Hi Fabrizio,
I'm pretty sure they are using the perl wrapper, is there a way to
configure it for that?
regards,
Stephen.
On Mon, 12 Sep 2005, Fabrizio Furano wrote:
> Hi,
>
> Yes, right.
>
> If you are using the classes from C++ code (maybe even through the posix
> wrapper), then (to enable everything) you have to add something like this:
>
> EnvPutString( NAME_REDIRDOMAINALLOW_RE, "*" );
> EnvPutString( NAME_CONNECTDOMAINALLOW_RE, "*" );
> EnvPutString( NAME_REDIRDOMAINDENY_RE, "" );
> EnvPutString( NAME_CONNECTDOMAINDENY_RE, "" );
>
> These are the settings that xrdcp uses, so I suppose that you are not getting
> that message from xrdcp/xrd/xrdadmin (are you, Andreas?).
> If you don't want to enable everything, just use the usual syntax with | and
> * .
>
> In general, the code uses the values got from the XrdClient internal
> environment, while the tools have some other way to change those values.
>
> Fabrizio
>
> On Monday 12 September 2005 03:24 pm, Peter Elmer wrote:
> > Hi Andreas,
> >
> > XrdClientAdmin and the standalone tools don't use the ROOT environment
> > (which is what the BaBar KanAccess.cfg fills for BaBar applications). I'm
> > not really sure where that is configured for the standalone tools.
> > Fabrizio?
> >
> > [That said, you are approaching CNAF levels for complexity of site
> > configuration!! How many different OS versions are you running? ;-)]
> >
> > Pete
> >
> > On Mon, Sep 12, 2005 at 03:21:04PM +0200, Andreas Petzold wrote:
> > > during babar skim production I'm seeing the following error message:
> > >
> > > 050912 15:05:36 001 Xrd: : (C) 2004 SLAC XrdClientAdmin 0.3
> > > 2005-09-12 15:09:41 12995 Err : CheckHostDomain - Access
> > > to domain 10.65.5.115 is not allowed nor denied. Not Allowed.
> > > 2005-09-12 15:09:41 12995 Err : HandleServerError -
> > > Redirection to a server out-of-domain disallowed.
> > > 2005-09-12 15:09:41 12995 Err : HandleServerError - New
> > > host: 10.65.5.115
> > > 2005-09-12 15:09:41 12995 Err : HandleServerError - (list
> > > of allowed domains: gridka.de)
> > > 2005-09-12 15:09:41 12995 Err : HandleServerError - Abort.
> > >
> > > In my babar KanAccess.cfg I have:
> > >
> > > rootenv Root.XTNetFileAllowWanConnect 1
> > > rootenv Root.XTNetFileAllowWanRedirect 1
> > > rootenv XNet.ConnectDomainAllowRE fzk.de|gridka.de|65.10.110|65.5.115
> > > rootenv XNet.RedirDomainAllowRE fzk.de|gridka.de|65.10.110|65.5.115
> > >
> > > I thought that this should be sufficient to allow access to all our
> > > servers. But it looks like this is not respected. Is there any other
> > > play where I need to tell xrootd/xrdcp/xrd* that connection acros
> > > certain domains are ok?
> > >
> > > Cheers,
> > >
> > > Andreas
> >
> > -------------------------------------------------------------------------
> > Peter Elmer E-mail: [log in to unmask] Phone: +41 (22) 767-4644
> > Address: CERN Division PPE, Bat. 32 2C-14, CH-1211 Geneva 23, Switzerland
> > -------------------------------------------------------------------------
>
--
/------------------------------------+-------------------------\
|Stephen J. Gowdy | SLAC, MailStop 34, |
|http://www.slac.stanford.edu/~gowdy/ | 2575 Sand Hill Road, |
|http://calendar.yahoo.com/gowdy | Menlo Park CA 94025, USA |
|EMail: [log in to unmask] | Tel: +1 650 926 3144 |
\------------------------------------+-------------------------/
|