepare for next development iteration

## Release 5.1.21

### frontend

The current release added  support for OIDC names and Client-IDs with spaces.


### Changelog 5.1.20..5.1.21

<!-- git log 5.1.20..5.1.21 -no-merges -format='[%h](https://github.com/dcache/dcache/commit/%H)%n:   %s%n' -->

[e53b47a](https://github.com/dcache/dcache/commit/e53b47a0ceb2758e48d9cf37634010e3149cdd79)
:   [maven-release-plugin] prepare release 5.1.21

[1b56e2b](https://github.com/dcache/dcache/commit/1b56e2b8cdce33b980a1a89d1a5eba05608806b3)
:   dcache, frontend: release dcache-view version 1.5.7

[737332b](https://github.com/dcache/dcache/commit/737332b8c7ff9891128574fa7d65012a736c9e00)
:   [maven-release-plugin] prepare for next development iteration

## Release 5.1.20

### frontend

The current release removed unnecessary login requirement on restores and transfers.

The current release fixed a bug in the frontend if the inotify events are used.

### skel

The current release repaired erroneous batch directives before cell creation.

Now it is fixed and domain is not left in zombie state
after a fatal error, but restarts,
as it should.

### srm

Now   host IP is used for comparison when determining if SURL is local.


### Changelog 5.1.19..5.1.20

<!-- git log 5.1.19..5.1.20 -no-merges -format='[%h](https://github.com/dcache/dcache/commit/%H)%n:   %s%n' -->

[462bd7c](https://github.com/dcache/dcache/commit/462bd7cc2427b9d765c44254060ae2b76bbc2884)
:   [maven-release-plugin] prepare release 5.1.20

[e049838](https://github.com/dcache/dcache/commit/e049838e4bcb5e0114770fa9442be30d7b53dcd4)
:   skel: repair erroneous batch directives before cell creation

[eb3ec8e](https://github.com/dcache/dcache/commit/eb3ec8e24baa4cd6e0744ed58fa47720611d8826)
:   dcache-frontend: remove unnecessary login requirement on restores and transfers

[2483270](https://github.com/dcache/dcache/commit/248327062c67e3f4e113d7c65e8bc62d4fd6e218)
:   srm: use host IP for comparison when determining if SURL is local

[ba8781b](https://github.com/dcache/dcache/commit/ba8781b47987098cb1c61a916244ea15d39dc128)
:   frontend: events inotify fix deadlock

[156099d](https://github.com/dcache/dcache/commit/156099d1df126f367eb309751b9eedd9231dd7ae)
:   dcache,frontend: release dcache-view version 1.5.6

[87278e8](https://github.com/dcache/dcache/commit/87278e8b91c3605099c8b38b320b511c693b340a)
:   [maven-release-plugin] prepare for next development iteration

## Release 5.1.19

### cell


Curator client was not able to restore the connection to ZK server after
network partitioning. The is now fixed.


### skel

The current relase fixed tape-reserved size calculation.
### webdav

The current release fixed, where the WebDAV door failed to follow RFC 4918.
This make some clients reject dCache WebDAV door as a valid WebDAV
endpoint.



### Changelog 5.1.18..5.1.19

<!-- git log 5.1.18..5.1.19 -no-merges -format='[%h](https://github.com/dcache/dcache/commit/%H)%n:   %s%n' -->

[44d7c94](https://github.com/dcache/dcache/commit/44d7c94b352df28f3f2514b81e758d8ddd144c34)
:   [maven-release-plugin] prepare release 5.1.19

[06467af](https://github.com/dcache/dcache/commit/06467afd26189a84360a4a073e6efcfff88432fb)
:   Fix tape-reserved size calculation

[d940db9](https://github.com/dcache/dcache/commit/d940db90594fc11edd3ef36e4dbd0b225b06423b)
:   webdav: include DAV header in OPTIONS requests.

[34b2beb](https://github.com/dcache/dcache/commit/34b2bebb53e566025ba1e4a44f4037c15b45b74f)
:   cells: do not re-define zookeeper watcher

[5f83ba7](https://github.com/dcache/dcache/commit/5f83ba7cef72f417a717f716373ecddba1f0e7bb)
:   [maven-release-plugin] prepare for next development iteration

## Release 5.1.18

### canl

The current release updated lib version to 2.5.1.

### gplazma

The current release fixed URL-prefix SciToken parsing and error handling if JWT contains
malformed SciToken scopes.


### Changelog 5.1.17..5.1.18

<!-- git log 5.1.17..5.1.18 -no-merges -format='[%h](https://github.com/dcache/dcache/commit/%H)%n:   %s%n' -->

[ae9f749](https://github.com/dcache/dcache/commit/ae9f749bd1443be7e50fb0c291b179cba3412cd8)
:   [maven-release-plugin] prepare release 5.1.18

[761528a](https://github.com/dcache/dcache/commit/761528a19e6c1a0591c0a4e08217dd5ad1764a0d)
:   gplazma: scitoken add unit tests and fix SciTokenScope

[0a1b9aa](https://github.com/dcache/dcache/commit/0a1b9aa0442d9bfcb578648b2c83d9ad1dfc9c33)
:   canl: update to version 2.5.1

[448265c](https://github.com/dcache/dcache/commit/448265c252030cf8b4f1adc2724996787081cbc3)
:   [maven-release-plugin] prepare for next development iteration

## Release 5.1.17

### config

A typo in the dcap config file was fixed correcting 
`dcacp.enable.kafka` to  `dcap.enable.kafka`.
 
### dcache

Pool compatibility with Xrootd-2 and Xrootd-4 versions is now allowed.

### gplazma

The SciToken plugin will now reject any JWT where there is none of the
expected scopes defined. This allows dCache to support both
OpenID-Connect and SciTokens.

### webdav

The current release fixed an issue of  transfers through dCacheView when the webdav door is configured with
empty `webdav.allowed.client.origins` value, which is the default value. 


### Changelog 5.1.16..5.1.17

<!-- git log 5.1.16..5.1.17 -no-merges -format='[%h](https://github.com/dcache/dcache/commit/%H)%n:   %s%n' -->

[f5e71b8](https://github.com/dcache/dcache/commit/f5e71b8017b0ee20132c457921e2c2c9763eefe5)
:   [maven-release-plugin] prepare release 5.1.17

[d204071](https://github.com/dcache/dcache/commit/d204071e057df753d78322ba643e6912fa50d8d6)
:   dcache: add null check to pool info collector util

[1a9be8f](https://github.com/dcache/dcache/commit/1a9be8f84e5cce36c1fb503b10e25310cdc491c4)
:   config: fix typo in property name

[f27d03d](https://github.com/dcache/dcache/commit/f27d03dec15037cfde23a121067fc3195f79eae1)
:   gplazma: scitoken fix two issues with SciToken plugin

[dc948d0](https://github.com/dcache/dcache/commit/dc948d0839059c567e2798b91488f08791894bee)
:   webdav: fix CORS when all clients are allowed to connect

[99e2106](https://github.com/dcache/dcache/commit/99e210651c02cc6227cb7de5b0d30b76938a90ae)
:   dcache: allow pool compatibility with Xrootd-2 and Xrootd-4 versions

[0b06dfd](https://github.com/dcache/dcache/commit/0b06dfdbf8079831e4af2c1044aa926ec2d6af9c)
:   [maven-release-plugin] prepare for next development iteration

## Release 5.1.16

### srm

The current release fixed  a problem resulting in high CPU use in SrmManager if clients are
attempting to pin a file and PinManager is unavailable.


A regression fixed  where SrmManager will reject all QUEUED jobs and
INPROGRESS BringOnline requests on restart, if there are no SRM doors
running when SrmManager starts.


### Changelog 5.1.15..5.1.16

<!-- git log 5.1.15..5.1.16 -no-merges -format='[%h](https://github.com/dcache/dcache/commit/%H)%n:   %s%n' -->

[521fe2e](https://github.com/dcache/dcache/commit/521fe2eb3ad384909127937c33b7e55a4452e303)
:   [maven-release-plugin] prepare release 5.1.16

[73cc5c4](https://github.com/dcache/dcache/commit/73cc5c48fa37b8f2972a50853265a60b73226ea7)
:   SrmManager: fix handling of saved requests on start-up

[ca2bd3d](https://github.com/dcache/dcache/commit/ca2bd3df034d5f42ae6786d7544b34f472b9ab27)
:   SrmManager: avoid spamming if PinManager is down

[a761455](https://github.com/dcache/dcache/commit/a761455175396dff3308f2483541559757676a1b)
:   [maven-release-plugin] prepare for next development iteration

## Release 5.1.15

### doors

The current release fixed a bug  where running the `lb set tags` admin command without any
arguments triggers a NullPointerException.

### pool

The current release improved  error messages about jobs cancellation.

### scripts

The dcache-storage-descriptor command no longer requires a URL argument.


### Changelog 5.1.14..5.1.15

<!-- git log 5.1.14..5.1.15 -no-merges -format='[%h](https://github.com/dcache/dcache/commit/%H)%n:   %s%n' -->

[06f58c2](https://github.com/dcache/dcache/commit/06f58c262804a8df9d5e06c37af002a073d776f7)
:   [maven-release-plugin] prepare release 5.1.15

[78a2168](https://github.com/dcache/dcache/commit/78a2168a28e2c66477904087fc99f16bf7914874)
:   doors: fix "lb set tags" command with no arguments

[8bbfcb0](https://github.com/dcache/dcache/commit/8bbfcb08a1083ca7822a81511e0b4ab7fcd4ee6b)
:   pool: improve messages when migration job is cancelled.

[77f4323](https://github.com/dcache/dcache/commit/77f43235e8830131577169e544931e9407c0822b)
:   scripts: fix variable ordering in dcache-storage-descriptor

[9944724](https://github.com/dcache/dcache/commit/99447245f12647056811a8b3097cb02bd89c92fc)
:   docs: TheBook add chapter on SRR

[4432077](https://github.com/dcache/dcache/commit/4432077d66aa2e56db5e8a6023cd758c4a51e578)
:   [maven-release-plugin] prepare for next development iteration

## Release 5.1.14

### gplazma

The SciToken gplazma plugin now supports the audience (`aud`) claim
where the claim's value is an array. This allows dCache to support
SciTokens with multiple audience values.

### pool

Pool health-check log messages now include the pool's name.

