Hello, Andrew.

We are trying to support CMS AAA service for CMS research.

As far as I know, the XRootD Door in dCache performs as XRootD redirector ("all.role manager").

In order to use this XRootD door to service CMS AAA, it must be redirected from that door to global redirector,

but dCache does not appear to offer that feature.

(We have found a plug-in with similar functions, but we are hesitant to apply it because it is developed for ATLAS' FAX services not CMS AAA.)

As you said, we are currently using the proxy function of XRootD to provide CMS AAA.

However, if we use the "pss" option to provide the service, I afraid that the service network performance will be limited to the network bandwidth of one proxy server. 

If the "redirect" option was fully working like as my idea, I expect that a global request can use all networks bandwidth like as a local job.

Of course, since our external network bandwidth is shared 10Gbps and the server has provided 10Gbps, there is no loss.

However, after the network equipment has been upgraded, I think that the setting must be changed.

I wondered if I could provide a better environment.

If it was not possible and the "redirect" option was not prepared to perform the function, we will keep the existing settings.

Regards, 

-----------------------원본 메세지-----------------------
보낸사람: "Andrew Hanushevsky "<[log in to unmask]>
받는사람: "Geonmo Ryu" <[log in to unmask]>,[log in to unmask]
보낸시간: 2019-09-18 05:25:06 GMT +0900 (ROK)
제목: Re: About XRootD's redirect feature

 

 

Hi Ryu,

 

I’m not sure what you wish to accomplish here. Normally, people fronting dCache use an xrootd proxy server to get around firewall issues. Here there seems to be no firewall so I would have thought people would simply directly go to dCache. Why an xrootd in between? Since I am not a dCache expert (though I can get you in contact with one) I am not sure what restrictions there may be when bypassing the dCache head node and simply going to one of the doors. It would appear that there are some restrictions and likely there is missing CGI information for certain operations. That said, I’m surprised that this works at all.

 

Shall I get you in contact with someone who knows more about dCache?

 

Andy

 

From: [log in to unmask]">"Geonmo Ryu"

Sent: Tuesday, September 17, 2019 2:26 AM

To: [log in to unmask]">[log in to unmask]

Subject: About XRootD's redirect feature

 

Hello, XRootD experts.

 

I have a question about "xrootd.redirect" feature of xrootd.

 

I'm trying to connect the xrootd server (not redirector) to a dCache's xrootd door as a backend.

 

There are many examples, so I'm going to try to follow them, but it doesn't work well.

 

The settings for the xrootd server I set are as follows.

---

xrd.port 1097

all.export /

all.role server

xrootd.redirect cms-t2-se01.sdfarm.kr:1094 all /

ofs.forward cms-t2-se01.sdfarm.kr:1094 all

 

cms.dfs lookup central

cms.trace all

---

Symptoms that followed these settings are as follows:

1. Directory navigation works well. The directory structure of dCache xrootd door on the 1094 port is displayed well.

2. Meta commands such as "stat" is work well for files.

3. Attempting to open or copy a file (such as root command or xrdcp) results in an Internal Error.

---

[root@cms-t2-se01 xrootd]# xrdfs cms-t2-se01.sdfarm.kr:1097 ls /pnfs/sdfarm.kr/data/cms/store/mc/SAM/GenericTTbar/AODSIM/CMSSW_9_2_6_91X_mcRun1_realistic_v2-v1/00000

 

/pnfs/sdfarm.kr/data/cms/store/mc/SAM/GenericTTbar/AODSIM/CMSSW_9_2_6_91X_mcRun1_realistic_v2-v1/00000/A64CCCF2-5C76-E711-B359-0CC47A78A3F8.root

/pnfs/sdfarm.kr/data/cms/store/mc/SAM/GenericTTbar/AODSIM/CMSSW_9_2_6_91X_mcRun1_realistic_v2-v1/00000/AE237916-5D76-E711-A48C-FA163EEEBFED.root

