Print

Print


Hi,

The xrootd.tls all seems to have improved the situation. But... now getting auth error, which could certainly be my fault. Unless it looks like the client error you saw.

On the origin (receiving the connection):

200504 20:16:18 9176 XrdInet: Accepted connection from 113@cache
200504 20:16:18 9176 XrdProtLoad: matched port 1095 protocol xroot
200504 20:16:18 9176 anon:113@cache XrdPoll: FD 113 attached to poller 0; num=1
200504 20:16:18 9176 XrootdXeq: anon:113@cache connection upgraded to TLSv1.2
200504 20:16:18 9176 XrdPoll: Poller 0 enabled p0.13393:113@cache
200504 20:16:18 9177 p0.13393:113@cache XrdPoll: Link 113 terminating: hangup
200504 20:16:18 9237 XrdSched: running p0.13393:113@cache inq=0
200504 20:16:18 9237 XrootdXeq: p0.13393:113@cache disc 0:00:00
200504 20:16:18 9237 p0.13393:113@cache XrdPoll: FD 113 detached from poller 0; num=0
200504 20:16:18 9175 XrdInet: Accepted connection from 115@cache
200504 20:16:18 9176 XrdSched: running main accept inq=0
200504 20:16:18 9175 XrdProtLoad: matched port 1095 protocol xroot
200504 20:16:18 9175 anon:115@cache XrdPoll: FD 115 attached to poller 0; num=1
200504 20:16:18 9175 XrootdXeq: anon:115@cache connection upgraded to TLSv1.2
200504 20:16:18 9175 XrdPoll: Poller 0 enabled xrootd.13393:115@cache
200504 20:16:18 9177 xrootd.13393:115@cache XrdPoll: Link 115 terminating: hangup
200504 20:16:18 9237 XrdSched: running xrootd.13393:115@cache inq=0
200504 20:16:18 9237 XrootdXeq: xrootd.13393:115@cache disc 0:00:00
200504 20:16:18 9237 xrootd.13393:115@cache XrdPoll: FD 115 detached from poller 0; num=0

On the cache server:

200504 20:16:18 16921 anon:196@client XrdPoll: FD 196 attached to poller 0; num=1
200504 20:16:18 16921 XrootdBridge: unknown.2732:196@client login as nobody
200504 20:16:18 16921 unknown.2732:196@client ofs_stat:  fn=/hcc/PROTECTED/dweitzel-test/blah2.txt
200504 20:16:18 16921 scitokens_Reconfig: Parsing configuration file: /run/stash-cache-auth/scitokens.conf
200504 20:16:18 13421 XrdSched: running monitor fstat inq=0
200504 20:16:18 13421 XrdSched: scheduling monitor fstat in 60 seconds
[2020-05-04 20:16:18.802790 +0000][Error  ][XRootDTransport   ] [p0@origin:1095.0] No protocols left to try
[2020-05-04 20:16:18.802832 +0000][Error  ][AsyncSock         ] [p0@origin:1095.0] Socket error while handshaking: [FATAL] Auth failed
[2020-05-04 20:16:18.802871 +0000][Error  ][PostMaster        ] [p0@origin:1095] elapsed = 0, pConnectionWindow = 120 seconds.
[2020-05-04 20:16:18.802882 +0000][Error  ][PostMaster        ] [p0@origin:1095] Unable to recover: [FATAL] Auth failed.
[2020-05-04 20:16:18.802893 +0000][Error  ][XRootD            ] [p0@origin:1095] Impossible to send message kXR_stat (path: /hcc/PROTECTED/dweitzel-test/blah2.txt?authz=Bearer%20longtoken&oss.lcl=1&pss.tid=http, flags: none). Trying to recover.
200504 20:16:18 16921 ofs_stat: unknown.2732:196@client Unable to locate /hcc/PROTECTED/dweitzel-test/blah2.txt; permission denied
200504 20:16:18 16921 unknown.2732:196@client XrootdResponse: sending err 3010: Unable to locate /hcc/PROTECTED/dweitzel-test/blah2.txt; permission denied
200504 20:16:18 16921 unknown.2732:196@client ofs_open: 0-600 fn=/hcc/PROTECTED/dweitzel-test/blah2.txt
[2020-05-04 20:16:18.869276 +0000][Error  ][XRootDTransport   ] [origin:1095.0] No protocols left to try
[2020-05-04 20:16:18.869303 +0000][Error  ][AsyncSock         ] [origin:1095.0] Socket error while handshaking: [FATAL] Auth failed
[2020-05-04 20:16:18.869363 +0000][Error  ][PostMaster        ] [origin:1095] elapsed = 0, pConnectionWindow = 120 seconds.
[2020-05-04 20:16:18.869374 +0000][Error  ][PostMaster        ] [origin:1095] Unable to recover: [FATAL] Auth failed.
[2020-05-04 20:16:18.869379 +0000][Error  ][XRootD            ] [origin:1095] Impossible to send message kXR_open (file: /hcc/PROTECTED/dweitzel-test/blah2.txt?authz=Bearer%20longtoken&oss.lcl=1&pss.tid=http, mode: 00, flags: kXR_open_read kXR_async kXR_retstat ). Trying to recover.
200504 20:16:18 16921 Posix_Open: [FATAL] Auth failed open root://origin:1095//hcc/PROTECTED/dweitzel-test/blah2.txt?authz=Bearer%20longtoken&pss.tid=http&oss.lcl=1
200504 20:16:18 16921 ofs_open: unknown.2732:196@client Unable to open /hcc/PROTECTED/dweitzel-test/blah2.txt; permission denied
200504 20:16:18 16921 unknown.2732:196@client XrootdResponse: sending err 3010: Unable to open /hcc/PROTECTED/dweitzel-test/blah2.txt; permission denied
200504 20:16:18 16921 unknown.2732:196@client ofs_close: use=0 fn=dummy
200504 20:16:18 16921 XrootdXeq: unknown.2732:196@client disc 0:00:00 (send failure)
200504 20:16:18 16921 unknown.2732:196@client XrdPoll: FD 196 detached from poller 0; num=0


You are receiving this because you commented.
Reply to this email directly, view it on GitHub, or unsubscribe.

[ { "@context": "http://schema.org", "@type": "EmailMessage", "potentialAction": { "@type": "ViewAction", "target": "https://github.com/xrootd/xrootd/issues/1188#issuecomment-623687622", "url": "https://github.com/xrootd/xrootd/issues/1188#issuecomment-623687622", "name": "View Issue" }, "description": "View this Issue on GitHub", "publisher": { "@type": "Organization", "name": "GitHub", "url": "https://github.com" } } ]

Use REPLY-ALL to reply to list

To unsubscribe from the XROOTD-DEV list, click the following link:
https://listserv.slac.stanford.edu/cgi-bin/wa?SUBED1=XROOTD-DEV&A=1