### webdav

On an unsuccessful HTTP-TPC pull request, dCache will delete the file.
If  this deletion did not work then an error was  logged. This is fixed now and 
failures to delete the incomplete file from a failed HTTP-TPC pull
request, where the incomplete file has been deleted by some other means
are now logged at DEBUG level, rather than WARN level.

### xrootd

The current release refited checksum handling after xrootd4j bug fix. 


### Changelog 5.1.13..5.1.14

<!-- git log 5.1.13..5.1.14 -no-merges -format='[%h](https://github.com/dcache/dcache/commit/%H)%n:   %s%n' -->

[09f44ba](https://github.com/dcache/dcache/commit/09f44baa3b75bd7bbb615fa4a81272d6ab735688)
:   [maven-release-plugin] prepare release 5.1.14

[bbe0dc2](https://github.com/dcache/dcache/commit/bbe0dc281bd0dba2ce3f407926544681f5e285d4)
:   dcache-xrootd: refit checksum handling after xrootd4j bug fix

[81af14e](https://github.com/dcache/dcache/commit/81af14e207b3fbba592102260aca669755330f79)
:   webdav: avoid logging non-error as an error

[f30b95b](https://github.com/dcache/dcache/commit/f30b95bb4ff8c1b72024d51f13e35a1c13564f35)
:   pool: include pool name in health-check reports

[a68785d](https://github.com/dcache/dcache/commit/a68785d835a472470359f6b2b5756e5b8b314748)
:   gplazma: scitoken add support for multiple audience claims

[25a4d2d](https://github.com/dcache/dcache/commit/25a4d2d51263adb42f8adcb030ad95c36f2eeb48)
:   [maven-release-plugin] prepare for next development iteration

## Release 5.1.13

### frontend

The current release fixed QoS pin semantics.

A bug is fixed in frontend that results in a NullPointerException for
billing queries where no limit is specified.


### Changelog 5.1.12..5.1.13

<!-- git log 5.1.12..5.1.13 -no-merges -format='[%h](https://github.com/dcache/dcache/commit/%H)%n:   %s%n' -->

[1eb7e32](https://github.com/dcache/dcache/commit/1eb7e3276ece4efde652eebb5cc880ab866db752)
:   [maven-release-plugin] prepare release 5.1.13

[c83c585](https://github.com/dcache/dcache/commit/c83c5852ccf62a013e8eb988509a221cd5146161)
:   frontend: fix NPE if limit is not specified

[9ed3404](https://github.com/dcache/dcache/commit/9ed340490762233e442649faba73d80e194f8bde)
:   dcache-frontend: fix QoS pin semantics

[a931d26](https://github.com/dcache/dcache/commit/a931d26ceb79371b8b8e33565ef19553c4bb75cf)
:   [maven-release-plugin] prepare for next development iteration

## Release 5.1.12

### Changes affecting multiple services

The Apache Commons Compress library used in dCache was updated to version 1.19.

A rare deadlock situation in the Chimera database was eliminated. In cases
where, within the same directory, concurrent mkdir and rmdir events happened,
transactions within the database could deadlock. This would be indicated by the message

    ERROR: deadlock detected

in the logs.

### pool

There were reports of extraordinarily high CPU usage on pool nodes with a large
number of cached files. Through an optimization of the `sweeper`, CPU usage
was reduced significantly.

### xrootd

This release fixes a vulnerability in dCache's XRootD protocol implementation. 
We recommend that all sites update their XRootD doors.
Details will be made available through EGI Security and, in a week's time, through an
update to these release notes.


### Changelog 5.1.11..5.1.12

<!-- git log 5.1.11..5.1.12 -no-merges -format='[%h](https://github.com/dcache/dcache/commit/%H)%n:   %s%n' -->

[fe857de571](https://github.com/dcache/dcache/commit/fe857de5717d692084d2cda38a4cc8d9ddd747fb)
:   [maven-release-plugin] prepare release 5.1.12

[b9895148f9](https://github.com/dcache/dcache/commit/b9895148f9f268755db30b26c7b9bca586db9651)
:   dcache-xrootd: honor read paths when listing directories

[5022e47257](https://github.com/dcache/dcache/commit/5022e47257f7f6c2682e7cabf0cd37589e2de129)
:   resilience: don't compare Integer objects by refference

[f0d9e124dd](https://github.com/dcache/dcache/commit/f0d9e124dd34cca334f66ecdf18ca5f97c52281a)
:   sweeper: use in-memory map instead of repository for histogram data

[7de9af5be9](https://github.com/dcache/dcache/commit/7de9af5be98e629d38449d53fc19c4ed7d8c50ee)
:   dcache-xrootd: replace constants for version number

[00b2df8fbd](https://github.com/dcache/dcache/commit/00b2df8fbd8045a22afec14155dfafb9fd9bc461)
:   dcache-xrootd: update protocol version numbers

[522a84d482](https://github.com/dcache/dcache/commit/522a84d48234e8692c1373eff551a2d0ba58ecf8)
:   libs: update apache.commons:commons-compress to 1.19

[99f1932666](https://github.com/dcache/dcache/commit/99f193266671a68fda7116feffb1f720cbd5c7f4)
:   chimera: fix ABBA db deadlock when mkdir and rmdir run concurrently

[21dbec4a6b](https://github.com/dcache/dcache/commit/21dbec4a6b9dc91e66e71b8d1b0ca8157e94edcd)
:   [maven-release-plugin] prepare for next development iteration

## Release 5.1.11

### dcap

dcap door could not  handle out-of-date errors. This is now fixed.

### gplazma

The current release fixed  thread leak by explicitly close NamingEnumeration

### httpd

The current release fixed  escape status field in HttpPoolMgrEngineV3.


### Changelog 5.1.10..5.1.11

<!-- git log 5.1.10..5.1.11 -no-merges -format='[%h](https://github.com/dcache/dcache/commit/%H)%n:   %s%n' -->

[da80e6a](https://github.com/dcache/dcache/commit/da80e6ab938d1abf2aeb2adf231e226a6bbda9dd)
:   [maven-release-plugin] prepare release 5.1.11

[5626e54](https://github.com/dcache/dcache/commit/5626e54eb77bc41a26e328900175b0318f7cfdf3)
:   dcap: restart pool selection on OUT-OF-DATE error

[508a34f](https://github.com/dcache/dcache/commit/508a34fcf2befe16c98b8b29450fd01e9bcaf084)
:   gplazma-ldap: avoid thread leak by explicitly close NamingEnumeration

[93de29b](https://github.com/dcache/dcache/commit/93de29b4f28e62ac6f30ab47c2eb00abb762bcb7)
:   httpd: escape status field in HttpPoolMgrEngineV3

[e8c663f](https://github.com/dcache/dcache/commit/e8c663fa257ec81998c0bb9b8d9b3d0177e69a0e)
:   [maven-release-plugin] prepare for next development iteration

## Release 5.1.10

### srm

A new user community requires the srm tools to be able to handle
very large file listings. During preliminary tests, OutOfMemory
errors from the srmls tool were observed. This is now fixed and 
srm can now support operations on very large file lists
without running out of memory.

### webdav

The current release added allow header to list of response headers for OPTION method
request.


### Changelog 5.1.9..5.1.10

<!-- git log 5.1.9..5.1.10 -no-merges -format='[%h](https://github.com/dcache/dcache/commit/%H)%n:   %s%n' -->

[2b5ef20](https://github.com/dcache/dcache/commit/2b5ef203604ad2d87f7b4c5c2e92feb2492f1a03)
:   [maven-release-plugin] prepare release 5.1.10

[51bbef8](https://github.com/dcache/dcache/commit/51bbef8ccf4abef9b0c35ba712cbb1dc3144bdc5)
:   webdav: add allow header to OPTION method request

[281da6d](https://github.com/dcache/dcache/commit/281da6dae70b4eb7372d957c6a63110acb057fad)
:   srm: Remove JVM memory limits

[cf14b7f](https://github.com/dcache/dcache/commit/cf14b7f74e705ae0912c3209e693fbb8ac0665b0)
:   [maven-release-plugin] prepare for next development iteration

## Release 5.1.9

### common

The current release fixed formatting of error message in Checksum. 

### frontend

Admins may now configure frontend to specify in which country (or
countries) data may be stored. This information is visible through
dCacheView.

### gplazma

The current release fixe remote reading of JSON with UTF-8 CharSet and dCache can now work with OPs that use `utf-8` charset.


### Changelog 5.1.8..5.1.9

<!-- git log 5.1.8..5.1.9 -no-merges -format='[%h](https://github.com/dcache/dcache/commit/%H)%n:   %s%n' -->

[8e8b2b9](https://github.com/dcache/dcache/commit/8e8b2b91c6bc8ce87da29e3936e48ffdffd5cdbb)
:   [maven-release-plugin] prepare release 5.1.9

[6948f87](https://github.com/dcache/dcache/commit/6948f876d3bd7984d91d54a319ddacaabecd213f)
:   frontend: make geographic placement configurable

[b5e245d](https://github.com/dcache/dcache/commit/b5e245d251f782b11a7ca4e921f7657a585bb437)
:   common: fix formatting of error message in Checksum

[1662c2c](https://github.com/dcache/dcache/commit/1662c2cceaf1a3763dc39baba3f58db21204bca9)
:   scitoken: fix remote reading of JSON with UTF-8 CharSet

[176f4eb](https://github.com/dcache/dcache/commit/176f4eb9ada9093cd51273f81dc549ab44ea5fc3)
:   [maven-release-plugin] prepare for next development iteration

## Release 5.1.8

### nfs

NPE on "show transfers" command is now fixed.

### webdav

The current release fixed CORS for WebDAV doors that do not allow anonymous
access; in particular, to support dCacheView uploading
and downloading files with such authentication-required
WebDAV doors.


### Changelog 5.1.7..5.1.8

<!-- git log 5.1.7..5.1.8 -no-merges -format='[%h](https://github.com/dcache/dcache/commit/%H)%n:   %s%n' -->

[29688cf](https://github.com/dcache/dcache/commit/29688cf58fd4e948aed4acd143635c18876a34db)
:   [maven-release-plugin] prepare release 5.1.8

[2bfc913](https://github.com/dcache/dcache/commit/2bfc9130b96154eb7630185801fe40a55ac9af3b)
:   nfs: fix NPE on "show transfers" command

[c07272b](https://github.com/dcache/dcache/commit/c07272b826fada411033b7bf475d8aa59add797a)
:   docs: Update UserGuide to use guide-specific navigation header

[173b4ae](https://github.com/dcache/dcache/commit/173b4ae12534e1eff49e94857ab6f52d5fd78da1)
:   webdav: fix cross origin resources sharing issue

[11c5ce0](https://github.com/dcache/dcache/commit/11c5ce0af9935630c944858775ab8deabeb5d651)
:   [maven-release-plugin] prepare for next development iteration

## Release 5.1.7

### chimera

The shell infrastructure supports commands being given interactively, on
the commandline (e.g., 'chimera mkdir /path/to/dir') and from stdin
(e.g., 'echo "mkdir /path/to/dir" | chimera'). `chimera` now supports the latter
case and properly shows command output when invoked in that fashion. 

