Hi Andreas,
XrdClientAdmin and the standalone tools don't use the ROOT environment
(which is what the BaBar KanAccess.cfg fills for BaBar applications). I'm
not really sure where that is configured for the standalone tools. Fabrizio?
[That said, you are approaching CNAF levels for complexity of site
configuration!! How many different OS versions are you running? ;-)]
Pete
On Mon, Sep 12, 2005 at 03:21:04PM +0200, Andreas Petzold wrote:
> during babar skim production I'm seeing the following error message:
>
> 050912 15:05:36 001 Xrd: : (C) 2004 SLAC XrdClientAdmin 0.3
> 2005-09-12 15:09:41 12995 Err : CheckHostDomain - Access
> to domain 10.65.5.115 is not allowed nor denied. Not Allowed.
> 2005-09-12 15:09:41 12995 Err : HandleServerError -
> Redirection to a server out-of-domain disallowed.
> 2005-09-12 15:09:41 12995 Err : HandleServerError - New
> host: 10.65.5.115
> 2005-09-12 15:09:41 12995 Err : HandleServerError - (list
> of allowed domains: gridka.de)
> 2005-09-12 15:09:41 12995 Err : HandleServerError - Abort.
>
> In my babar KanAccess.cfg I have:
>
> rootenv Root.XTNetFileAllowWanConnect 1
> rootenv Root.XTNetFileAllowWanRedirect 1
> rootenv XNet.ConnectDomainAllowRE fzk.de|gridka.de|65.10.110|65.5.115
> rootenv XNet.RedirDomainAllowRE fzk.de|gridka.de|65.10.110|65.5.115
>
> I thought that this should be sufficient to allow access to all our
> servers. But it looks like this is not respected. Is there any other
> play where I need to tell xrootd/xrdcp/xrd* that connection acros
> certain domains are ok?
>
> Cheers,
>
> Andreas
-------------------------------------------------------------------------
Peter Elmer E-mail: [log in to unmask] Phone: +41 (22) 767-4644
Address: CERN Division PPE, Bat. 32 2C-14, CH-1211 Geneva 23, Switzerland
-------------------------------------------------------------------------
