Print

---

Hi,

• We spotted today failed xrdcp attempts into CASTOR having issues during the authentication, the error seen on client side was:

XrdSec: No authentication protocols are available.
Last server error 3010 ('cannot obtain credentials: Secgsi: ErrParseBuffer: certificate chain verification failed: :chain is inconsistent: kXGS_cert: unable to get protocol object.')

• We found no logs server side whatsoever about the failed attempts but a warning pointing to what seems an (outdated/corrupted?) cache of the CAs:

secgsi_GetCA: entry for '1d879c6c.0:1' needs refreshing: clean the related entry cache first

• This happened in only one of our three headnodes.

Many thanks in advance.
Cheers,
Xavi.

Full client side log:
[root@aipanda023 ~]# xrdcp root://c2atlassrv301//castor/cern.ch/grid/atlas/atlasmctape/mc12_8TeV/HITS/e1434_s1499_s1504/mc12_8TeV.147771.Sherpa_CT10_Zmumu.merge.HITS.e1434_s1499_s1504_tid01328028_00/HITS.01328028._014764.pool.root.1 /tmp/aa1

XrdSec: No authentication protocols are available.
Last server error 3010 ('cannot obtain credentials: Secgsi: ErrParseBuffer: certificate chain verification failed: :chain is inconsistent: kXGS_cert: unable to get protocol object.')
Error accessing path/file for root://c2atlassrv301//castor/cern.ch/grid/atlas/atlasmctape/mc12_8TeV/HITS/e1434_s1499_s1504/mc12_8TeV.147771.Sherpa_CT10_Zmumu.merge.HITS.e1434_s1499_s1504_tid01328028_00/HITS.01328028._014764.pool.root.1

—
Reply to this email directly or view it on GitHub.

Use REPLY-ALL to reply to list

To unsubscribe from the XROOTD-DEV list, click the following link:
https://listserv.slac.stanford.edu/cgi-bin/wa?SUBED1=XROOTD-DEV&A=1