 |
 |
Well, you should make sure xcache has a proxy cert if you are going to an origin that requires GSI authentication, which all of them usually do unless you didn't configure that. Presumably, you want to test authirzation tokens in the presence of authentication (e.g. gsi). On Mon, 4 May 2020, Derek Weitzel wrote: > No stall this time... Can't recreate the stall... But the debugging seems to indicate that the server is asking for GSI? Or the cache is trying to use GSI, even though it doesn't have a proxy? > > Origin Debug output: > ``` > 200504 21:27:53 29981 XrdXeq: Worker thread started > 200504 21:27:53 29886 XrdInet: Accepted connection from 113@cache > 200504 21:27:53 29886 XrdProtLoad: matched port 1095 protocol xroot > 200504 21:27:53 29886 anon:113@cache XrdPoll: FD 113 attached to poller 0; num=1 > 200504 21:27:53 29886 anon:113@cache XrootdProtocol: 0000 req=protocol dlen=0 > 200504 21:27:53 29886 anon:113@cache XrootdResponse: 0000 sending 8 data bytes > 200504 21:27:53 29886 anon:113@cache XrootdProtocol: 0000 req=login dlen=112 > 200504 21:27:53 29886 sec_getParms: cache sectoken=&P=gsi,v:10400,c:ssl,ca:4f06f81d.0|4a0a35c0.0 > 200504 21:27:53 29886 p0.7047:113@cache XrootdResponse: 0000 sending 61 data bytes; status=0 > 200504 21:27:53 29981 XrdSched: Now have 4 workers > 200504 21:27:53 29981 XrdSched: running monitor window clock inq=0 > 200504 21:27:53 29981 XrdSched: scheduling monitor window clock in 5 seconds > 200504 21:27:53 29982 XrdXeq: Worker thread started > 200504 21:27:53 29886 XrootdXeq: p0.7047:113@cache disc 0:00:00 > 200504 21:27:53 29886 p0.7047:113@cache XrdPoll: FD 113 detached from poller 0; num=0 > ``` > > Cache debug output: > ``` > 200504 21:27:53 7076 secgsi_InitProxy: Not a tty: cannot prompt for proxies - do nothing > 200504 21:27:53 7076 secgsi_QueryProxy: problems initializing proxy via external shell > [2020-05-04 21:27:53.222688 +0000][Error ][XRootDTransport ] [p0@origin:1095.0] No protocols left to try > [2020-05-04 21:27:53.222710 +0000][Error ][AsyncSock ] [p0@origin:1095.0] Socket error while handshaking: [FATAL] Auth failed > [2020-05-04 21:27:53.222748 +0000][Error ][PostMaster ] [p0@origin:1095] elapsed = 0, pConnectionWindow = 120 seconds. > [2020-05-04 21:27:53.222759 +0000][Error ][PostMaster ] [p0@origin:1095] Unable to recover: [FATAL] Auth failed. > [2020-05-04 21:27:53.222771 +0000][Error ][XRootD ] [p0@origin:1095] Impossible to send message kXR_stat (path: /hcc/PROTECTED/dweitzel-test/blah2.txt?authz=Bearer%20longtoken&oss.lcl=1&pss.tid=http, flags: none). Trying to recover. > 200504 21:27:53 7053 ofs_stat: unknown.1:161@client Unable to locate /hcc/PROTECTED/dweitzel-test/blah2.txt; permission denied > 200504 21:27:53 7053 unknown.1:161@client XrootdProtocol: 0000 rc=-1 stat /hcc/PROTECTED/dweitzel-test/blah2.txt > 200504 21:27:53 7053 unknown.1:161@client XrootdResponse: 0000 sending err 3010: Unable to locate /hcc/PROTECTED/dweitzel-test/blah2.txt; permission denied > ``` > > -- > You are receiving this because you commented. > Reply to this email directly or view it on GitHub: > https://github.com/xrootd/xrootd/issues/1188#issuecomment-623720741 -- You are receiving this because you commented. Reply to this email directly or view it on GitHub: https://github.com/xrootd/xrootd/issues/1188#issuecomment-623740333 ######################################################################## Use REPLY-ALL to reply to list To unsubscribe from the XROOTD-DEV list, click the following link: https://listserv.slac.stanford.edu/cgi-bin/wa?SUBED1=XROOTD-DEV&A=1