The token export function is broken and if enabled the krb5 handshake fails.
It happens with the XRootD 4.0 release candidate and the CERN backport version 3.3.6-CERN-3.
140410 09:30:26 14966 XrootdXeq: User authentication failed; Seckrb5: Unable to export the token to file; Unknown code ____ 255 ([log in to unmask])
Here is a test configuration file:
xrootd.seclib libXrdSec.so
sec.protocol krb5 -exptkn:/tmp/bla.krb5# [log in to unmask]
sec.protbind * only krb5
The exported token is actually created under the effective uid of xrootd but the handshake returns an error.
—
Reply to this email directly or view it on GitHub.
Use REPLY-ALL to reply to list
To unsubscribe from the XROOTD-DEV list, click the following link:
https://listserv.slac.stanford.edu/cgi-bin/wa?SUBED1=XROOTD-DEV&A=1