### frontend

This release updates dCache View to 1.5.5.

### nfs

The NFS door now correctly handles situations where newly created read-only
files could occasionally not be written into:

    f = os.open('test.txt', os.O_WRONLY|os.O_CREAT, 0400)
    os.write(f,"Hello pNFS!")
    os.fsync(f)
    os.close(f)

will now succeed.

### webdav

A client may issue a PUT request that targets an existing collection
resource; i.e., attempt to write a file as a path that is a directory.
dCache, until now, responded with an incorrect status code of 500. This release
changes the status code for this operation to 405 (Method not allowed), 
thus keeping closer to RFC 4918.

### xrootd

This release improves compatibility with the xrdcp client in versions \>4.9
by responding correctly to query strings requesting a specific checksum type.


### Changelog 5.1.6..5.1.7

<!-- git log 5.1.6..5.1.7 -no-merges -format='[%h](https://github.com/dcache/dcache/commit/%H)%n:   %s%n' -->

[06521c8fb8](https://github.com/dcache/dcache/commit/06521c8fb82bf5449fc0a29eef6b701141002812)
:   [maven-release-plugin] prepare release 5.1.7

[c994d6a39f](https://github.com/dcache/dcache/commit/c994d6a39ff982ab2f1aa5bf453b7fdcdf1a315f)
:   dcache, frontend: release dcache-view version 1.5.5

[7db20d5f7f](https://github.com/dcache/dcache/commit/7db20d5f7fd2fc67bc69ed1a6ac68ffc2d4a7f8a)
:   nfs: introduce workaround 'permission deny' on layout commit

[65d8c86ac1](https://github.com/dcache/dcache/commit/65d8c86ac19c9489cca02a58ef9eec66247e5e4f)
:   chimera: chimera shell should show output when commands come from stdin.

[9bf1cbc775](https://github.com/dcache/dcache/commit/9bf1cbc775765595d01256f4497db4e9d6bab27f)
:   webdav: return 405 status code for PUT requests targeting collections

[fb4576d6f6](https://github.com/dcache/dcache/commit/fb4576d6f6594d2da2b376028caf57e927e878c1)
:   dcache-xrootd: add checksum cgi handling to door query

[7850889dac](https://github.com/dcache/dcache/commit/7850889dac8bb68330a17ea60d53cdde77b6b379)
:   [maven-release-plugin] prepare for next development iteration

## Release 5.1.6

### many

The `dcache pool ls` command now provides correct output even if the pool is
defined with a single-digit number of bytes. 


### Changelog 5.1.5..5.1.6

<!-- git log 5.1.5..5.1.6 -no-merges -format='[%h](https://github.com/dcache/dcache/commit/%H)%n:   %s%n' -->

[8f7d147636](https://github.com/dcache/dcache/commit/8f7d1476365b252038be3a2bd696b39bb798f6a9)
:   [maven-release-plugin] prepare release 5.1.6

[72aad72efd](https://github.com/dcache/dcache/commit/72aad72efdea860c689058782cd0a97527c5e078)
:   scripts: avoid copy-n-paste error when calculating pool size

[f2fb97af41](https://github.com/dcache/dcache/commit/f2fb97af41fb4c45f1ba736cf23c84c7e4bd83d6)
:   [maven-release-plugin] prepare for next development iteration

## Release 5.1.5

### frontend

This release updates the dCache View web GUI to version 1.5.4.

### ftp

HAProxy can probe endpoints to discover if
they are still alive.

The FTP door has an optimisation that detects such probes and does not
create the FTP command interpreter, since the FTP client (the HA-Proxy
instance) is calling on behalf of itself, and will not issue any FTP
requests.

This release fixes a regression that would cause erroneous 
NullPointerExceptions when FTP doors were probed by HAProxy.

### pool

The default value for the xrootd Third-Party Copying server response timeout,
`pool.mover.xrootd.tpc-server-response-timeout`, was increased from 2 to 30 seconds 
to provide more robust behaviour in the face of high loads and network congestion.

### transfermanager

Error messages like the WebDAV door's

`Failed to fetch information for progress marker: failed to query pool: (0) Job not found : Job-1`

where the TransferManager is unable to discover the
current status of the pool mover now include the pool's name,
which should make debugging easier.


### Changelog 5.1.4..5.1.5

<!-- git log 5.1.4..5.1.5 -no-merges -format='[%h](https://github.com/dcache/dcache/commit/%H)%n:   %s%n' -->

[9efd766039](https://github.com/dcache/dcache/commit/9efd766039ab686c2d8724743ea9454297ee758d)
:   [maven-release-plugin] prepare release 5.1.5

[60ea0aa2d3](https://github.com/dcache/dcache/commit/60ea0aa2d3e058faf33f9521a58802b40fe0a843)
:   dcache, frontend: release dcache-view version 1.5.4

[8e420a6883](https://github.com/dcache/dcache/commit/8e420a6883fb133072d8ae7b956082811644d6a3)
:   pools: make the xrootd tpc response timeout less aggressive

[22148b8a3d](https://github.com/dcache/dcache/commit/22148b8a3dcf2d77d4ffd0d096561ecfaa8865ad)
:   transfermanager: include pool name in error for 'mover ls' failures

[0d0093540a](https://github.com/dcache/dcache/commit/0d0093540a9d897a4abaf83800df7466093e4202)
:   ftp: avoid NPE on HA-Proxy probes

[8eb19681b6](https://github.com/dcache/dcache/commit/8eb19681b6632369567bfbb2d54bec406851a0fe)
:   core: fix pool selection in killAll command of TransferManager

[ca26b686e7](https://github.com/dcache/dcache/commit/ca26b686e799244e92a884d90d39197e5fd65f83)
:   [maven-release-plugin] prepare for next development iteration

## Release 5.1.4

### Changes affecting multiple services

This release includes an updated Jetty library, with the update adressing
CVE-2019-10247.

This release includes an updated Jetty library, with the update adressing
CVE-2019-10247.

### dcap

The Kafka messaging implementation in the dcap service has been made more robust,
fixing issue [#4831](https://github.com/dCache/dcache/issues/4831).

### frontend

Periodic activity associated with the frontend door is now logged with the
door's cell name. Such messages will also appear in the door's
pinboard.

### nfs

Periodic activity associated with the NFS door is now logged with the
door's cell name. Such messages will also appear in the door's
pinboard.

### pool

Attempting to start a full checksum scan (with `csm check *`) while an
existing scan is still running is no longer reported as a bug.

Pool start-up logging now includes the corresponding pool cell name.

An internal timing check was updated, which should result in more robust pool
behaviour. There should be no user-visible impact.

### webdav

Periodic activity associated with the WebDAV door is now logged with the
door's cell name. Such messages will also appear in the door's
pinboard.

### xrootd

A new configuration property, `pool.mover.xrootd.tpc-server-response-timeout`, allows
setting a timeout for xrootd 3rd party copy operations. This can also be changed through
the new admin command `xrootd set server response timeout`.


### Changelog 5.1.3..5.1.4

<!-- git log 5.1.3..5.1.4 -no-merges -format='[%h](https://github.com/dcache/dcache/commit/%H)%n:   %s%n' -->

[8bc74e3f13](https://github.com/dcache/dcache/commit/8bc74e3f1314a02161c6f2c7f4509ae7f72618ea)
:   [maven-release-plugin] prepare release 5.1.4

[c9ed0d87e3](https://github.com/dcache/dcache/commit/c9ed0d87e31f3bae8e6bf81e1060e0c7542cabc7)
:   pool: avoid IllegalStateException in 'csm check *' command

[8cdf34d790](https://github.com/dcache/dcache/commit/8cdf34d790816beaa09348d8d20ef3acf3364503)
:   dcap: fix premature close of kafka sender

[d88ba9bef4](https://github.com/dcache/dcache/commit/d88ba9bef45436a134a3d7dfa36c4dc4fee91511)
:   sweeper: compute now after the values have been fetched

[8aaabb6316](https://github.com/dcache/dcache/commit/8aaabb6316ae151419331a3622f1ed937f4b465d)
:   libs: use jetty 9.4.18.v20190429

[03ad080bed](https://github.com/dcache/dcache/commit/03ad080bed08d93e14874a752dc47bef60069b7e)
:   dcache-xrootd: add ability to override default timeout for server response (TPC)

[906ab5ac03](https://github.com/dcache/dcache/commit/906ab5ac03c659f00238d49f9fde23bd78ba9d6c)
:   [maven-release-plugin] prepare for next development iteration

[d8f0ee3954](https://github.com/dcache/dcache/commit/d8f0ee39544e2b978a311168a487869fb66fadda)
:   frontend: include CDC in scheduled activity

[6007c39a82](https://github.com/dcache/dcache/commit/6007c39a822bade0797c75a88786e34e66ce52ff)
:   nfs: include CDC in scheduled activity

[8ba362e928](https://github.com/dcache/dcache/commit/8ba362e92859a9152979766118e34b8e5ee690af)
:   webdav: include CDC in scheduled activity

[a5337a705a](https://github.com/dcache/dcache/commit/a5337a705ab032da638d65ae83b13c5580521508)
:   pool: ensure initialisation thread has correct CDC information

[0e7fcabfd8](https://github.com/dcache/dcache/commit/0e7fcabfd85e5c1579129bcc3445f5d8ffedd18a)
:   jetty: make CanlContextFactory subclass of jetty.ssl.SslContextFactory.Server

[6e566d3d9f](https://github.com/dcache/dcache/commit/6e566d3d9f1cff61f59a7d7358a01960ecc6bb71)
:   pom: use jetty 9.4.17.v20190418

## Release 5.1.2

### alarms

To ease troubleshooting, the POOL_DEAD alarm message now includes the pool name.

