Brian,<br>
<br>
<br>
These are also our (Dmitry, Al) thoughts here at FNAL.<br>
<br>
<br>
(I am currently engaged in building into dCache native xrootd TPC).<br>
<br>
<br>
Just to weigh in on the question ...<br>
<br>
________________________________________________<br>
Albert L. Rossi<br>
Application Developer &amp; Systems Analyst III<br>
Scientific Computing Division, Data Movement Development<br>
FCC 229A<br>
Mail Station 369 (FCC 2W)<br>
Fermi National Accelerator Laboratory<br>
Batavia, IL 60510<br>
(630) 840-3023<br>
<br>
<br>
________________________________<br>
From: Oliver Freyermuth &lt;<a href="/cgi-bin/wa?LOGON=A3%3Dind1805%26L%3DXROOTD-DEV%26E%3Dquoted-printable%26P%3D914395%26B%3D----%253D%253D_mimepart_5b033c6136716_41a62b01bcd28f5016478c%26T%3Dtext%252Fhtml%3B%2520charset%3DUTF-8%26pending%3D" target="_parent" >[log in to unmask]</a>&gt;<br>
Sent: Monday, May 21, 2018 4:35 PM<br>
To: xrootd/xrootd<br>
Cc: Albert Rossi; Mention<br>
Subject: Re: [xrootd/xrootd] TPC requires server-to-server XRootDTransport authentication (#694)<br>
<br>
<br>
Dear @bbockelm&lt;https://github.com/bbockelm&gt; ,<br>
<br>
thanks for the explanations!<br>
<br>
If they are unauthenticated and have an authorized token for a TPC, then they should indeed be authorized. That&#39;s the whole point of a bearer token.<br>
<br>
Ok - this is exactly what my initial question in this ticket was, but better formulated.<br>
Let&#39;s see what @abh3&lt;https://github.com/abh3&gt; comments on this.<br>
<br>
Also, thanks for the WebDAV explanation. Since I have never seen transfers using WebDAV from / to our site, and only the failing tests, and we currently have an issue with xroot (almost all other sites apart from EOSATLAS are not TPC ready, so they can&#39;t deliver data to us) and DDM people did not offer WebDAV as solution, I will take this point to ask them why WebDAV is not used. Thanks!<br>
<br>
—<br>
You are receiving this because you were mentioned.<br>
Reply to this email directly, view it on GitHub&lt;https://github.com/xrootd/xrootd/issues/694#issuecomment-390790168&gt;, or mute the thread&lt;https://github.com/notifications/unsubscribe-auth/ADzQnI1QErOKKVMqxXU3a4UKvusXq5JNks5t0zMagaJpZM4Tj8IR&gt;.<br>


<p style="font-size:small;-webkit-text-size-adjust:none;color:#666;">&mdash;<br />You are receiving this because you are subscribed to this thread.<br />Reply to this email directly, <a href="https://github.com/xrootd/xrootd/issues/694#issuecomment-390790925">view it on GitHub</a>, or <a href="https://github.com/notifications/unsubscribe-auth/AD7YjjtyaUbFkNLRQoGr7F_ph-DtwD6Jks5t0zPhgaJpZM4Tj8IR">mute the thread</a>.<img src="https://github.com/notifications/beacon/AD7YjgU74CRPXskIKAXreaVod8yqQ3zDks5t0zPhgaJpZM4Tj8IR.gif" height="1" width="1" alt="" /></p>
<!cript type="application/ld+json">{"@context":"http://schema.org","@type":"EmailMessage","potentialAction":{"@type":"ViewAction","target":"https://github.com/xrootd/xrootd/issues/694#issuecomment-390790925","url":"https://github.com/xrootd/xrootd/issues/694#issuecomment-390790925","name":"View Issue"},"description":"View this Issue on GitHub","publisher":{"@type":"Organization","name":"GitHub","url":"https://github.com"}}</script>
<!cript type="application/json" data-scope="inboxmarkup">{"api_version":"1.0","publisher":{"api_key":"05dde50f1d1a384dd78767c55493e4bb","name":"GitHub"},"entity":{"external_key":"github/xrootd/xrootd","title":"xrootd/xrootd","subtitle":"GitHub repository","main_image_url":"https://cloud.githubusercontent.com/assets/143418/17495839/a5054eac-5d88-11e6-95fc-7290892c7bb5.png","avatar_image_url":"https://cloud.githubusercontent.com/assets/143418/15842166/7c72db34-2c0b-11e6-9aed-b52498112777.png","action":{"name":"Open in GitHub","url":"https://github.com/xrootd/xrootd"}},"updates":{"snippets":[{"icon":"PERSON","message":"@alrossi in #694: Brian,\n\n\nThese are also our (Dmitry, Al) thoughts here at FNAL.