Hi Pete,
Peter Elmer wrote:
> Hi Andreas,
>
> XrdClientAdmin and the standalone tools don't use the ROOT environment
> (which is what the BaBar KanAccess.cfg fills for BaBar applications).
I was suspecting that :-(.
> I'm
> not really sure where that is configured for the standalone tools. Fabrizio?
>
> [That said, you are approaching CNAF levels for complexity of site
> configuration!! How many different OS versions are you running? ;-)]
I'm really trying hard :-).
Cheers,
Andreas
>
> Pete
>
> On Mon, Sep 12, 2005 at 03:21:04PM +0200, Andreas Petzold wrote:
>
>>during babar skim production I'm seeing the following error message:
>>
>>050912 15:05:36 001 Xrd: : (C) 2004 SLAC XrdClientAdmin 0.3
>>2005-09-12 15:09:41 12995 Err : CheckHostDomain - Access
>>to domain 10.65.5.115 is not allowed nor denied. Not Allowed.
>>2005-09-12 15:09:41 12995 Err : HandleServerError -
>>Redirection to a server out-of-domain disallowed.
>>2005-09-12 15:09:41 12995 Err : HandleServerError - New
>>host: 10.65.5.115
>>2005-09-12 15:09:41 12995 Err : HandleServerError - (list
>>of allowed domains: gridka.de)
>>2005-09-12 15:09:41 12995 Err : HandleServerError - Abort.
>>
>>In my babar KanAccess.cfg I have:
>>
>>rootenv Root.XTNetFileAllowWanConnect 1
>>rootenv Root.XTNetFileAllowWanRedirect 1
>>rootenv XNet.ConnectDomainAllowRE fzk.de|gridka.de|65.10.110|65.5.115
>>rootenv XNet.RedirDomainAllowRE fzk.de|gridka.de|65.10.110|65.5.115
>>
>>I thought that this should be sufficient to allow access to all our
>>servers. But it looks like this is not respected. Is there any other
>>play where I need to tell xrootd/xrdcp/xrd* that connection acros
>>certain domains are ok?
>>
>> Cheers,
>>
>> Andreas
>
>
>
>
> -------------------------------------------------------------------------
> Peter Elmer E-mail: [log in to unmask] Phone: +41 (22) 767-4644
> Address: CERN Division PPE, Bat. 32 2C-14, CH-1211 Geneva 23, Switzerland
> -------------------------------------------------------------------------
|