Hi Marcus,
The problem is not with your config. The problem is that the cert that the
gfal-copy is supposed to use has not been setup in the server. For
instance, if you did a proxy_init (e.g. voms-proxy-init) then a proxy cert
would writte to /tmp with a "standard name". You can also use envars to
pint to the correct proxy cert that needs to be used. Note that because
this is a proxy cert you wil need to periodically regenerate it before it
expires (e.g. a cron job).
So, to reinterate, the message indicates that on of the authentication
protocols succeeded. The most likely scenaion iis that the server wanted
to use x509 (e.g. gsi) but the cert was not setup for gfalcopy to use.
Andy
On Tue, 24 Jan 2023, Marcus Lee wrote:
> Hey,
>
> I have been tryign to configure xrootd to perform tpc over the root protocol and have mostly been trying to follow the instructions in the official reference and on the Xrootd HowTos (https://xrootd-howto.readthedocs.io/en/latest/tpc/) but I keep getting the error:
>
> gfal-copy error: 52 (Invalid exchange) - Error on XrdCl::CopyProcess::Run(): [ERROR] Server responded with an error: [3030] [FATAL] Auth failed: No protocols left to try (source)
>
> and I'm not sure how to debug it. I've attached the configuration I've been using so far. For the pgm parameter for ofs.tpc I've tried xrdcp, xrdcp --server, and the xrootd-tpc.sh script shown on the Xrootd HowTos
>
> Thanks
>
>
> ########################################################################
> Use REPLY-ALL to reply to list
>
> To unsubscribe from the XROOTD-L list, click the following link:
> https://listserv.slac.stanford.edu/cgi-bin/wa?SUBED1=XROOTD-L&A=1
>
########################################################################
Use REPLY-ALL to reply to list
To unsubscribe from the XROOTD-L list, click the following link:
https://listserv.slac.stanford.edu/cgi-bin/wa?SUBED1=XROOTD-L&A=1
|