\n\n\n(I am currently engaged in building into dCache native xrootd TPC).\n\n\nJust to weigh in on the question ...\n\n________________________________________________\nAlbert L. Rossi\nApplication Developer \u0026 Systems Analyst III\nScientific Computing Division, Data Movement Development\nFCC 229A\nMail Station 369 (FCC 2W)\nFermi National Accelerator Laboratory\nBatavia, IL 60510\n(630) 840-3023\n\n\n________________________________\nFrom: Oliver Freyermuth \<a href="/cgi-bin/wa?LOGON=A3%3Dind1805%26L%3DXROOTD-DEV%26E%3Dquoted-printable%26P%3D914395%26B%3D----%253D%253D_mimepart_5b033c6136716_41a62b01bcd28f5016478c%26T%3Dtext%252Fhtml%3B%2520charset%3DUTF-8%26pending%3D" target="_parent" >[log in to unmask]</a>\u003e\nSent: Monday, May 21, 2018 4:35 PM\nTo: xrootd/xrootd\nCc: Albert Rossi; Mention\nSubject: Re: [xrootd/xrootd] TPC requires server-to-server XRootDTransport authentication (#694)\n\n\nDear @bbockelm\u003chttps://github.com/bbockelm\u003e ,\n\nthanks for the explanations!\n\nIf they are unauthenticated and have an authorized token for a TPC, then they should indeed be authorized. That's the whole point of a bearer token.\n\nOk - this is exactly what my initial question in this ticket was, but better formulated.\nLet's see what @abh3\u003chttps://github.com/abh3\u003e comments on this.\n\nAlso, thanks for the WebDAV explanation. Since I have never seen transfers using WebDAV from / to our site, and only the failing tests, and we currently have an issue with xroot (almost all other sites apart from EOSATLAS are not TPC ready, so they can't deliver data to us) and DDM people did not offer WebDAV as solution, I will take this point to ask them why WebDAV is not used. Thanks!\n\n—\nYou are receiving this because you were mentioned.\nReply to this email directly, view it on GitHub\u003chttps://github.com/xrootd/xrootd/issues/694#issuecomment-390790168\u003e, or mute the thread\u003chttps://github.com/notifications/unsubscribe-auth/ADzQnI1QErOKKVMqxXU3a4UKvusXq5JNks5t0zMagaJpZM4Tj8IR\u003e.\n"}],"action":{"name":"View Issue","url":"https://github.com/xrootd/xrootd/issues/694#issuecomment-390790925"}}}</script>
<!cript type="application/ld+json">{
"@type": "MessageCard",
"@context": "http://schema.org/extensions",
"hideOriginalBody": "false",
"originator": "37567f93-e2a7-4e2a-ad37-a9160fc62647",
"title": "Re: [xrootd/xrootd] TPC requires server-to-server XRootDTransport authentication (#694)",
"sections": [
{
"text": "",
"activityTitle": "**Albert Rossi**",
"activityImage": "https://avatars2.githubusercontent.com/u/3985564?s=160\u0026v=4",
"activitySubtitle": "@alrossi",
"facts": [

]
}
],
"potentialAction": [
{
"name": "Add a comment",
"@type": "ActionCard",
"inputs": [
{
"isMultiLine": true,
"@type": "TextInput",
"id": "IssueComment",
"isRequired": false
}
],
"actions": [
{
"name": "Comment",
"@type": "HttpPOST",
"target": "https://api.github.com",
"body": "{\n\"commandName\": \"IssueComment\",\n\"repositoryFullName\": \"xrootd/xrootd\",\n\"issueId\": 694,\n\"IssueComment\": \"{{IssueComment.value}}\"\n}"
}
]
},
{
"name": "Close issue",
"@type": "HttpPOST",
"target": "https://api.github.com",
"body": "{\n\"commandName\": \"IssueClose\",\n\"repositoryFullName\": \"xrootd/xrootd\",\n\"issueId\": 694\n}"
},
{
"targets": [
{
"os": "default",
"uri": "https://github.com/xrootd/xrootd/issues/694#issuecomment-390790925"
}
],
"@type": "OpenUri",
"name": "View on GitHub"
},
{
"name": "Unsubscribe",
"@type": "HttpPOST",
"target": "https://api.github.com",
"body": "{\n\"commandName\": \"MuteNotification\",\n\"threadId\": 328188433\n}"
}
],
"themeColor": "26292E"
}</script><br>
<hr>
<p align="left">
Use REPLY-ALL to reply to list</p>
<p align="center">To unsubscribe from the XROOTD-DEV list, click the following link:<br>
<a href="https://listserv.slac.stanford.edu/cgi-bin/wa?SUBED1=XROOTD-DEV&A=1" target="_blank">https://listserv.slac.stanford.edu/cgi-bin/wa?SUBED1=XROOTD-DEV&A=1</a>
</p>