### pinmanager

A bug was fixed where PinManager's `bulk ls` admin command yielded a 
NullPointerException if the optional argument was omitted.

A typo prevented the error message "Remote connection failure while unpinning..." from
appearing completely and correctly in the logs. The error message string now contains
the message string of the underlying Exception, hopefully providing helpful details for 
troubleshooting.

### pool

A regression that prevented a replica's last access time from being updated was fixed.

A regression that prevented a replica's position in the LRU queue for garbage collection from being updated was fixed.

inotify's IN_CLOSE_WRITE event was sent at a time when it could not be guaranteed that
the file triggering the event could immediately be opened. This race condition was
fixed, and consumers can start using a file immediately after receiving this event.

### webdav

Users asserting the "admin" role would occasionally receive 
NullPointerExceptions when trying to transfer files through 
WebDAV. This release fixes that issue.


### Changelog 5.1.1..5.1.2

<!-- git log 5.1.1..5.1.2 -no-merges -format='[%h](https://github.com/dcache/dcache/commit/%H)%n:   %s%n' -->

[d8b2275279](https://github.com/dcache/dcache/commit/d8b2275279b227056785ccc1eb9765136b412baf)
:   [maven-release-plugin] prepare release 5.1.2

[6f23091cff](https://github.com/dcache/dcache/commit/6f23091cff991f0ad3d624a6985d3ed87131da29)
:   UnpinProcessor: fix assumed typo `{)`

[438a96a1d9](https://github.com/dcache/dcache/commit/438a96a1d9f2751114331ca2c0def1e372ffb490)
:   webdav: allow transfers as user with role 'admin'

[f914ddcf08](https://github.com/dcache/dcache/commit/f914ddcf08a2015c343606f529e88583d5755d3b)
:   pinmanager: avoid NPE if no argument given for 'bulk ls' command

[71cb623a8d](https://github.com/dcache/dcache/commit/71cb623a8def75bbae086be07fdb5c621c2dfd7d)
:   alarms: add pool name to POOL_DEAD alarm

[033bd83c8c](https://github.com/dcache/dcache/commit/033bd83c8c55447d4155b041b3d81628c9b32dc3)
:   pool: fix reordering of removable replicas on access

[84ed9d20c6](https://github.com/dcache/dcache/commit/84ed9d20c6d73312261bb3f6d3cc187c55560d29)
:   pool: fix storage of replica last access time

[a98a1ce5ad](https://github.com/dcache/dcache/commit/a98a1ce5adf490b3c8bc6959589f5a5240c66ca1)
:   [maven-release-plugin] prepare for next development iteration

[ad9852c91a](https://github.com/dcache/dcache/commit/ad9852c91a25c93c5e1332f7d24bd61d5fd812e6)
:   pool: inotify avoid race in IN_CLOSE_WRITE event

## Release 5.1.1

### Changes affecting multiple services

Stage request from unknown locations resulted in NPE in dcap and pinmanager services.
this is now fixed and using `dccp` to stage a file should work even if the location is unknown. '--'

### frontend

A client that disconnects and quickly reconnects could  had  triggered the following NPE, this is now fixed.

### resilience

The current release fixed  race condition on replica state and no `inaccessible file errors` occures  for a newly written file.


### Changelog 5.1.0..5.1.1

<!-- git log 5.1.0..5.1.1 -no-merges -format='[%h](https://github.com/dcache/dcache/commit/%H)%n:   %s%n' -->

[adba768](https://github.com/dcache/dcache/commit/adba76881ed5d8d67a1b0410f4fb3b9dd7d83b34)
:   [maven-release-plugin] prepare release 5.1.1

[7d7c4c5](https://github.com/dcache/dcache/commit/7d7c4c58d99fc2902ad7573851217e0ef7ce5fd5)
:   dcap/pinmanager: stage request for unknown location results in NPE

[ef3a977](https://github.com/dcache/dcache/commit/ef3a97772284c7a0e5cdc39bbb88b7a3ba756f7d)
:   dcap batch : fix handling of dcap.kafka.topic variable

[fc88f10](https://github.com/dcache/dcache/commit/fc88f1008e475f81b48848e3c321c5b31d4af7dd)
:   dcache-resilience (stable branches): fix race condition on replica state

[0e979ce](https://github.com/dcache/dcache/commit/0e979ce85d8e0d4e5277991030269079a3ecf1a7)
:   frontend: fix race on client reconnecting

[40307e9](https://github.com/dcache/dcache/commit/40307e91f2a61b17d19faac86c577ba80241ff4b)
:   [maven-release-plugin] prepare for next development iteration

## Release 5.1.0

### Alarms

So that they can be given different priority levels, a new alarm,
``POOL_DEAD``, was created to distinguish a pool which is completely
unreachable, from ``POOL_DOWN`` or ``POOL_DISABLED``.

Alarms was also modified in order to be able to support a more modern
version of the logback library.

### Billing

The database connection was wrapped so as to catch fatal exceptions
and report them as alarms (this is already done for other databases
such as chimera).

When using the Kafka messaging system, the "billing" topic was
hardcoded until now. This release introduces a new configuration
variable, `dcache.kafka.topic=billing` to configure this.

When a pool reports a replica was removed, it includes information on
why the replica was deleted.  By default, this information is logged
at the end of the line in double-quotes, where previously an empty
string was logged.

### dCacheView

Support macaroons for sharing files and directories.  There is now an
easy way for a user to generate a pre-authorised URL by requesting a
macaroon from dCache.

Gravatar is an externally run service that maps an email address to an
icon.  The goal is that many independent services may use the same
icon for the same user.  At sites' request, this behaviour is now
optional.

### Frontend

A bug preventing the proper filtering of active transfers according to
uid was fixed.  A reminder as to how this works: (a) admins always see
everything; (b) authenticated users always see their own transfers;
(c) if ``frontend.authz.unlimited-operation-visibility`` is set to
`true`, authenticated users can see all transfers.  Non-authenticated
users can only see anonymous transfers.

The inotify support now includes sending IN_OPEN, IN_ACCESS,
IN_MODIFY, IN_CLOSE_WRITE, IN_CLOSE_NOWRITE events on file activity.
Uploading or writing a file will send IN_OPEN, IN_MODIFY,
IN_CLOSE_WRITE.  Downloading or reading a file will send the IN_OPEN,
IN_ACCESS, IN_CLOSE_NOWRITE events.  Support in the pool for sending
these events is configurable `pool.inotify-generation.enable` (enabled
by default).  Some fine-tuning is possible using
`pool.inotify-generation.backlog.initial`,
`pool.inotify-generation.backlog.per-door` and
`pool.inotify-generation.message-batch-size` where these have the same
meaning as the similarly named `pnfsmanager.` properties.

Sending IN_MODIFY and IN_ACCESS events is rate-limited by the pool, so
that multiple IO operations of the same type generate at most one
event every `pool.inotify-generation.io-suppression`
`pool.inotify-generation.io-suppression.unit` (by default 10 SECONDS).


### FTP

Add support for anonymous FTP.  Anonymous FTP is when the client
authenticates with a place-holder username (e.g., `anonymous` or
`ftp`) and something (perhaps their email address) as the password.
When enabled, dCache will grant limited (read-only) access to that
user.  Many aspects may be configured, including the username
(`anonymous` by default) and whether the password must look like an
email address (by default not enforced).  A specific root directory
may be configured for anonymous users (by default, dCache's root),
further limiting what data is exposed.  The Globus transfer service
uses anonymous access for "archival" access.

Add support for FTPS doors.  This is explicit FTPS sometimes written
as FTP(E)S.  Implicit FTPS is not widely used and is not supported in
dCache.  This new FTP door is represented by a new possible value for
`ftp.authn.protocol`.  Both FTPS and gsiftp encrypt the control
channel and neither support encrypted data transfers.  FTPS doors are
advertised (in info-provider, frontend, etc) with URLs that start
`ftps://`.  Currently, only username and password authentication is
supported.

### gplazma

The ban plugin can now ban users by their uid or gid.

The restrictions infrastructure now supports a mult-targeted
restriction: `MultiTargetedRestriction`.  This allows a plugin to
allow users to have different permissions for different parts of the
namespace.

#### OpenID-Connect

The oidc plugin will introspect JWT to learn issuer.  The access
token, issued by the OpenID-Connect server is opaque; however, a JWT
is a common choice for this token.  If the token is a JWT then the
oidc plugin can discover which OIDC server issued the token.  If
multiple OIDC servers are configured, knowing which one issued the
token avoids having to contact each OIDC server, resulting in a faster
response.

The oidc plugin now accepts the `gplazma.oidc.http.slow-threshold` and
`gplazma.oidc.http.slow-threshold.unit` configuration properties, with
2 SECONDS as default values.  If looking up a user takes longer than
this threshold then the plugin will log the slow query.

The oidc plugin will cache the OIDC discover document.  This document
contains slowly changing information, so it makes sense to cache the
information.  The cache lifetime is controlled by the configuration
properties `gplazma.oidc.discovery-cache` and
`gplazma.oidc.discovery-cache.unit`, with default values of 1 HOUR.
Fetching an up-to-date version of the discovery document when the
cache has expired is done asynchronously: login attempts will use the
old data until the fresh document is received.

The oidc plugin will now query OIDC servers in parallel, if more than
one OIDC server is configured.

The oidc plugin will try to keep the TCP network connections with OIDC
services (used to query a user's identity) alive between subsequent
requests.

The oidc plugin caches a user's identity, as this lookup operation may
be slow for some OIDC servers.  The maximum number of identities
cached is `gplazma.oidc.access-token-cache.size` (by default 1000).
Cached information is refreshed, controlled by
`gplazma.oidc.access-token-cache.refresh` and
`gplazma.oidc.access-token-cache.refresh.unit` (by default 100
SECONDS).  This refresh happens asynchronously: existing login
activity uses the existing data until new information is returned.
Users are automatically removed from the cache if they are idle.  The
expiry time is controlled by `gplazma.oidc.access-token-cache.expire`
and `gplazma.oidc.access-token-cache.expire.unit` (by default 120
SECONDS).

#### SciToken

Add scitoken plugin to support SciTokens.  A SciToken is a bearer
token from some OAuth2 server that uses the JWT format.  The SciToken
includes a description of which activities the bearer to entitled.
The scitoken plugin maps all tokens from the same OAuth2 server to a
single account.  Paths within the SciToken are mapped to dCache paths
by adding a prefix.  The plugin optionally supports t

The `jti` claim is unique for each SciToken.  dCache can prevent
replay attacks by remembering the previous
`gplazma.scitoken.token-history` values and rejecting the token if
already seen.  If the configuration value is zero (the default) then
this feature is disabled.

