Hello,
after an upgrade on a client machine we see cryptography protocol errors
in the output of xrdfs. It seems to happen with the "ls" command only.
It does not happen with "locate" for example.
The message "Protocol not supported" is repeated for the numbers of data
servers used.
Other clients with the "old" libs do not show up this message.
Stracing the xrdfs command shows that every data server is contacted and
the error message is generated. No hint (well, for me) what and why it
is failing.
Heiko
Auth config part:
xrootd.seclib /usr/lib/libXrdSec.so
sec.protocol /usr/lib sss -s /etc/xrootd/sss.keytab
sec.protocol unix
acc.authdb /etc/xrootd/Authfile
acc.authrefresh 60
ofs.authorize
CLIENT # xrdfs REDIRECTOR ls /data
Secsss: 0x30 cryptography load failed; Protocol not supported
... <repeated for the number of data servers> ...
Secsss: 0x30 cryptography load failed; Protocol not supported
followed by directory output.
Lib versions on the failing machine:
libglobus-gsi-openssl-error0/xenial,now 3.8-1+gt6.xenial amd64
[Installiert,automatisch]
libglobus-gsi-proxy-ssl1/xenial,now 5.10-1+gt6.xenial amd64
[Installiert,automatisch]
libglobus-openssl-module0/xenial,now 4.8-2+gt6.xenial amd64
[Installiert,automatisch]
libgnutls-openssl27/xenial-updates,now 3.4.10-4ubuntu1.4 amd64 [installiert]
libio-socket-ssl-perl/xenial,xenial,now 2.024-1 all
[Installiert,automatisch]
libnet-ssleay-perl/xenial,now 1.72-1build1 amd64 [Installiert,automatisch]
libssl-dev/xenial-updates,xenial-security,now 1.0.2g-1ubuntu4.12 amd64
[installiert]
libssl-doc/xenial-updates,xenial-updates,xenial-security,xenial-security,now
1.0.2g-1ubuntu4.12 all [Installiert,automatisch]
libssl1.0.0/xenial-updates,xenial-security,now 1.0.2g-1ubuntu4.12 amd64
[installiert]
openssl/xenial-updates,xenial-security,now 1.0.2g-1ubuntu4.12 amd64
[installiert]
python-openssl/xenial,xenial,now 0.15.1-2build1 all [Installiert,automatisc
Lib versions on a flawless machine:
libglobus-gsi-openssl-error0/xenial,now 3.5-5 amd64
[Installiert,automatisch]
libglobus-gsi-proxy-ssl1/xenial,now 5.7-5 amd64 [Installiert,automatisch]
libglobus-openssl-module0/xenial,now 4.6-5 amd64 [Installiert,automatisch]
libgnutls-openssl27/xenial-updates,now 3.4.10-4ubuntu1.4 amd64 [installiert]
libssl-dev/xenial-updates,xenial-security,now 1.0.2g-1ubuntu4.12 amd64
[installiert]
libssl-doc/xenial-updates,xenial-updates,xenial-security,xenial-security,now
1.0.2g-1ubuntu4.12 all [Installiert,automatisch]
libssl1.0.0/xenial-updates,xenial-security,now 1.0.2g-1ubuntu4.12 amd64
[installiert]
openssl/xenial-updates,xenial-security,now 1.0.2g-1ubuntu4.12 amd64
[installiert]
--
-----------------------------------------------------------------------
Dipl.-Ing. Heiko Schröter
Institute of Environmental Physics (IUP) phone: ++49-(0)421-218-62092
Institute of Remote Sensing (IFE) fax: ++49-(0)421-218-62070
University of Bremen (FB1)
P.O. Box 330440 email: [log in to unmask]
Otto-Hahn-Allee 1
28359 Bremen
Germany
-----------------------------------------------------------------------
########################################################################
Use REPLY-ALL to reply to list
To unsubscribe from the XROOTD-L list, click the following link:
https://listserv.slac.stanford.edu/cgi-bin/wa?SUBED1=XROOTD-L&A=1
|