Print

Print


Ah, I thought that was in the report...

```
[root@xrootd ~]# cat /etc/xrootd/xrootd-clustered.cfg 
#
# Managed by CFE
#

# Port specifications; only the redirector needs to use a well-known port
# "any" will cause rooted to bind to any available port.  Change as needed for firewalls.
xrd.port 1213 if exec cmsd
xrd.port 1094 if exec xrootd

# Configure node-specific stuff

if se1.accre.vanderbilt.edu
    # Old Site Redirector
    all.sitename T2_US_Vanderbilt
    all.manager se1.accre.vanderbilt.edu:1214
    all.manager meta all cmsxrootd.fnal.gov+ 1213
    cms.delay servers 1 lookup 10
    all.role manager
else if xrootd.vampire or vm-cms-xrootd.vampire
    # Test site redirector
    all.role manager
    xrd.network nodnr
    cms.trace all
    cms.dfs limit 0 lookup central redirect verify retries 5
#    cms.dfs limit 0 lookup distrib mdhold 0 redirect immed retries 5
    all.sitename T2_US_Vanderbilt_TEST
    all.manager xrootd.accre.vanderbilt.edu:1213
    all.manager meta all cms-xrd-transit.cern.ch+ 1213
    cms.delay servers 1 lookup 10
else if sea.vampire or seb.vampire or se20.vampire
    # Test data node
    all.sitename T2_US_Vanderbilt_TEST
    all.manager xrootd.accre.vanderbilt.edu:1213
    all.role server
else
    # Remaining data nodes
    all.sitename T2_US_Vanderbilt
    all.manager se1.accre.vanderbilt.edu:1214
    all.role server
fi

# Hosts allowed to use this xrootd cluster
cms.allow host *

# Export all of /store
all.export /store

# Enable throttling to keep the mount from getting pounded to death
# throttle.throttle [concurrency CONCUR] [data RATE]
#   see https://github.com/xrootd/xrootd/tree/master/src/XrdThrottl
xrootd.fslib throttle default
throttle.throttle concurrency 128

###Standard directives
# Simple sites probably don't need to touch these.
# Logging verbosity
xrootd.trace emsg login stall redirect
ofs.trace conn

# Security configuration
#if sea.vampire or seb.vampire
#    sec.protocol /usr/lib64 gsi -certdir:/etc/grid-security/certificates -cert:/etc/grid-security/hostcert-xrootd.pem -key:/etc/grid-security/hostkey-xrootd.pem -crl:3 -authzfun:libXrdLcmaps.so -authzfunparms:--lcmapscfg,/etc/xrootd/lcmaps.cfg,--loglevel,0 -gmapopt:10 -gmapto:0
#
#else
sec.protocol /usr/lib64 gsi -certdir:/etc/grid-security/certificates -cert:/etc/grid-security/hostcert-xrootd.pem -key:/etc/grid-security/hostkey-xrootd.pem -crl:1 -moninfo
#fi

# HTTPS support. remove nesting once tested
if sea.vampire or seb.vampire or se20.vampire xrootd.vampire or vm-cms-xrootd.vampire exec xrootd
      xrd.protocol http:1094 /usr/lib64/libXrdHttp-4.so
      http.cadir /etc/grid-security/certificates
      http.cert /etc/grid-security/hostcert-xrootd.pem
      http.key /etc/grid-security/hostkey-xrootd.pem
      http.secxtractor /usr/lib64/libXrdLcmaps.so
      http.listingdeny yes
      http.staticpreload http://static/robots.txt /etc/xrootd/robots.txt
      http.desthttps yes
fi
# Turn on authorization
ofs.authorize 1
acc.authdb /etc/xrootd/Authfile
acc.audit deny grant


xrootd.seclib /usr/lib64/libXrdSec.so

cms.delay startup 1
cms.fxhold 10m
#cms.perf int 30s pgm /usr/bin/XrdOlbMonPerf 30

xrd.report xrootd.t2.ucsd.edu:9931 every 30s all sync
xrootd.monitor all auth flush 30s mbuff 1472 window 5s dest files io info user xrootd.t2.ucsd.edu:9930
```

-- 
You are receiving this because you commented.
Reply to this email directly or view it on GitHub:
https://github.com/xrootd/xrootd/issues/752#issuecomment-399314697

########################################################################
Use REPLY-ALL to reply to list

To unsubscribe from the XROOTD-DEV list, click the following link:
https://listserv.slac.stanford.edu/cgi-bin/wa?SUBED1=XROOTD-DEV&A=1