I am having a little difficulty getting tpc proxy delegation to work between the xrdcp client and two xrootd servers.
I have the 4.9 client running on my desktop, and two 4.9 servers running on a testbed machine, one on the default port 1094 and one on port 1095.
In the client environment,
export XrdSecGSIDELEGPROXY=1
is set (I also set it on the server side, though it should not be necessary there).
In the server configs:
sec.protocol gsi -cert:/etc/grid-security/xrootd/hostcert.pem -key:/etc/grid-security/xrootd/hostkey.pem -dlgpxy:2 -exppxy:/tmp/x509up_u<uid>
This does not seem to be either correct or sufficient.
Doing
ends with:xrdcp49 --tpc only root://fndcatemp2.fnal.gov:1094//data/xrootdfs/testdata root://fndcatemp2.fnal.gov:1095//data/xrootdfs/testdata-from-fndcatemp1-`date | tr ' ' '.'`
Run: [ERROR] Server responded with an error: [3005] [FATAL] Auth failed
What I see at the beginning of the server logs in this case:
secgsi_InitOpts: Proxy delegation option: 0
The tpc transfer between the two servers fails because there is no proxy found:
TPC job 8: 190311 09:07:15 30920 cryptossl_X509ParseFile: unable to open file (errno: 2)TPC job 8: 190311 09:07:15 30920 secgsi_QueryProxy: proxy files must have at least two certificates (found: 0)TPC job 8: 190311 09:07:15 30920 secgsi_InitProxy: Not a tty: cannot prompt for proxies - do nothingTPC job 8: 190311 09:07:15 30920 secgsi_QueryProxy: problems initializing proxy via external shellTPC job 8: 190311 09:07:15 30920 secgsi_getCredentials: error getting user proxies CF: 0x7f5fb4362940TPC job 8: secgsi: error getting user proxies
I also tried this with:
sec.protocol gsi -cert:/etc/grid-security/xrootd/hostcert.pem -key:/etc/grid-security/xrootd/hostkey.pem -dlgpxy:1
There I see at the beginning of the server log
secgsi_InitOpts: Proxy delegation option: 1
but with precisely the same error on the destination side:
TPC job 8: 190311 09:40:46 20495 cryptossl_X509ParseFile: unable to open file (errno: 2)
TPC job 8: 190311 09:40:46 20495 secgsi_QueryProxy: proxy files must have at least two certificates (found: 0)
TPC job 8: 190311 09:40:46 20495 secgsi_InitProxy: Not a tty: cannot prompt for proxies - do nothing
TPC job 8: 190311 09:40:46 20495 secgsi_QueryProxy: problems initializing proxy via external shell
TPC job 8: 190311 09:40:46 20495 secgsi_getCredentials: error getting user proxies CF: 0x7fcbbede2940
TPC job 8: secgsi: error getting user proxies
NOTE:
If I set:
export X509_USER_PROXY=/etc/grid-security/xrootd/fndcatemp2-proxy