The `aud` claim describes which service the SciToken was issued.  The
`gplazma.scitoken.audience-targets` configuration property is a
space-separated list of targets that dCache should consider for
itself.  If the configuration property is non-empty then dCache will
reject any SciToken with an `aud` claim that does not match one of the
listed claims.

### NFS

Improve performance of file system locks.

### Pool

For HTTP transfers, the pool now honours the
`pool.mover.http.chunk-size` property.  Some storage backends (in
particular, CEPH) suffer from very poor performance if IO operations
are small.  Setting this property to a larger value will result in the
pool caching incoming data (in memory) so that writes are the
configured size.  When sending data, the pool will try to read this
amount of data before sending it to the client.

When accepting data, the pool may know the file's ultimate size before
the transfer has started; for example, if an HTTP client specifies
the 'Content-Length' HTTP request header in a PUT or an HTTP TPC
request, or if an FTP upload is orchestrated using SRM.  Under these
circumstances, the the pool will now allocate all of that capacity in
the storage backend before initiating the transfer.  This avoids
allocating more capacity with each client write.  Some storage
backends (CEPH in particular) suffer from poor performance if capacity
is allocated incrementally.

Improve error reporting for HTTP Third-party copy.  In particular, the
error message describes any redirection that took place while removing
redundant information.

When making an HTTP third-party PUSH copy, the pool makes an HTTP PUT
request and then verifies that the uploaded file was transferred
correctly by requesting the uploaded file's checksum.  Previously, the
pool always asked for the same set of checksum algorithms,
irrespective of which algorithm values dCache knows for this file.
dCache now builds the list of desired checksum algorithms based on the
known checksums for the file.

When making an HTTP third-party PUSH copy, the pool checks the HTTP
response status code from the server.  The server may response 204 and
205 to indicate a successful upload where the content is identical, a
status code that some systems (including OneData) use.  dCache now
considers 204 and 205 as successful HTTP response codes.

A successful HTTP PUT request for an HTTP third-party PUSH copy does
not guarantee that a subsequent HTTP HEAD request will succeed.  In
particular, a pre-authorised URL (from an S3 endpoint) may allow the
PUT request but not the HEAD request.  Previously, dCache always
considered this to be a failure and failed the request.  Now, if the
transfer is not required to verify checksums then the HEAD request
failure is ignored.

The NFS mover now tells the client that if it wishes to update file
attributes then such requests must go to the door (not the pool).  A
client calling fsync on an open file will now update the file's mtime
and size.

Support pools with multiple tags.  The `pool.tags` configuration
property was meant as a comma-separated list of key-value pairs; e.g.,
`pool.tags = tag1=value1, tag2=value2, ...`.  Due to a bug, a pool had
only one tag, with the remainder tags included in that tag's value
(e.g., `tag1` `value1,tag2=value2`).  Now pools will accept multiple
tags.

### Pool Manager

Added option `-dynamic` to `psu create pool` command to create a pool
group that will dynamically add all pools that have a specific
attribute. Currently, only pool tag, defined by `pool.tags` property
is supported.

Example:
```
>  psu create pgroup -dynamic -tags=zone=A zone-A-pools
```

Will create pool group `zone-A-pools` and any existing pool as well as
any new pool that configured with tag `zone=A` will be automatically
included into that pool group.

Add the ability to disable anonymous staging.  Without enabling
explicit stage protection, dCache allows anyone who can read a file to
stage it.  Various doors allow anonymous access, where any
world-readable files may be read.  If such a file is stored on tape
then an anonymous user could trigger staging of those files.  This
version of dCache has the ability to disallow staging if the user is
not authenticated.

The `psu` admin commands are inconsistent.  Several commands that
support modifying associations have the form `psu addto` and `psu
removefrom` to add and remove an association (respectively).  However,
the commands for managing the associations between pools or poolgroups
and links do not follow this form; instead, the commands are `psu add
link` and `psu unlink`.  This version of dCache fixes this
inconsistency by also supporting the `psu addto link` and `psu
removefrom link` commands.

The `rc failed` admin command documentation is updated, so it no
longer wrongly described the argument as a PNFS-ID.

### Resilience

An important bug (from a race condition) which made resilience
susceptible to causing data loss during removal of excess replicas was
fixed.

Several smaller bug fixes were also applied:

1) The restart command

```
\s Resilience pool ctrl start
```

now properly reinitializes the pool state on the pool operations.

2) The retry command

```
\s Resilience retry errors
```

no longer throws a string index exception.

3.  After excluding a pool, it cannot be scanned under any
circumstances; it must be explicitly included again before scanning
can be activated on it; i.e.,

```
\s Resilience pool include [pool expression]
```

Logging of messages has also been added to resilience in order to be
able to trace its communication with other dCache components.  These
records appear at INFO level in the ``resilience.resilience`` log.

For clarity, the final state of a file operation which ends up being
unnecessary is no longer reported as 'VOID', but as 'NOOP', when you
do:

```
\s Resilience file ls
```

### WebDAV

The HTTP status code returned after successfully initiating an HTTP
third-party-copy is now 202 (Accepted), rather than 200 (OK).  The
HTTP response also includes a Content-Type header describing the
response as `text/perf-marker-stream`.

HTTP third-party copy now supports RFC-3230 'Want-Digest' headers on
COPY requests.  For HTTP PUSH requests, this just acts like an HTTP
HEAD request with the 'Want-Digest' header: the response includes the
file's checksum.  For HTTP PULL requests, dCache will ensure that the
most appropriate checksum algorithm is calculated.  If the client
advertises it suppers HTTP trailers then the checksum value is
returned after the transfer has completed.

### XRootD

The dCache xrootd door/server now supports security level
configuration and signed hash verification. See ``dcache.properties``
under "Xrootd: support for verifying signed hashes (by server/door)"
for information.

We have also added support for mapping clients with valid credentials
to NOBODY; this also enables the current version of third-party-copy
(which lacks the full proxy delegation that will be available in the
next Golden Release [5.2]) to allow destination servers to log in
anonymously to dCache as source during third-party-copy; in this
latter case (only), dCache also allows the server to see
read-protected files.

A bug involving access logging when the door is configured with
HAproxy was fixed, and trace-level logging in general was converted to
debug-level, so that the former may be reserved for handshake packet
dumps only.

### Changes affecting multiple services

Kafka topics can now be set independently for several services using
the variables

    dcache.kafka.topic = billing

(where "billing" is the default value) and the more specific

    dcap.kafka.topic = ${dcache.kafka.topic}
    ftp.kafka.topic = ${dcache.kafka.topic}
    nfs.kafka.topic = ${dcache.kafka.topic}
    pool.kafka.topic = ${dcache.kafka.topic}
    webdav.kafka.topic = ${dcache.kafka.topic}
    xrootd.kafka.topic = ${dcache.kafka.topic}

Macaroons now include an Issue ID (`iid`) caveat, which dCache ensures
is the first caveat in each new macaroon.  The `iid` caveat ensures
that the ID is always unique, even when generated with the same
secret, but that derived macaroons (ones with additional caveats) may
still be identified.

By default, the WebDAV and frontend doors now reject any macaroon sent
on an unencrypted connection.  Although these doors used to accept
macaroons on unencrypted connections and this behaviour is
configurable, we recommend sites accept this change and have dCache
reject unencrypted macaroons.

This version of dCache configures systemd limits in a single place,
avoiding that ineffective configuration is included.

### Changelog from 5.0.0 to 5.1.0

[40307e91f2](https://github.com/dcache/dcache/commit/40307e91f2a61b17d19faac86c577ba80241ff4b)
:   [maven-release-plugin] prepare for next development iteration

[5234c07f2a](https://github.com/dcache/dcache/commit/5234c07f2a0055d9b74735e5d7c66f814bd852f2)
:   [maven-release-plugin] prepare release 5.1.0

[30b6209ad8](https://github.com/dcache/dcache/commit/30b6209ad809df85e07aaf1f8a045f4842f461b4)
:   Revert "docker: Add a way to create docker image"

[92975e7a54](https://github.com/dcache/dcache/commit/92975e7a5404bd6a4f19165d99256ccb8371a352)
:   resilience: adjust synchronization of file operation removal from map

[7c212b24d6](https://github.com/dcache/dcache/commit/7c212b24d681e651cb04c3a544b255ce4b92eb5b)
:   pool: avoid throwing a RuntimeException for non-bugs

[0863f49066](https://github.com/dcache/dcache/commit/0863f490664d3d5873c72266f4036899b6de827e)
:   docs: TheBook UserGuide fix location of edit-me-on-github ribbon

[4b2d9381de](https://github.com/dcache/dcache/commit/4b2d9381de1fdf1e736d55fd69006ec661756b96)
:   docs: TheBook update heading importance to be more consistent

[f8365ec8a7](https://github.com/dcache/dcache/commit/f8365ec8a786102165335905fe40191cfbc5cf80)
:   transfermanager: do not retry starting mover if transfer is not supported

[aac0eb6e52](https://github.com/dcache/dcache/commit/aac0eb6e521cdf67c4fcfe9a4a64cd3f045d6378)
:   pool: avoid log-and-throw anti-pattern

[ec453280d2](https://github.com/dcache/dcache/commit/ec453280d256dceda3ccebadcdfb2774469bdfdb)
:   frontend: ensure client is disconnected when shutting down channel

[a56116e565](https://github.com/dcache/dcache/commit/a56116e56574b3b178fd7df068a6f2adff9e4166)
:   frontend: avoid race on cancelling channel garbage-collect task

[bc68734a3c](https://github.com/dcache/dcache/commit/bc68734a3c4ce0c1dfd78d9553af4c98a2bafb22)
:   transfermanager: avoid NPE on shutdown

[886f36acb3](https://github.com/dcache/dcache/commit/886f36acb393fa93d67c5d8b607f8cd00f8ef4a1)
:   pool: throw exception with meaningful error message

[0fc21c0217](https://github.com/dcache/dcache/commit/0fc21c02178e6fe551c1d799e77a5f05336b5158)
:   [maven-release-plugin] prepare branch 5.1

[68acbbf689](https://github.com/dcache/dcache/commit/68acbbf689a3fff4fd2a4c5fdb7020ccf3ff73ef)
:   docs: add rest API active transfers description

