 |
 |
Hi Marian, No, the same command worked on 3 machines but not on another. Same xrootd version, same local user, same certificate to authenticate. This was only a temporary state of affair though, as now it fails on all 4 machines with 4.0.4. [2014-10-24 17:02:44.604930 +0200][Debug ][XRootDTransport ] [eoscms.cern.ch:1094 #0.0] Trying to authenticate using gsi 141024 17:02:44 750 crypto_X509CreateProxy: Your identity: /DC=ch/DC=cern/OU=computers/CN=tier0/vocms15.cern.ch [2014-10-24 17:02:44.625317 +0200][Dump ][AsyncSock ] [eoscms.cern.ch:1094 #0.0] Wrote a message: (0x18042d60), 136 bytes [2014-10-24 17:02:44.652569 +0200][Dump ][XRootDTransport ] [msg: 0x18042d60] Expecting 3407 bytes of message body [2014-10-24 17:02:44.652591 +0200][Dump ][AsyncSock ] [eoscms.cern.ch:1094 #0.0] Received message header, size: 8 [2014-10-24 17:02:44.652606 +0200][Dump ][AsyncSock ] [eoscms.cern.ch:1094 #0.0] Received a message of 3415 bytes [2014-10-24 17:02:44.652616 +0200][Debug ][XRootDTransport ] [eoscms.cern.ch:1094 #0.0] Sending more authentication data for gsi [2014-10-24 17:02:44.653645 +0200][Debug ][XRootDTransport ] [eoscms.cern.ch:1094 #0.0] Auth protocol handler for gsi refuses to give us more credentials Secgsi: ErrParseBuffer: certificate chain verification failed: :chain is inconsistent: kXGS_cert [2014-10-24 17:02:44.653702 +0200][Error ][AsyncSock ] [eoscms.cern.ch:1094 #0.0] Socket error while handshaking: [FATAL] Auth failed [2014-10-24 17:02:44.653716 +0200][Debug ][AsyncSock ] [eoscms.cern.ch:1094 #0.0] Closing the socket [2014-10-24 17:02:44.653727 +0200][Debug ][Poller ] <[::ffff:128.142.152.60]:37595><--><[::ffff:128.142.38.82]:1094> Removing socket from the poller [2014-10-24 17:02:44.653783 +0200][Error ][PostMaster ] [eoscms.cern.ch:1094 #0] Unable to recover: [FATAL] Auth failed. I've used 3.3.6 on one of the machines for a long time before this, never had a problem. Cheers Dirk On 10/24/2014 4:47 PM, Marian Zvada wrote: > Hi, > > I believe this particular thing from developers thread went into 4.0.4. > > @Lukasz: is this fix present in XrdClCopy.cc in the recent release > please? Or can we get patch in case not? Seems like annoying artifact... > > Btw, is this really your problem Dirk? I think this part is more of > interest: > >>> Run: [ERROR] Server responded with an error: [3010] Unable to open > >>> file /eos/cms/store/unmerged/tier0_harvest/zzz; Operation not > >>> permitted > > You're saying same command line works just fine in 4.0.4 but not in > version of client below that? Can you post here exact command line with > '-d 2' perhaps? When I tried copy/paste from the thread into terminal > where I run v4.0.3. it's weird but obvious: > > # xrdcp -d 1 zzz > root://eoscms.cern.ch//eos/cms/store/unmerged/tier0_harvest/zzz > xrdcp: No such file or directory processing zzz > > Is your xrdcp some alias or wrapper? How come you could execute it on > vocms001 getting such output? > > Thanks, > Marian > > On 10/24/14, 4:50 AM, Dirk Hufnagel wrote: >> >> The reporter of the bug, Marian ? >> >> Marian, is there a fixed release yet ? >> >> Cheers >> >> Dirk >> >> On 10/24/2014 11:25 AM, Ivan Glushkov wrote: >>> Hi Dirk, >>> >>> It actually works - at least when I tried exactly the same command >>> like yours and then I checked on eos, the file was copied there. The >>> xrootd is throwing an error due to this bug found by Marian [1]. The >>> only thing I don’t understand is why it shows only on vocms001.. I am >>> actually not sure whom should we ask about that.. CERN IT has nothing >>> to do with that.. Some xrootd experts? Do you have an idea? >>> >>> Kind regards, >>> Ivan Glushkov >>> >>> [1] >>> https://listserv.slac.stanford.edu/cgi-bin/wa?A2=ind1408&L=XROOTD-DEV&D=0&P=36536 >>> >>> >>> >>> >>> >>> On 23.10.2014, at 22:35, Dirk Hufnagel <[log in to unmask]> wrote: >>> >>>> >>>> Ok, it works on vocms015 and vocms062 and presumably also on vocms047. >>>> >>>> It does not work on vocms001 >>>> >>>> cmst1@vocms001:/data/tier0 $ xrdcp -d 1 zzz >>>> root://eoscms.cern.ch//eos/cms/store/unmerged/tier0_harvest/zzz >>>> [2014-10-23 22:22:22.253218 +0200][Error ][XRootD ] >>>> [eoscms.cern.ch:1094] Handling error while processing kXR_stat (path: >>>> /eos/cms/store/unmerged/tier0_harvest/zzz, flags: none): [ERROR] >>>> Error response. >>>> [2014-10-23 22:22:22.255062 +0200][Error ][XRootD ] >>>> [eoscms.cern.ch:1094] Handling error while processing kXR_open (file: >>>> /eos/cms/store/unmerged/tier0_harvest/zzz?oss.asize=8, mode: 0644, >>>> flags: kXR_new kXR_open_updt kXR_async kXR_retstat ): [ERROR] Error >>>> response. >>>> [0B/0B][100%][==================================================][0B/s] >>>> Run: [ERROR] Server responded with an error: [3010] Unable to open >>>> file /eos/cms/store/unmerged/tier0_harvest/zzz; Operation not permitted >>>> >>>> Any idea ? I don't see any difference in the rpm packages >>>> installed on the box. >>>> >>>> Cheers >>>> >>>> Dirk >>>> >>>> On 10/23/2014 10:12 PM, Dirk Hufnagel wrote: >>>>> >>>>> Actually, wait a second, have to check with Luis >>>>> why it works for him... >>>>> >>>>> Dirk >>>>> >>>>> On 10/23/2014 10:08 PM, Dirk Hufnagel wrote: >>>>>> >>>>>> Hi Ivan, >>>>>> >>>>>> The new xrootd client doesn't work with proxy authentication. >>>>>> >>>>>> Just tried it, same proxy, copying to the same place. 4.0.4 >>>>>> throws and 'operation not permitted', 3.3.6 works. >>>>>> >>>>>> Cheers >>>>>> >>>>>> Dirk >>> ######################################################################## Use REPLY-ALL to reply to list To unsubscribe from the XROOTD-L list, click the following link: https://listserv.slac.stanford.edu/cgi-bin/wa?SUBED1=XROOTD-L&A=1