 |
 |
Hi Pete, Peter Elmer wrote: > Hi Andreas, > > XrdClientAdmin and the standalone tools don't use the ROOT environment > (which is what the BaBar KanAccess.cfg fills for BaBar applications). I was suspecting that :-(. > I'm > not really sure where that is configured for the standalone tools. Fabrizio? > > [That said, you are approaching CNAF levels for complexity of site > configuration!! How many different OS versions are you running? ;-)] I'm really trying hard :-). Cheers, Andreas > > Pete > > On Mon, Sep 12, 2005 at 03:21:04PM +0200, Andreas Petzold wrote: > >>during babar skim production I'm seeing the following error message: >> >>050912 15:05:36 001 Xrd: : (C) 2004 SLAC XrdClientAdmin 0.3 >>2005-09-12 15:09:41 12995 Err : CheckHostDomain - Access >>to domain 10.65.5.115 is not allowed nor denied. Not Allowed. >>2005-09-12 15:09:41 12995 Err : HandleServerError - >>Redirection to a server out-of-domain disallowed. >>2005-09-12 15:09:41 12995 Err : HandleServerError - New >>host: 10.65.5.115 >>2005-09-12 15:09:41 12995 Err : HandleServerError - (list >>of allowed domains: gridka.de) >>2005-09-12 15:09:41 12995 Err : HandleServerError - Abort. >> >>In my babar KanAccess.cfg I have: >> >>rootenv Root.XTNetFileAllowWanConnect 1 >>rootenv Root.XTNetFileAllowWanRedirect 1 >>rootenv XNet.ConnectDomainAllowRE fzk.de|gridka.de|65.10.110|65.5.115 >>rootenv XNet.RedirDomainAllowRE fzk.de|gridka.de|65.10.110|65.5.115 >> >>I thought that this should be sufficient to allow access to all our >>servers. But it looks like this is not respected. Is there any other >>play where I need to tell xrootd/xrdcp/xrd* that connection acros >>certain domains are ok? >> >> Cheers, >> >> Andreas > > > > > ------------------------------------------------------------------------- > Peter Elmer E-mail: [log in to unmask] Phone: +41 (22) 767-4644 > Address: CERN Division PPE, Bat. 32 2C-14, CH-1211 Geneva 23, Switzerland > -------------------------------------------------------------------------