/pnfs/sdfarm.kr/data/cms/store/mc/SAM/GenericTTbar/AODSIM/CMSSW_9_2_6_91X_mcRun1_realistic_v2-v1/00000/CE860B10-5D76-E711-BCA8-FA163EAA761A.root

 

[root@cms-t2-se01 xrootd]# xrdfs cms-t2-se01.sdfarm.kr:1097 stat /pnfs/sdfarm.kr/data/cms/store/mc/SAM/GenericTTbar/AODSIM/CMSSW_9_2_6_91X_mcRun1_realistic_v2-v1/00000/A64CCCF2-5C76-E711-B359-0CC47A78A3F8.root

Path:   /pnfs/sdfarm.kr/data/cms/store/mc/SAM/GenericTTbar/AODSIM/CMSSW_9_2_6_91X_mcRun1_realistic_v2-v1/00000/A64CCCF2-5C76-E711-B359-0CC47A78A3F8.root

Id:     0

Size:   240461986

MTime:  2017-10-07 00:23:34

Flags:  48 (IsReadable|IsWritable)

 

(base) [geonmo@ui10 ~]$ root -l  root://cms-t2-se01.sdfarm.kr:1097///pnfs/sdfarm.kr/data/cms/store/mc/SAM/GenericTTbar/AODSIM/CMSSW_9_2_6_91X_mcRun1_realistic_v2-v1/00000/A64CCCF2-5C76-E711-B359-0CC47A78A3F8.root

root [0]

Attaching file root://cms-t2-se01.sdfarm.kr:1097//pnfs/sdfarm.kr/data/cms/store/mc/SAM/GenericTTbar/AODSIM/CMSSW_9_2_6_91X_mcRun1_realistic_v2-v1/00000/A64CCCF2-5C76-E711-B359-0CC47A78A3F8.root as _file0...

Error in <TNetXNGFile::Open>: [ERROR] Server responded with an error: [3011] Unable to open /pnfs/sdfarm.kr/data/cms/store/mc/SAM/GenericTTbar/AODSIM/CMSSW_9_2_6_91X_mcRun1_realistic_v2-v1/00000/A64CCCF2-5C76-E711-B359-0CC47A78A3F8.root; no such file or directory

(TFile *) nullptr

 

xrootd log:

[root@cms-t2-se01 xrootd]# tail -n 3 /var/log/xrootd/redir/xrootd.log 

190917 18:24:03 22127 XrootdXeq: geonmo.1763304:22@[2001:320:15:124:d6ae:52ff:fe8c:6610] disc 0:00:01

190917 18:24:08 25086 XrootdXeq: geonmo.1763339:21@[2001:320:15:124:d6ae:52ff:fe8c:6610] pub IP64 login

190917 18:24:08 25086 ofs_open: geonmo.1763339:21@[2001:320:15:124:d6ae:52ff:fe8c:6610] Unable to open /pnfs/sdfarm.kr/data/cms/store/mc/SAM/GenericTTbar/AODSIM/CMSSW_9_2_6_91X_mcRun1_realistic_v2-v1/00000/A64CCCF2-5C76-E711-B359-0CC47A78A3F8.root; no such file or directory

---

 

How can I use it as a complete redirect?

 

Regards,

 

 

 

--------------------------------------------------------------------------------------------------
Geonmo Ryu / 류건모

Korea Institute of Science and Technology Information (KISTI)
Global Science Experimental Data Hub Center (GSDC)
245 Daehak-ro, Yuseong-gu, Daejeon, 305-806, Republic of Korea
Tel :  +82-42-869-1639, +82-10-4337-9423
Mail : [log in to unmask] / [log in to unmask]
--------------------------------------------------------------------------------------------------

 

---

Use REPLY-ALL to reply to list

To unsubscribe from the XROOTD-L list, click the following link:
https://listserv.slac.stanford.edu/cgi-bin/wa?SUBED1=XROOTD-L&A=1

 

---

Use REPLY-ALL to reply to list

To unsubscribe from the XROOTD-L list, click the following link:
https://listserv.slac.stanford.edu/cgi-bin/wa?SUBED1=XROOTD-L&A=1