To add on this issue... or maybe it is a new one?
Even with https2http disabled on the manager, and http.desthttps no (and shared secret), I get a problem...
While davix-ls and davix-get and davix-put work fine, davix-move from https://manager-address/somefile.root to https://manager-address/somenewfile.root fails with:
< HTTP/1.1 409 Unknown
< Content-Length: 232
<
DAVIX(body): Read block (232 bytes):
[Renaming to relative path 'Freyermuth&xrdhttpvorg=atlasREDACTEDPROXYINFO /full/path/to/file/somefile.root' is disallowed.]
(Davix::mv) Error: HTTP 409 : Conflict, File Exist
This also seems like parsing URI encoding was broken - my full name is "Oliver Freyermuth", so somehow the space messed things up.
This was after the following happened:
> MOVE /full/path/to/file/somenewfile.root HTTP/1.1
> User-Agent: libdavix/0.6.7 neon/0.0.29
> Keep-Alive:
> Connection: Keep-Alive
> TE: trailers
> Host: manager-name:1094
> Destination: https://manager-name:1094/full/path/to/file/somefile.root'
>
< HTTP/1.1 302 Redirect
< Content-Length: 0
< Location: http://data-server-6:1094/full/path/to/file/somenewfile.root?xrdhttptk=XXXXXXXXXXXXXX&xrdhttptime=1524518226&xrdhttpname=%2FC=DE%2FO=GermanGrid%2FOU=UniBonn%2FCN=Oliver%20Freyermuth&xrdhttpvorg=atlas&REDACTED
<
HTTP session to http://data-server-6:1094 begins.
> MOVE /full/path/to/file/somenewfile.root?xrdhttptk=XXXXXXXXXXXXXX&xrdhttptime=1524518226&xrdhttpname=%2FC=DE%2FO=GermanGrid%2FOU=UniBonn%2FCN=Oliver%20Freyermuth&xrdhttpvorg=atlas&REDACTED HTTP/1.1
> User-Agent: libdavix/0.6.7 neon/0.0.29
> Keep-Alive:
> Connection: Keep-Alive
> TE: trailers
> Host: data-server-6:1094
> Destination: https://manager-name:1094/full/path/to/file/somefile.root
>
Things work again if I specify:
http.desthttps yes
on the manager, effectively forcing double authentication (and preventing those URI parameters in the redirect to the data-server).
—
You are receiving this because you commented.
Reply to this email directly, view it on GitHub, or mute the thread.
{"api_version":"1.0","publisher":{"api_key":"05dde50f1d1a384dd78767c55493e4bb","name":"GitHub"},"entity":{"external_key":"github/xrootd/xrootd","title":"xrootd/xrootd","subtitle":"GitHub repository","main_image_url":"https://cloud.githubusercontent.com/assets/143418/17495839/a5054eac-5d88-11e6-95fc-7290892c7bb5.png","avatar_image_url":"https://cloud.githubusercontent.com/assets/143418/15842166/7c72db34-2c0b-11e6-9aed-b52498112777.png","action":{"name":"Open in GitHub","url":"https://github.com/xrootd/xrootd"}},"updates":{"snippets":[{"icon":"PERSON","message":"@olifre in #577: To add on this issue... or maybe it is a new one? \r\nEven with `https2http` disabled on the manager, and `http.desthttps no` (and shared secret), I get a problem... \r\nWhile `davix-ls` and `davix-get` and `davix-put` work fine, `davix-move` from https://manager-address/somefile.root to https://manager-address/somenewfile.root fails with:\r\n```\r\n\u003c HTTP/1.1 409 Unknown\r\n\u003c Content-Length: 232\r\n\u003c\r\nDAVIX(body): Read block (232 bytes):\r\n[Renaming to relative path 'Freyermuth\u0026xrdhttpvorg=atlasREDACTEDPROXYINFO /full/path/to/file/somefile.root' is disallowed.]\r\n(Davix::mv) Error: HTTP 409 : Conflict, File Exist\r\n```\r\nThis also seems like parsing URI encoding was broken - my full name is \"Oliver Freyermuth\", so somehow the space messed things up. \r\n\r\nThis was after the following happened:\r\n```\r\n\u003e MOVE /full/path/to/file/somenewfile.root HTTP/1.1\r\n\u003e User-Agent: libdavix/0.6.7 neon/0.0.29\r\n\u003e Keep-Alive: \r\n\u003e Connection: Keep-Alive\r\n\u003e TE: trailers\r\n\u003e Host: manager-name:1094\r\n\u003e Destination: https://manager-name:1094/full/path/to/file/somefile.root'\r\n\u003e \r\n\r\n\u003c HTTP/1.1 302 Redirect\r\n\u003c Content-Length: 0\r\n\u003c Location: http://data-server-6:1094/full/path/to/file/somenewfile.root?xrdhttptk=XXXXXXXXXXXXXX\u0026xrdhttptime=1524518226\u0026xrdhttpname=%2FC=DE%2FO=GermanGrid%2FOU=UniBonn%2FCN=Oliver%20Freyermuth\u0026xrdhttpvorg=atlas\u0026REDACTED\r\n\u003c \r\nHTTP session to http://data-server-6:1094 begins.\r\n\u003e MOVE /full/path/to/file/somenewfile.root?xrdhttptk=XXXXXXXXXXXXXX\u0026xrdhttptime=1524518226\u0026xrdhttpname=%2FC=DE%2FO=GermanGrid%2FOU=UniBonn%2FCN=Oliver%20Freyermuth\u0026xrdhttpvorg=atlas\u0026REDACTED HTTP/1.1\r\n\u003e User-Agent: libdavix/0.6.7 neon/0.0.29\r\n\u003e Keep-Alive: \r\n\u003e Connection: Keep-Alive\r\n\u003e TE: trailers\r\n\u003e Host: data-server-6:1094\r\n\u003e Destination: https://manager-name:1094/full/path/to/file/somefile.root\r\n\u003e\r\n```\r\nThings work again if I specify:\r\n```\r\nhttp.desthttps yes\r\n```\r\non the manager, effectively forcing double authentication (and preventing those URI parameters in the redirect to the data-server). "}],"action":{"name":"View Issue","url":"https://github.com/xrootd/xrootd/issues/577#issuecomment-383727628"}}}
Use REPLY-ALL to reply to list
To unsubscribe from the XROOTD-DEV list, click the following link:
https://listserv.slac.stanford.edu/cgi-bin/wa?SUBED1=XROOTD-DEV&A=1