Print

Print


Hi Adrian,

It's a feature not a bug ;-)

Now more seriously, if you detach your script from the terminal,
it wont be prompted to give a password in order to create a
new proxy cert (it will rather simply fail).

To summarize, we check if stdin/stdout are attach to a terminal:
https://github.com/xrootd/xrootd/blob/master/src/XrdSecgsi/XrdSecProtocolgsi.cc#L4793-L4796
and only then we try to generate the proxy cert if it's absent,
otherwise the client simply fails to authenticate.

Hope that helps.

Cheers,
Michal
________________________________________
From: [log in to unmask] [[log in to unmask]] on behalf of Adrian Sevcenco [[log in to unmask]]
Sent: 28 February 2020 10:54
To: [log in to unmask]
Subject: xrdfs :: request for x509 proxy???

Hi! While doing an stat with xrdfs i encountered this :

200228 10:55:42 1030664 cryptossl_X509CreateProxy: Your identity:
/DC=RO/DC=RomanianGRID/O=ISS/CN=Adrian SEVCENCO
Enter PEM pass phrase:

Why would the xrdfs ask to create proxy?
Also, this happened when doing cp operation within python ..

While on the issue of required or not i cannot say anything, the fact
that i get a dialogue instead of a direct failure is a huge bug!!!
It breaks any script that do automatic tasks or a sequence of tasks

Thanks!
Adrian



########################################################################
Use REPLY-ALL to reply to list

To unsubscribe from the XROOTD-L list, click the following link:
https://listserv.slac.stanford.edu/cgi-bin/wa?SUBED1=XROOTD-L&A=1

########################################################################
Use REPLY-ALL to reply to list

To unsubscribe from the XROOTD-L list, click the following link:
https://listserv.slac.stanford.edu/cgi-bin/wa?SUBED1=XROOTD-L&A=1