Print

Print


hi,

So, my understanding is that the authorisation via the head node
happens because the /etc/xrootd/xrootd-dpmdisk.cfg contains the line:

ofs.authlib libXrdDPMDiskAcc.so.3

There's no reason why you can't run another "basic" xrootd client on
one or more disk servers (in addition to the one that talks to DPM
head for authentication).

You'll need to make another config file in /etc/xrootd/, configuring
the service as a "standalone" xrootd, and probably change the xrd.port
to a number different to 1095 so it doesn't conflict with the DPM
service.

(And then add a new configuration variable to /etc/sysconfig/xrootd:

XROOTD_MYXROOTD="-l /var/log/xrootd/xrootd.log -c
/etc/xrootd/xrootd-myxrootd.cfg"

and the relevant token to XROOTD_INSTANCES

XROOTD_INSTANCES="disk myxrootd"

)

AFAICT, restarting xrootd at this point should bring the "disk"
instance up, along with your new "myxrootd" instance.

(Do ask David Smith before doing this if you're at all worried,
though, although rolling back will just be a matter of removing the
"myxrootd" from XROOTD_INSTANCES and restarting xrootd on the server
again).

Sam


On 7 October 2013 08:37, Yannick Patois <[log in to unmask]> wrote:
> Hi Andrew,
>
> Le 05/10/2013 21:07, Andrew Hanushevsky a écrit :
>> I think the DPM guys specifically prohibit direct access to an end node.
>> You need to authenticate at the head node.
>
> That's what I also understood.
>
> My question would be how can I have both for a while during my tests, if
> ever possible?
>
> Alternatively, can a client fake the head-node authentication if I
> provide it with the right keys?
>
> Thanks,
>
>         Yannick
>
> --
> Yannick Patois <[log in to unmask]>
> IPHC - IN2P3 / CNRS - 23 rue du Loess 67037 Strasbourg
> Tel: 03 88 10 61 83
>
>
> ########################################################################
> Use REPLY-ALL to reply to list
>
> To unsubscribe from the XROOTD-L list, click the following link:
> https://listserv.slac.stanford.edu/cgi-bin/wa?SUBED1=XROOTD-L&A=1

########################################################################
Use REPLY-ALL to reply to list

To unsubscribe from the XROOTD-L list, click the following link:
https://listserv.slac.stanford.edu/cgi-bin/wa?SUBED1=XROOTD-L&A=1