Print

Print


I'm pretty sure 4.10 client works, but I will retest tomorrow and then open the GitHub issue.


Thanks, Al


________________________________________________
Albert L. Rossi
Application Developer & Systems Analyst III
Scientific Computing Division, Data Movement Development
FCC 229A
Mail Station 369 (FCC 2W)
Fermi National Accelerator Laboratory
Batavia, IL 60510
(630) 840-3023

From: Michal Kamil Simon <[log in to unmask]>
Sent: Wednesday, August 21, 2019 3:23:31 PM
To: Albert Rossi <[log in to unmask]>; xrootd-dev <[log in to unmask]>; [log in to unmask] <[log in to unmask]>
Subject: RE: 4.9 client does not honor signing
 
Hi Albert,

Thanks for reporting this. From the log file it seems that there was a stream timeout,
the client tried to recover by re-connecting and hence the kXR_endsess request. Indeed
this looks like a bug, however I'm bit surprised it works with 4.10.0 client, are you
sure that when you tested the newer client you also experienced a stream timeout?

Yes, please open an issue in github!

Thanks,
Michal


From: [log in to unmask] [[log in to unmask]] on behalf of Albert Rossi [[log in to unmask]]
Sent: 21 August 2019 17:53
To: xrootd-dev; [log in to unmask]
Subject: 4.9 client does not honor signing

Hello,


I have two xrootd servers running, 4.9 on port 1094, 4.10 on port 1095

dcache   21624  0.0  0.0 481044  7404 ?        Sl   09:42   0:00 /usr/share/xrootd/v4.10.0/bin//xrootd -d:2 -l /usr/share/xrootd/v4.10.0/logs-1095/xrdlog -c /usr/share/xrootd/v4.10.0/etc/xrootd-1095.cf
dcache   25321  0.0  0.0 215812  6812 ?        Sl   10:19   0:00 /usr/share/xrootd/v4.9.0/bin//xrootd -d:2 -l /usr/share/xrootd/v4.9.0/logs-1094/xrdlog -c /usr/share/xrootd/v4.9.0/etc/xrootd-1094.cf

Both are configured with: 

                                          sec.level all pedantic

It would seem that the xrdcp 4.9.1 client is not honoring the signing requests issued by either:

[arossi@otfrid Desktop]$ xrdcp491 /etc/fstab root://fndcatemp2.fnal.gov:1094//data/xrootdfs/otfrid-`date | tr ' ' '.'`
[0B/0B][100%][==================================================][0B/s]  
Run: [FATAL] Hand shake failed
[arossi@otfrid Desktop]$ xrdcp491 /etc/fstab root://fndcatemp2.fnal.gov:1095//data/xrootdfs/otfrid-`date | tr ' ' '.'`
[0B/0B][100%][==================================================][0B/s]  
Run: [FATAL] Hand shake failed

In the debug output for both of these, one finds:

[2019-08-21 10:37:58.006691 -0500][Debug  ][XRootDTransport   ] [fndcatemp2.fnal.gov:1094 #0.0] Sending out kXR_login request, username: arossi, cgi: ?xrd.cc=us&xrd.tz=-6&xrd.appname=xrdcp&xrd.info=&xrd.hostname=otfrid.fnal.gov&xrd.rn=v4.9.1, dual-stack: true, private IPv4: false, private IPv6: false
[2019-08-21 10:37:58.006769 -0500][Dump   ][AsyncSock         ] [fndcatemp2.fnal.gov:1094 #0.0] Wrote a message:  (0x2c044d10), 115 bytes
[2019-08-21 10:37:58.007157 -0500][Dump   ][XRootDTransport   ] [msg: 0x2c046610] Expecting 61 bytes of message body
[2019-08-21 10:37:58.007180 -0500][Dump   ][AsyncSock         ] [fndcatemp2.fnal.gov:1094 #0.0] Received message header, size: 8
[2019-08-21 10:37:58.007199 -0500][Dump   ][AsyncSock         ] [fndcatemp2.fnal.gov:1094 #0.0] Received a message of 69 bytes
[2019-08-21 10:37:58.007220 -0500][Debug  ][XRootDTransport   ] [fndcatemp2.fnal.gov:1094 #0.0] Logged in, session: 0d000000e9620000170000000d000000
[2019-08-21 10:37:58.007236 -0500][Debug  ][XRootDTransport   ] [fndcatemp2.fnal.gov:1094 #0.0] Authentication is required: &P=gsi,v:10400,c:ssl,ca:ba240aa8.0|f5f0dfc2.0
[2019-08-21 10:37:58.007259 -0500][Debug  ][XRootDTransport   ] [fndcatemp2.fnal.gov:1094 #0.0] Sending authentication data
[2019-08-21 10:37:58.007292 -0500][Debug  ][XRootDTransport   ] [fndcatemp2.fnal.gov:1094 #0.0] Trying to authenticate using gsi
[2019-08-21 10:37:58.062219 -0500][Dump   ][AsyncSock         ] [fndcatemp2.fnal.gov:1094 #0.0] Wrote a message:  (0x2c04d0e0), 136 bytes
[2019-08-21 10:37:58.087367 -0500][Dump   ][XRootDTransport   ] [msg: 0x2c04d0e0] Expecting 2862 bytes of message body
[2019-08-21 10:37:58.087404 -0500][Dump   ][AsyncSock         ] [fndcatemp2.fnal.gov:1094 #0.0] Received message header, size: 8
[2019-08-21 10:37:58.087423 -0500][Dump   ][AsyncSock         ] [fndcatemp2.fnal.gov:1094 #0.0] Received a message of 2870 bytes
[2019-08-21 10:37:58.087448 -0500][Debug  ][XRootDTransport   ] [fndcatemp2.fnal.gov:1094 #0.0] Sending more authentication data for gsi
[2019-08-21 10:37:58.090665 -0500][Dump   ][AsyncSock         ] [fndcatemp2.fnal.gov:1094 #0.0] Wrote a message:  (0x2c04d190), 3705 bytes
[2019-08-21 10:37:58.092122 -0500][Dump   ][XRootDTransport   ] [msg: 0x2c04d190] Expecting 0 bytes of message body
[2019-08-21 10:37:58.092167 -0500][Dump   ][AsyncSock         ] [fndcatemp2.fnal.gov:1094 #0.0] Received message header, size: 8
[2019-08-21 10:37:58.092189 -0500][Dump   ][AsyncSock         ] [fndcatemp2.fnal.gov:1094 #0.0] Received a message of 8 bytes
[2019-08-21 10:37:58.092215 -0500][Debug  ][XRootDTransport   ] [fndcatemp2.fnal.gov:1094 #0.0] XrdSecProtect loaded.
[2019-08-21 10:37:58.092247 -0500][Debug  ][XRootDTransport   ] [fndcatemp2.fnal.gov:1094 #0.0] Authenticated with gsi.
[2019-08-21 10:37:58.092275 -0500][Debug  ][XRootDTransport   ] [fndcatemp2.fnal.gov:1094 #0.0] Sending out kXR_endsess for session: 0c000000e9620000180000000c000000
[2019-08-21 10:37:58.092329 -0500][Dump   ][AsyncSock         ] [fndcatemp2.fnal.gov:1094 #0.0] Wrote a message:  (0x2c046610), 24 bytes
[2019-08-21 10:37:58.092751 -0500][Dump   ][XRootDTransport   ] [msg: 0x2c046610] Expecting 23 bytes of message body
[2019-08-21 10:37:58.092820 -0500][Dump   ][AsyncSock         ] [fndcatemp2.fnal.gov:1094 #0.0] Received message header, size: 8
[2019-08-21 10:37:58.092849 -0500][Dump   ][AsyncSock         ] [fndcatemp2.fnal.gov:1094 #0.0] Received a message of 31 bytes
[2019-08-21 10:37:58.092882 -0500][Error  ][XRootDTransport   ] [fndcatemp2.fnal.gov:1094 #0.0] Got error response to kXR_endsess: Request not signed
[2019-08-21 10:37:58.092909 -0500][Error  ][AsyncSock         ] [fndcatemp2.fnal.gov:1094 #0.0] Socket error while handshaking: [FATAL] Hand shake failed

Is this a known issue?  I checked the Release notes and the GitHub Issues but cannot find anything that looks like a fix for or an observation of this.

Of course, 4.10 clients work against both servers:

[arossi@otfrid Desktop]$ xrdcp410 /etc/fstab root://fndcatemp2.fnal.gov:1094//data/xrootdfs/otfrid-`date | tr ' ' '.'`
[574B/574B][100%][==================================================][574B/s]  
[arossi@otfrid Desktop]$ xrdcp410 /etc/fstab root://fndcatemp2.fnal.gov:1095//data/xrootdfs/otfrid-`date | tr ' ' '.'`
[574B/574B][100%][==================================================][574B/s]  

Should I open an issue?

Thanks, Al

________________________________________________
Albert L. Rossi
Application Developer & Systems Analyst III
Scientific Computing Division, Data Movement Development
FCC 229A
Mail Station 369 (FCC 2W)
Fermi National Accelerator Laboratory
Batavia, IL 60510
(630) 840-3023


Use REPLY-ALL to reply to list

To unsubscribe from the XROOTD-DEV list, click the following link:
https://listserv.slac.stanford.edu/cgi-bin/wa?SUBED1=XROOTD-DEV&A=1



Use REPLY-ALL to reply to list

To unsubscribe from the XROOTD-L list, click the following link:
https://listserv.slac.stanford.edu/cgi-bin/wa?SUBED1=XROOTD-L&A=1