[99f049d6ee](https://github.com/dcache/dcache/commit/99f049d6eed55b9c8e1824b00053ea2746407a54)
:   docs: UserGuide REST API add description of space reservations

[3f3ed31715](https://github.com/dcache/dcache/commit/3f3ed317154a179ecee0d4c5715ac063580fefae)
:   docs/UserGuide add initial frontend QoS description

[4a5c1836bf](https://github.com/dcache/dcache/commit/4a5c1836bf621103b1624710579337b023bb44ed)
:   Remove copy-n-paste error

[eddd8b0670](https://github.com/dcache/dcache/commit/eddd8b0670db243ee84351648a3ce29a041e0d70)
:   docs: add inital information about frontend REST API

[82c0bbc4a3](https://github.com/dcache/dcache/commit/82c0bbc4a38f32baffb61815d8efc643ecfa4ec0)
:   pool: register size of successful zero-length uploads

[136cbe1cde](https://github.com/dcache/dcache/commit/136cbe1cded8d7623c729404ab04ac02e5cf5221)
:   Core: make dCache buildable on non-English locales

[8ac85b095f](https://github.com/dcache/dcache/commit/8ac85b095f547590cc35251f47d56a9622e15b16)
:   docs: add UserGuide

[0ffdd34f46](https://github.com/dcache/dcache/commit/0ffdd34f46b2f77eece486e3f0420e257c1d6e2d)
:   libs: use slf4j-1.7.26

[ef39e437f2](https://github.com/dcache/dcache/commit/ef39e437f22aa38444e86c3f76ade8903a903bc5)
:   Core: make dCache buildable on non-English locales

[3313ca8b8a](https://github.com/dcache/dcache/commit/3313ca8b8a2e9c38e539b194cefe4d20d79c3547)
:   docs: TheBook remove reference to non-existing service

[e3c4223424](https://github.com/dcache/dcache/commit/e3c4223424d42fb37df2bef3669d0e80619463ed)
:   gplazma: oidc better handling if JWT is unknown or invalid

[f0f1379ecc](https://github.com/dcache/dcache/commit/f0f1379ecc0dac24e0372cc6c26c9890db7e43b8)
:   resilience: do not allow pool scans of excluded pools, period

[5733f5e60c](https://github.com/dcache/dcache/commit/5733f5e60c86de0a703cd6e0fad3e3311b441834)
:   alarms: move to logback 1.1.4 and fix handling of MDC

[bab35350a6](https://github.com/dcache/dcache/commit/bab35350a602d23ff6d8a78b7dc0bcdebaa0f218)
:   src: remove dead code (artifacts of ReplicaManager)

[f894624ee0](https://github.com/dcache/dcache/commit/f894624ee0ce050d74774480979357a97e9abdd7)
:   dcache-resilience: fix indexing on retry errors command

[b2dc1245d0](https://github.com/dcache/dcache/commit/b2dc1245d062de4d91a590103634a74281fc6f95)
:   pools: JSON mover info timeInSeconds should be timeInMilliseconds

[0d9963becd](https://github.com/dcache/dcache/commit/0d9963becdda7fc3ff42d27350b120ba18b7d99b)
:   pool: update StateChangeListener classes with change explanation

[b51ca78b8a](https://github.com/dcache/dcache/commit/b51ca78b8a1b412e69c22657879cf3165686a1be)
:   pool: include change explanation in replica monitoring events

[84f3e15e35](https://github.com/dcache/dcache/commit/84f3e15e35d34de12e5c17885c750cd294b5bfae)
:   pool: add explanation field when updating a replica

[3cf5967975](https://github.com/dcache/dcache/commit/3cf5967975e69cb4f1dc7285ad0709e2d851fe55)
:   pool: describe what triggered replica state changes

[fb97274611](https://github.com/dcache/dcache/commit/fb972746112e31c0015abb61070deed9314d907e)
:   ftp: add support for (explicit) FTPS doors

[ec34f0c332](https://github.com/dcache/dcache/commit/ec34f0c332677f2f4761231416163135929b4d3e)
:   resilience: update state on pool operations when restarted from admin command

[07772db56f](https://github.com/dcache/dcache/commit/07772db56f6776b829d45545e91c19141c62ad07)
:   libs: use nfs4j-0.18.2

[aaecade7e4](https://github.com/dcache/dcache/commit/aaecade7e4b2045218bd91e710a0c49d2248bac8)
:   chimera-shell: fix class cast of extractor in constructor

[eddda93d9e](https://github.com/dcache/dcache/commit/eddda93d9ed32f9ccbb5b15d127aae14ff6c31ef)
:   libs: update jetty version to 9.4.12.v20180830

[00d89b7244](https://github.com/dcache/dcache/commit/00d89b7244b9965e223ec10b72430a2ff456ae90)
:   nfs: fix missing CDC initialization

[18dc14c270](https://github.com/dcache/dcache/commit/18dc14c270ec3ccb9de82d62f95d4eaa8ede92e0)
:   dcache: adding more configurations to KafkaProducer

[7e8993fa45](https://github.com/dcache/dcache/commit/7e8993fa4502cb0a777b38e44fbf93078a02815d)
:   gplazma: add SciToken support

[d688b16846](https://github.com/dcache/dcache/commit/d688b16846543ca111f3aaaec9ff68cdc37e5771)
:   common: add multi-targeted restriction

[f7ac12a41a](https://github.com/dcache/dcache/commit/f7ac12a41ad26abce7beffe3e0b9c444e4b91d87)
:   gplazma: ban add ability to select based on uid and gid

[8161f08b81](https://github.com/dcache/dcache/commit/8161f08b81071ce014df66adc2df18b59b5e12b4)
:   resilience: do simple existence check of replica on pool to avoid dark removes

[7069ed2183](https://github.com/dcache/dcache/commit/7069ed2183287217a8ddea2dc7faf0f9793484d7)
:   systemtest: remove ancient replica pools

[4651736dd5](https://github.com/dcache/dcache/commit/4651736dd52b45e64531cc4f0f5c1f2bc5fdba18)
:   pool: add inotify support for open/read/write/close events

[1e5e355150](https://github.com/dcache/dcache/commit/1e5e3551504a698b789cbaef174c441a5b4ec860)
:   docs: mongodb as pool metadata backend

[b66a891fd0](https://github.com/dcache/dcache/commit/b66a891fd08c5c1176701ff44766444ac1494d4b)
:   docs: Fixed lists in config-PoolManager

[7f3fbf0261](https://github.com/dcache/dcache/commit/7f3fbf02618d6acc11db9a7248860497254dc848)
:   docs: RT#9533 and 9494: IPv6

[e5a7041156](https://github.com/dcache/dcache/commit/e5a70411562949734f260a8a569c1ab1f5e12397)
:   docs: RT#9534: Ceph pool backend config

[cd826a7d25](https://github.com/dcache/dcache/commit/cd826a7d253a7d2810fadd892b1a32e521d168f9)
:   gplazma: oidc cache user-info lookup result

[08656e96b5](https://github.com/dcache/dcache/commit/08656e96b5358363c98e048e097f9cf25ecb2cd4)
:   TheBook: some hints on using a banfile (#4740)

[311c7182a1](https://github.com/dcache/dcache/commit/311c7182a1e738f75db2e85a3ce68b883dceaf2a)
:   Fixing example of ban.conf that breaks dCache.

[424f968388](https://github.com/dcache/dcache/commit/424f968388fedef89e83209efe67b22daf35e171)
:   gplazma: oidc fix broken commit

[4a1da8a569](https://github.com/dcache/dcache/commit/4a1da8a569823b214994d8da1f2c93c93f2bff2a)
:   gplazma: oidc optimise network usage

[09d3757069](https://github.com/dcache/dcache/commit/09d3757069e3681407f6593e49694007d79bec13)
:   resilience: add ability to log resilience activity

[18a79e7768](https://github.com/dcache/dcache/commit/18a79e77684d24bf4647c98a752d0a7b27d1bc69)
:   pool: grow file prior HTTP TPC

[884dcc9e8d](https://github.com/dcache/dcache/commit/884dcc9e8ddb552a5c88da8fe45f341219f80985)
:   pom: use rados4j-0.0.4

[549b22cd8b](https://github.com/dcache/dcache/commit/549b22cd8b1950e324fb35e6abd06b9fdf543ee2)
:   resilience: add ability to log resilience activity (incoming)

[87aa817764](https://github.com/dcache/dcache/commit/87aa817764553df0a52f5d331d38e8e2deaf78af)
:   resilience: remove the 'VOID' operation state

[cad57b6561](https://github.com/dcache/dcache/commit/cad57b65613c86b9f876e4b3c9631e49c8f991df)
:   Add documentation to accompany patch 806de4076b3ea7c0ccad3c28abf0bf8430ffacf0

[806de4076b](https://github.com/dcache/dcache/commit/806de4076b3ea7c0ccad3c28abf0bf8430ffacf0)
:   kafka: add ability to specify Kafka topic name

[83c8b1bcd6](https://github.com/dcache/dcache/commit/83c8b1bcd61d6c6f1f1e08c2212f2593eeedae0c)
:   pool-ceph: Failure when initiating a macaroon authz HTTP PUSH, authn with X.509/macaroon to target.

[1ac0ac77fd](https://github.com/dcache/dcache/commit/1ac0ac77fd52079fde8a787a67719bce1d079dd0)
:   Changes to the dCache documentation (TheBook): broken links, typos, formatting, wording, ...

