Print

Print


downgraded to the lib versions as on the working machine. Error remains.
So it seems not an version issue of the libs.



Hello,

after an upgrade on a client machine we see cryptography protocol errors 
in the output of xrdfs. It seems to happen with the "ls" command only. 
It does not happen with "locate" for example.
The message "Protocol not supported" is repeated for the numbers of data 
servers used.
Other clients with the "old" libs do not show up this message.

Stracing the xrdfs command shows that every data server is contacted and 
the error message is generated. No hint (well, for me) what and why it 
is failing.

Heiko

Auth config part:
xrootd.seclib /usr/lib/libXrdSec.so
sec.protocol /usr/lib  sss -s /etc/xrootd/sss.keytab
sec.protocol  unix
acc.authdb /etc/xrootd/Authfile
acc.authrefresh 60
ofs.authorize

CLIENT # xrdfs REDIRECTOR ls /data
Secsss: 0x30 cryptography load failed; Protocol not supported
... <repeated for the number of data servers> ...
Secsss: 0x30 cryptography load failed; Protocol not supported
followed by directory output.


Lib versions on the failing machine:
libglobus-gsi-openssl-error0/xenial,now 3.8-1+gt6.xenial amd64 
[Installiert,automatisch]
libglobus-gsi-proxy-ssl1/xenial,now 5.10-1+gt6.xenial amd64 
[Installiert,automatisch]
libglobus-openssl-module0/xenial,now 4.8-2+gt6.xenial amd64 
[Installiert,automatisch]
libgnutls-openssl27/xenial-updates,now 3.4.10-4ubuntu1.4 amd64 [installiert]
libio-socket-ssl-perl/xenial,xenial,now 2.024-1 all 
[Installiert,automatisch]
libnet-ssleay-perl/xenial,now 1.72-1build1 amd64 [Installiert,automatisch]
libssl-dev/xenial-updates,xenial-security,now 1.0.2g-1ubuntu4.12 amd64  
[installiert]
libssl-doc/xenial-updates,xenial-updates,xenial-security,xenial-security,now 
1.0.2g-1ubuntu4.12 all  [Installiert,automatisch]
libssl1.0.0/xenial-updates,xenial-security,now 1.0.2g-1ubuntu4.12 amd64  
[installiert]
openssl/xenial-updates,xenial-security,now 1.0.2g-1ubuntu4.12 amd64 
[installiert]
python-openssl/xenial,xenial,now 0.15.1-2build1 all [Installiert,automatisc

Lib versions on a flawless machine:
libglobus-gsi-openssl-error0/xenial,now 3.5-5 amd64 
[Installiert,automatisch]
libglobus-gsi-proxy-ssl1/xenial,now 5.7-5 amd64 [Installiert,automatisch]
libglobus-openssl-module0/xenial,now 4.6-5 amd64 [Installiert,automatisch]
libgnutls-openssl27/xenial-updates,now 3.4.10-4ubuntu1.4 amd64 [installiert]
libssl-dev/xenial-updates,xenial-security,now 1.0.2g-1ubuntu4.12 amd64  
[installiert]
libssl-doc/xenial-updates,xenial-updates,xenial-security,xenial-security,now 
1.0.2g-1ubuntu4.12 all  [Installiert,automatisch]
libssl1.0.0/xenial-updates,xenial-security,now 1.0.2g-1ubuntu4.12 amd64  
[installiert]
openssl/xenial-updates,xenial-security,now 1.0.2g-1ubuntu4.12 amd64 
[installiert]



-- 
-----------------------------------------------------------------------
Dipl.-Ing. Heiko Schröter
Institute of Environmental Physics (IUP)   phone: ++49-(0)421-218-62092
Institute of Remote Sensing (IFE)          fax:   ++49-(0)421-218-62070
University of Bremen (FB1)
P.O. Box 330440               email:  [log in to unmask]
Otto-Hahn-Allee 1
28359 Bremen
Germany
-----------------------------------------------------------------------

########################################################################
Use REPLY-ALL to reply to list

To unsubscribe from the XROOTD-L list, click the following link:
https://listserv.slac.stanford.edu/cgi-bin/wa?SUBED1=XROOTD-L&A=1