Fix condor-ce service startup

This release fixes a stacktrace that can occur on condor-ce service startup when the required QUEUE_SUPER_USER_MAY_IMPERSONATE = .* configuration is not set for HTCondor batch systems (#245).

SciTokens support, disabled job retries, and configuration reorganization

We're pleased to announce the next major version of HTCondor-CE, 4.0.0! This release includes the following changes:

• SciTokens support if using an HTCondor version that supports SciTokens (e.g. the OSG-distributed HTCondor 8.9.2).

• Disabled job retries by default since most jobs submitted through HTCondor-CEs are actually resource requests (i.e. pilot jobs) instead of jobs containing user payloads. Therefore, it's preferred to prevent these jobs from retrying and instead wait for additional resource requests to be submitted. To re-enable job retries, set the following in your configuration:

    ENABLE_JOB_RETRIES = True
  

• Simplified daemon authentication: HTCondor-CE now uses FS authentication between its own daemons instead of GSI.

• Simplified remote CE requirements format: Remote CE requirements are a way to specify batch system directives that aren't directly supported in the job router for non-HTCondor batch systems. In the past, specifying these directives were often quite complicated. For example, a snippet from an example job route:

    set_default_remote_cerequirements = strcat("Walltime == 3600 && AccountingGroup =="", x509UserProxyFirstFQAN, "\"");
  

  The HTCondor 8.8 series allows users to specify the same logic using a simplified format within job routes. The same expression above can be written as the following snippet:

    set_WallTime = 3600;
    set_AccountingGroup = x509UserProxyFirstFQAN;
    set_default_CERequirements = "Walltime,AccountingGroup";
  

• Reorganized HTCondor-CE configuration: configuration that admins are expected to change is in /etc/condor-ce/config.d/, other configuration is in /usr. Watch out for *.rpmnew files, particularly for /etc/condor-ce/condor_mapfile.rpmnew and /etc/condor-ce/config.d/*.conf.rpmnew, and merge changes into your existing configuration.

• OSG domain changes: OSG builds of HTCondor-CE now use the standard htcondor.org domain for mapped principles. For example, UID_DOMAIN is now users.htcondor.org instead of users.opensciencegrid.org. If you've made changes to the default HTCondor-CE configuration, you may need to update any configuration to use *.htcondor.org.

• Moved most OSG-specific configuration into the OSG CE metapackage (SOFTWARE-3813)

• Increased the default maximum walltime to 72 hours

Reorganize configuration and simplify remote CE requirements (Release Candidate 2)

• Use simplified remote CE requirements format: https://htcondor-wiki.cs.wisc.edu/index.cgi/tktview?tn=6133,86.
  Remote CE requirements
  are a way to specify batch system directives that aren't directly supported in the job router for non-HTCondor batch systems.
  In the past, specifying these directives were often quite complicated. For example, a snippet from an example job route:

    set_default_remote_cerequirements = strcat("Walltime == 3600 && AccountingGroup =="", x509UserProxyFirstFQAN, "\"");
  

  The HTCondor 8.8 series allows us to use a simplified format within job routes.
  The same expression above can be written as the following snippet:

    set_WallTime = 3600;
    set_AccountingGroup = x509UserProxyFirstFQAN;
    set_default_CERequirements = "Walltime,AccountingGroup";
  

• Reorganize HTCondor-CE configuration: configuration that admins are expected to change is in /etc/condor-ce/config.d/, other configuration is in /usr

• Move most OSG-specific configuration into the OSG CE metapackage (SOFTWARE-3813)

• Increase the default maximum walltime to 72 hours

Add SciTokens support (Release Candidate 1)

This is a pre-release of the next major version of HTCondor-CE. This pre-release includes initial SciTokens support, which requires HTCondor built with SciTokens support (the default in HTCondor 8.9.3)

v3.3.0

• Add APEL support for HTCondor-CE and HTCondor backends
• Store malformed ads reporting to htcondor-ce-collector

v3.2.2

• Make blahp requirement binary package specific (SOFTWARE-3623)
• Added condor_ce_store_cred for PASSWORD authentication
• Use new multi-line syntax configuration syntax (SOFTWARE-3637)
• Update MyOSG URL and queries

Version 3.2.1

• Explicitly set ALLOW_READ to support HTCondor 8.9 (SOFTWARE-3538)
• Add timeouts to the BDII provider

v3.2.0

• Map certs with VOMS attr before local daemons (SOFTWARE-3489)
• Send CEView keepalives as the condor user (SOFTWARE-3486)

v3.1.4

• Fix condor_ce_trace failures caused by transferring /usr/bin/env (SOFTWARE-3387)
• Fix regex for RDIG certs (SOFTWARE-3399)
• Don't require authz check for condor_ce_q (SOFTWARE-3414)

v3.1.3

Fix condor_ce_info_status using the wrong port for the central collector (SOFTWARE-3381)