[4c124a11d7](https://github.com/dcache/dcache/commit/4c124a11d7c81267e0b6e16408fa85838eb5c491)
:   gplazma: oidc add discovery cache configuration properties

[2abff00b2e](https://github.com/dcache/dcache/commit/2abff00b2e45dc810d4acc08f9cbe25d00f7f6f1)
:   gplazma: oidc warn slow user-info queries

[69669e6e3f](https://github.com/dcache/dcache/commit/69669e6e3fcdc53990f0c1729c075292c315e0a8)
:   webdav: fix resource name for door root

[53b95fbdb2](https://github.com/dcache/dcache/commit/53b95fbdb226d8ed1fa90834f162295dd4d1991b)
:   Updated dependency list for building on Debian

[5cafe39aad](https://github.com/dcache/dcache/commit/5cafe39aadc991b9a686357511b6cb9a18ef8997)
:   ftp: add support for anonymous FTP access

[f87e4a070c](https://github.com/dcache/dcache/commit/f87e4a070cf6d88e520f6e2e12ea4d5d4a4f93c6)
:   util:add new setter to ConfigurationMapFactoryBean

[ddf9009b52](https://github.com/dcache/dcache/commit/ddf9009b52ba849c0ffb5e56afea0502eff41460)
:   dcache-xrootd: use debug level instead of trace

[2a2455f11c](https://github.com/dcache/dcache/commit/2a2455f11c8e6f93eea82bd830cb16e6d1fa6297)
:   xrootd: upgrade to xrootd4j v3.4.1

[ac5419d132](https://github.com/dcache/dcache/commit/ac5419d1327cd3d35139e25fa2cf92e855ecbfc5)
:   gplazma: oidc introspect JWT to learn issuer

[0f2a60e276](https://github.com/dcache/dcache/commit/0f2a60e2767f65079d6481f9f6df16565de702f4)
:   transfermanagers: recover from non-fatal error starting mover

[277f773dd0](https://github.com/dcache/dcache/commit/277f773dd0546133062f1b8faef59fdbbf6bbc38)
:   pnfsmanager: network issues triggered a NPE

[65b8e499d1](https://github.com/dcache/dcache/commit/65b8e499d12b16029c5514af73f70448b0dd5965)
:   Changed .gitignore to include .reviewboardrc file

[9566a165bb](https://github.com/dcache/dcache/commit/9566a165bb6863ec955a9e72bc35ed593c6505fe)
:   cells: Improving readability of cells communication code

[223992f630](https://github.com/dcache/dcache/commit/223992f63057c311e0605e0e190c3d4664bc2fc8)
:   pool: fix CDC for repository listener notification

[186a407d7f](https://github.com/dcache/dcache/commit/186a407d7f6bafce235c87fd3bf0458375338439)
:   ftp: store calculated checksum using root privileges

[fc8de4575a](https://github.com/dcache/dcache/commit/fc8de4575a3d790304953f66bbfe805faf5dcc85)
:   docs: add initial information about the ftp door

[915d66e454](https://github.com/dcache/dcache/commit/915d66e454861363f2797df5701e3cff179ffb73)
:   util:add unit test to ConfigurationMapFactoryBean

[094f99fc01](https://github.com/dcache/dcache/commit/094f99fc012e62072e6a3dfa7264cd38a6f26397)
:   dcache-xrootd: implement support for security level and signed hashes

[77b0b33708](https://github.com/dcache/dcache/commit/77b0b337085786273447a50efe46fa7736549f59)
:   pnfsmanager: fix regression when querying attributes of the root directory

[9853191a15](https://github.com/dcache/dcache/commit/9853191a15a8e929afc1a9ae6e8d9f2307093bfc)
:   systemtest: fix OpenSSL DN format change

[099d7e2ffc](https://github.com/dcache/dcache/commit/099d7e2ffcd8d71fb8244a9e8c24e73b991b7f2f)
:   core: describe missing FileAttribute in PoolManager message

[2e3c02acc2](https://github.com/dcache/dcache/commit/2e3c02acc21b8f7b4f92903c13f4985244778d0f)
:   systemtest: remove reference to access-log plugin

[968926535c](https://github.com/dcache/dcache/commit/968926535c8df953ec9ee3957b221df42d946491)
:   pnfsmanager: include link information in storageinfo

[949936a21e](https://github.com/dcache/dcache/commit/949936a21e6b3d4a9fbc9a25996f52fba3bbbb8c)
:   poolmanager: introduce dynamic pool groups based on pool tags

[33d957a899](https://github.com/dcache/dcache/commit/33d957a899f4a780278c8bed0ae96df986b49b99)
:   webdav: fix path-to-caveat for macaroon minting endpoint

[59145459e2](https://github.com/dcache/dcache/commit/59145459e28758738bb7dd16423c8b5277e8aadf)
:   cells: changed readme (#4634)

[a4acb0ec79](https://github.com/dcache/dcache/commit/a4acb0ec79dd855f67f1c5bb738fc1afe00132fc)
:   gplazma gridmap plugin: compare DNs ignoring letter case for attribute names

[2b64c115c5](https://github.com/dcache/dcache/commit/2b64c115c57559b65c5755086e16bf363942f824)
:   pool: fix Guava to Java-API migration introduced in 3de5f34179

[478049fbd4](https://github.com/dcache/dcache/commit/478049fbd43241a51a841c1e1b56f6497e75cb32)
:   poolmanager: update 'rc failed' command

[cbd3ceba9f](https://github.com/dcache/dcache/commit/cbd3ceba9f84eaca665ed0b35d9e98bdfcfbfe47)
:   pool: fix tag parsing regression introduces in #7f9a32beec

[dbe93282ce](https://github.com/dcache/dcache/commit/dbe93282ce4fff3ceec8c6117c5cd8aaf18b8399)
:   dcache: Expand star import in Indexer

[70e1b12d6a](https://github.com/dcache/dcache/commit/70e1b12d6ae7e10dfede75c3240938bddc0122c2)
:   docs: describe poolmanager configuration location in zookeeper

[7f9a32beec](https://github.com/dcache/dcache/commit/7f9a32beec85a37ef15f761407633c5aaef89e4d)
:   pool: fix parsing of pool tags

[6c33d339a2](https://github.com/dcache/dcache/commit/6c33d339a2362951a51f965228cb04f963a278bb)
:   webdav: fix NPE when Kafka notified file deletion

[3de5f34179](https://github.com/dcache/dcache/commit/3de5f341796c0e1dd35967febfec12ef62a8eca6)
:   various: replace guava Files usages JDK Files

[aa2883f25a](https://github.com/dcache/dcache/commit/aa2883f25a71b33615e741c15289267ce9f97804)
:   doc: fix typo

[0d8df30064](https://github.com/dcache/dcache/commit/0d8df30064af68e5c14d74e6e7d32d64ccb5e8ff)
:   pool: report correct replica creation time to sweeper

[b5e076fd68](https://github.com/dcache/dcache/commit/b5e076fd68344f5d2223fd0f63316af4a96658b3)
:   psu: remove dead code

[c26df9f1d4](https://github.com/dcache/dcache/commit/c26df9f1d41a7a4a068de0d98d425e853d22e5b4)
:   libs: update to hazelcast-3.11

[137d2ed565](https://github.com/dcache/dcache/commit/137d2ed5657e68eec929e1ae892b9ae15a3cb0a4)
:   xrootd: fix access logging when xrootd door is configured with HAproxy

[bca2869abf](https://github.com/dcache/dcache/commit/bca2869abf8b9439be4a2c815afb687419d4d4c6)
:   webdav/frontend: disabling basic authn should not disable macaroons

[0dc483bdcc](https://github.com/dcache/dcache/commit/0dc483bdcc688909bee187bcade1de49c8ef3ff1)
:   srm: do not log a stack-trace on expected Exception errors

[ea3cdd48cb](https://github.com/dcache/dcache/commit/ea3cdd48cb5c24da96c210d9a696121ac14624fd)
:   webdav/frontend: update default to reject macaroons on unencrypted channels

[3bb180b849](https://github.com/dcache/dcache/commit/3bb180b849a40c99286ee63644b31b54bc31e4cb)
:   transfermanager: fail third-party copy if the file is still being uploaded

[9cb63c2142](https://github.com/dcache/dcache/commit/9cb63c21421085bd98e404ecad0042e24aa1d041)
:   webdav: fail COPY early if file is currently being uploaded

[800c979d74](https://github.com/dcache/dcache/commit/800c979d7476e52bdb55d861fd0a99a8988947e1)
:   transfermanager: abort transfer if there is a bug

[8550267c56](https://github.com/dcache/dcache/commit/8550267c5644ebd5ea0ca024d9ec02a7ab12d977)
:   Fix typo

[224574aced](https://github.com/dcache/dcache/commit/224574acede16509d4a8e611109efde266c92a5a)
:   chimera: README to README.md, clean contents

[690d7f9145](https://github.com/dcache/dcache/commit/690d7f9145afd6945d0e6a3b49c2cc07e61c195a)
:   webdav/frontend: add switch to reject macaroons sent unencrypted

[b3d0f026f0](https://github.com/dcache/dcache/commit/b3d0f026f069ecddc27332cff618ea9d26330010)
:   pool: introduce clone method for FileAttributes

[9fde33d6d8](https://github.com/dcache/dcache/commit/9fde33d6d8e4bd857a7269103ff2f36237b4f1ba)
:   pom: update nfs4j to version 0.18.1

[a95763ecce](https://github.com/dcache/dcache/commit/a95763ecceee490e7f50e42bbe05d859c839187b)
:   gplazma: JAAS plugin logs a stack-trace on misconfiguration

[01c9a760b1](https://github.com/dcache/dcache/commit/01c9a760b1d32b0f809c2cacd6c55de0645a3de6)
:   httpd: write requests on admin webpage to .access-log

[7991e8ed61](https://github.com/dcache/dcache/commit/7991e8ed612fd9293c186b3e1421d90513be21cc)
:   pool: nfs mover always returns DATA_SYNC4 as stable write indication

[f400fcd0a3](https://github.com/dcache/dcache/commit/f400fcd0a3b94a9b9bb5bcff635f79f2eb2cdd8d)
:   packaging: remove redundant systemd configuration, add note to limits file

[eee88ce105](https://github.com/dcache/dcache/commit/eee88ce105fb80210b13b45e32ddb15b06cdfb30)
:   transfermanager: include pool address in the mover start failure message

[6946e79390](https://github.com/dcache/dcache/commit/6946e79390ae06d2b0db655530baaf44032891ea)
:   pool: update error messages to make them distinct

[b0839feca7](https://github.com/dcache/dcache/commit/b0839feca7cbcbe9e0d5e1bc58a4c98496d75f73)
:   poolmanager: update some psu commands to be consistent

[a16ef71546](https://github.com/dcache/dcache/commit/a16ef71546cebeffa650f532313361b16d326f33)
:   pool: avoid using the same error message in multiple places

[131d0ecb6d](https://github.com/dcache/dcache/commit/131d0ecb6dbdc9cb4002f99372b1b8ff6c3fc863)
:   admin: update dependency on mina-sshd library

[1483ee5d12](https://github.com/dcache/dcache/commit/1483ee5d12fbc4b4fb8c842f40495988c09e8ae5)
:   admin: update dependency on mina-sshd library

