URL:
<http://savannah.cern.ch/bugs/?97585>
Summary: Xrootd GSI Authentication Fails in SL6
Project: XROOTD
Submitted by: dstrain
Submitted on: 2012-09-18 20:17
Severity: 3 - Normal
Priority: 5 - Normal
Status: None
Privacy: Public
Assigned to: None
Originator Email:
Open/Closed: Open
Discussion Lock: Any
Fixed by commit(s):
_______________________________________________________
Details:
On SL6, when enabling GSI authentication through a line in xrootd.cfg similar
to:
sec.protocol /usr/lib64 gsi -certdir:/etc/grid-security/certificates
-cert:/etc/grid-security/xrd/xrdcert.pem
-key:/etc/grid-security/xrd/xrdkey.pem -crl:3 -authzfun:libXrdLcmaps.so
-authzfunparms:--osg,--lcmapscfg,/etc/xrootd/lcmaps.cfg,--loglevel,0|useglobals
--gmapopt:2 --gmapto:0
This fails in SL6 with lines in the xrootd.log:
120918 14:52:49 2408 secgsi_GetSrvCertEnt: problems loading srv cert: invalid
PKI
120918 14:52:49 2408 secgsi_Init: problems loading srv cert
120918 14:52:49 2408 secgsi_Init: Secgsi: ErrError: no valid server
certificate found
Note that SL6 contains openSSL 1.0 (not 0.9), which is likely the issue.
_______________________________________________________
Reply to this item at:
<http://savannah.cern.ch/bugs/?97585>
_______________________________________________
Message sent via/by LCG Savannah
http://savannah.cern.ch/
########################################################################
Use REPLY-ALL to reply to list
To unsubscribe from the XROOTD-DEV list, click the following link:
https://listserv.slac.stanford.edu/cgi-bin/wa?SUBED1=XROOTD-DEV&A=1
