The token export function is broken and if enabled the krb5 handshake fails.
It happens with the XRootD 4.0 release candidate and the CERN backport version 3.3.6-CERN-3.

140410 09:30:26 14966 XrootdXeq: User authentication failed; Seckrb5: Unable to export the token to file; Unknown code ____ 255 ([log in to unmask])

Here is a test configuration file:

xrootd.seclib libXrdSec.so
sec.protocol krb5 -exptkn:/tmp/bla.krb5# [log in to unmask]
sec.protbind * only krb5

The exported token is actually created under the effective uid of xrootd but the handshake returns an error.


Reply to this email directly or view it on GitHub.



Use REPLY-ALL to reply to list

To unsubscribe from the XROOTD-DEV list, click the following link:
https://listserv.slac.stanford.edu/cgi-bin/wa?SUBED1=XROOTD-DEV&A=1