[c48f8ef30a](https://github.com/dcache/dcache/commit/c48f8ef30a8a9fb41edb3b981494494740f86d8d)
:   libs: use nfs4j-0.18.0

[7cc4963ad6](https://github.com/dcache/dcache/commit/7cc4963ad693b79f4d4809c65b7a04e988a6e4eb)
:   alarms: add pool dead alarm

[b65acf64af](https://github.com/dcache/dcache/commit/b65acf64af074a8c3361c83847d254438f888cb8)
:   webdav.properties: note about redirects to HTTPS

[a1cadfe017](https://github.com/dcache/dcache/commit/a1cadfe01728818db6e98dce221434417b57a47b)
:   pool: fix lookup for canonical hostname for IPv6 addresses

[273821b44e](https://github.com/dcache/dcache/commit/273821b44e2eafbcc4842433e131c0e36c203ae5)
:   doc: add paragraph in direct command execution in admin section

[22270ff344](https://github.com/dcache/dcache/commit/22270ff3448bc41afbca5e2f0d33722fb1bcbb9a)
:   admin : add direct command execution capability

[17f01abd5e](https://github.com/dcache/dcache/commit/17f01abd5e179c33a0206768b5458c99e5f28585)
:   pool: grow file prior FTP upload

[4bb48bed23](https://github.com/dcache/dcache/commit/4bb48bed2380eae46d0a2367685cfec88aae1873)
:   pool: don't update atime on flush

[e4e841630f](https://github.com/dcache/dcache/commit/e4e841630fe4750cd9c18001719cf62d48c72d9f)
:   pnfsmanager: do not emit IN_ATTRIB event on atime updates

[3e6e7cf782](https://github.com/dcache/dcache/commit/3e6e7cf78250ad83dc423e215dac056cda1d94fd)
:   scripts: fix 'dcache pool yaml' command

[63b864039e](https://github.com/dcache/dcache/commit/63b864039e5e9b44ff4d08696d07d370f966f82e)
:   webdav: 401 for unauthenticated requests; message in status line

[b2d7393ba3](https://github.com/dcache/dcache/commit/b2d7393ba3e084fa049bb7d5f6a8f15a15c45889)
:   dcache, frontend: release dcache-view version 1.5.3

[7a9ac72b11](https://github.com/dcache/dcache/commit/7a9ac72b11a91506dade1ee78f94b2ec3e00b649)
:   door: fix issue 4551 (wring storage)

[63438af62d](https://github.com/dcache/dcache/commit/63438af62d484ce7064d9bf51a706cc9918c4e70)
:   Update config-chimera.md

[b508529b83](https://github.com/dcache/dcache/commit/b508529b838f5d92a6286b916cd50ea89bb1a2cc)
:   Update config-write-token.md

[99ddbf5050](https://github.com/dcache/dcache/commit/99ddbf50506499c265bf77749337a4324cff01a9)
:   ftp: fix MLSC command for non-small directories

[37c3a825c1](https://github.com/dcache/dcache/commit/37c3a825c144edd3441fbe62fbc039968a2fb101)
:   pom: update maven-git-commit-id-plugin to version 2.2.6

[d936ee8bf4](https://github.com/dcache/dcache/commit/d936ee8bf47549f56bab0c39a6517b351ef6091f)
:   dcache-xrootd: remove mv request hack

[31e4f9c818](https://github.com/dcache/dcache/commit/31e4f9c818516f1989b8fad3948be238c833df0b)
:   dcache-frontend: add documentation concerning restores

[71367f26e0](https://github.com/dcache/dcache/commit/71367f26e064d2d1aa3e36101861c11110b96880)
:   dcache-xrootd: Allow ROOT read access by destination server when dCache is the source in a third-party transfer.

[4e2e589eee](https://github.com/dcache/dcache/commit/4e2e589eee771268d3a34b8101facd737b00fc89)
:   pom.xml: update xrootd4j dependency to 3.3.4

[8a7ced4cc5](https://github.com/dcache/dcache/commit/8a7ced4cc5a3285398f005e3130b5be364f258bb)
:   dcache-frontend: undefined suid parameter on transfers should be NULL not "null"

[5f82d2710e](https://github.com/dcache/dcache/commit/5f82d2710ef8ff76748321c70135c71d5b7715e2)
:   dcache: update kafka-client lib version to 2.1.0

[cecd828583](https://github.com/dcache/dcache/commit/cecd828583468f6449a4cbdb597568a92af589c7)
:   macaroon: add an issue ID caveat

[1e9353e8de](https://github.com/dcache/dcache/commit/1e9353e8de4dd5ecd79d427139fe17b97d373a6a)
:   webdav/pool: add support for RFC3230 Want-Digest on COPY command

[24bf16cbf6](https://github.com/dcache/dcache/commit/24bf16cbf62081c7e169bd4308a7442dd115a337)
:   pool: http-TPC do not fail if HEAD fails for non-verified transfer

[dd66bf0ea3](https://github.com/dcache/dcache/commit/dd66bf0ea3256f8d05e110a54d016d8d968e9da5)
:   pool: http-TPC consider more PUT response codes as successful

[ad17e63ac0](https://github.com/dcache/dcache/commit/ad17e63ac0421b874935d3fb1f6f6fa94b5f28ec)
:   pool: remove desired checksum from ChecksumMover

[606c8236b7](https://github.com/dcache/dcache/commit/606c8236b731906c89d8321006a3abbb6aeade05)
:   nfs: do not filter device's IP addresses based on site locality

[f29ddeab04](https://github.com/dcache/dcache/commit/f29ddeab04ec7dabc676f0245db04aee540e8f1a)
:   dcache: wrap billing data source with AlarmEnabledDataSource

[1f8a3c8322](https://github.com/dcache/dcache/commit/1f8a3c832235886b60fc82ddaa6f5461e92751b9)
:   pool: HTTP TPC create 'Want-Digest' value based on known checksums

[6c17311370](https://github.com/dcache/dcache/commit/6c17311370cec475cb788b5030e4dc621207d9bf)
:   common: fix random data generation in TimeseriesHistogram unit test

[1c17e70bf8](https://github.com/dcache/dcache/commit/1c17e70bf8774b27368c91b343a1366d43a3a689)
:   docs: clarify requirement gplazma.ldap.try-uid-mapping option

[a7bc5ef250](https://github.com/dcache/dcache/commit/a7bc5ef2507e47d49ac7e22567571b9cc4cc1b14)
:   webdav: work-around Milton racy API for creating collections

[3f5d8f8255](https://github.com/dcache/dcache/commit/3f5d8f8255db47b2a55c8d93018536baed54cfa4)
:   poolmanager: add ability to disable anonymous staging

[a42022b6c1](https://github.com/dcache/dcache/commit/a42022b6c1c3d02d496c5b32b0848ee1ebeeaebe)
:   webdav: fix name of root

[4560d3f4ba](https://github.com/dcache/dcache/commit/4560d3f4ba91d1d480bec9cb099fd291c556465f)
:   webdav: add Content-Type and fix status

[4f29cba8a0](https://github.com/dcache/dcache/commit/4f29cba8a0b1784ca16687e6afe9aa58f907f915)
:   pool: move ChecksumChannel creation out of AbstractMover

[32e1cbb7ee](https://github.com/dcache/dcache/commit/32e1cbb7eec2e2a7cdd541774738e0612003595e)
:   pom: use rados4j-0.0.3 with ARM64 support

[220e2f19ef](https://github.com/dcache/dcache/commit/220e2f19efc02e153aca885c1108d2bf8a0afbc4)
:   Removing version reference

[57f1e6b460](https://github.com/dcache/dcache/commit/57f1e6b4602ff40a1c48d6a2170493848651026b)
:   Remove version reference in new paragraph

[73ffa3dff3](https://github.com/dcache/dcache/commit/73ffa3dff37b87ae8b8ccd68fb0bde46ad506761)
:   Update cookbook-transport-security.md

[563094fb82](https://github.com/dcache/dcache/commit/563094fb8264e2b0e00a21cfd7bfd42b54b807f5)
:   pom: use nfs4j-0.17.10

[73a107892f](https://github.com/dcache/dcache/commit/73a107892f610233794d9d2a39af03500c4858ca)
:   pool: improve error logging for failed HTTP third-party copies

[b7d3b663ac](https://github.com/dcache/dcache/commit/b7d3b663ac0ec455202b1a9cd826a047a78502b7)
:   gplazma voms plugin: add trust anchor refresh paramater

[9c526832cf](https://github.com/dcache/dcache/commit/9c526832cf84f8d94128cd1883a3d1c644ee1e9e)
:   srm: include TLS/SSL port in 'dcache ports' command

[41c32a8c14](https://github.com/dcache/dcache/commit/41c32a8c14b70fad7728e3151e1766050d919044)
:   dcache, frontend: release dcache-view version 1.5.1

[653bb697bb](https://github.com/dcache/dcache/commit/653bb697bbf24930decdd9717d0fe11c268c74ce)
:   pool: fix HTTP chunked upload

[806e8bc3d1](https://github.com/dcache/dcache/commit/806e8bc3d160842e0010de6838666841ad3ebadd)
:   xrootd: support mapping clients with valid credentials to NOBODY

[b36842c800](https://github.com/dcache/dcache/commit/b36842c8000c3348966819a428d1586fac6f6b81)
:   libs: use nfs4j-0.17.9

[4fd18c5dbe](https://github.com/dcache/dcache/commit/4fd18c5dbe9597292bb15746633204fe701503db)
:   pool: grow file prior HTTP upload

[4d91d68ca4](https://github.com/dcache/dcache/commit/4d91d68ca4bdac3f225ee2dec1279b0b100e1114)
:   Update BUILDING.md

[a0a53eef1f](https://github.com/dcache/dcache/commit/a0a53eef1f6c5aacb69c9e56796c064604eb3ce7)
:   pool: let http mover respect pool.mover.http.chunk-size

[169e6579ea](https://github.com/dcache/dcache/commit/169e6579ea692e61a594826836093037ce1ca4b8)
:   [maven-release-plugin] prepare for next development iteration


</div>
</div>
</div>

<script src="https://ajax.googleapis.com/ajax/libs/jquery/1.11.3/jquery.min.js" type="text/javascript"></script>
<script src="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.6/js/bootstrap.min.js"
        integrity="sha384-0mSbJDEHialfmuBBQP6A4Qrprq5OVfW37PRR3j5ELqxss1yVqOtnepnHVP9aJ7xS" crossorigin="anonymous"></script>