Print

Print


That maybe the reason. I want to add another thing. While debugging an issue at OU, we had to  rebuild our xrootd proxy (for TPC, etc. frontend activities) to match theirs. And I found that

1. libXrdSecgsiVOMS-4.so exists in xrootd-libs-4.12.1-1 @ xrootd.stable repo. It works with the ATLAS VO but not with Dteam VO.
2. libXrdSecgsiVOMS-4.so doesn't exist in xrootd-libs-4.12.1-1 @ epel. 
3. libXrdSecgsiVOMS-4.so in xrootd-voms-plugins @ OSG 3.4 repo works with both ATLAS and Dteam VO. But this rpms is superseded by xrootd-voms-4.12.3.

So there was lots of headache to put all these together to match exactly what OU has. I think it would be nice that the xrootd-libs from all repos have the same thing.

I didn't check the later Xrootd releases. I hope the issue in 1. Is addressed and behind us. I guess I will check if nobody have do so (as well as the WLCG VO).

regards,
--
Wei Yang  |  [log in to unmask]  |  650-926-3338(O)

-----Original Message-----
From: <[log in to unmask]> on behalf of Oliver Freyermuth <[log in to unmask]>
Date: Friday, June 26, 2020 at 1:03 AM
To: Fabrizio Furano <[log in to unmask]>, Petr Vokac <[log in to unmask]>, <[log in to unmask]>
Subject: Re: What to do? "Unable to load vomslib plugin /usr/lib64/libXrdSecgsiVOMS.so"

    Hi together,
    
    Am 26.06.20 um 09:55 schrieb Fabrizio Furano:
    > Hi Petr,
    > 
    >   indeed, but in theory the -4 should be automatically
    > managed by the xrd plugin loader AFAIR
    
    indeed, this should be the case. So better specify it without the number so you don't have to adapt it when XRootD 5 comes ;-).
    
    Is the underlying issue maybe this one?
    https://github.com/xrootd/xrootd/issues/1191
    
    This should only affected 4.12.0, though.
    
    Cheers,
    	Oliver
    
    > 
    > f
    > 
    > 
    > Il 26/06/20 09:54, Petr Vokac ha scritto:
    >> On CentOS7 I don't have /usr/lib64/libXrdSecgsiVOMS.so but just
    >> /usr/lib64/libXrdSecgsiVOMS-4.so
    >>
    >> Petr
    >>
    >> On 6/26/20 9:40 AM, Fabrizio Furano wrote:
    >>> Hi,
    >>>
    >>>   I'm trying to start a DPM headnode with xrootd 4.12, and I am getting
    >>> this funny error from xrdsecgsi. Does anyone have any suggestion ?
    >>>
    >>> Thank you!
    >>> Fabrizio
    >>>
    >>>
    >>>
    >>> Plugin loaded unreleased secgsi v20200611-b122d66 from sec.protocol
    >>> /usr/lib64/libXrdSecgsi-4.so
    >>> 200626 09:30:46 15701 secgsi_InitOpts: ***
    >>> ------------------------------------------------------------ ***
    >>> 200626 09:30:46 15701 secgsi_InitOpts:  Mode: server
    >>> 200626 09:30:46 15701 secgsi_InitOpts:  Debug: -1
    >>> 200626 09:30:46 15701 secgsi_InitOpts:  CA dir:
    >>> /etc/grid-security/certificates/
    >>> 200626 09:30:46 15701 secgsi_InitOpts:  CA verification level: 2
    >>> 200626 09:30:46 15701 secgsi_InitOpts:  CRL dir:
    >>> /etc/grid-security/certificates/
    >>> 200626 09:30:46 15701 secgsi_InitOpts:  CRL extension: .r0
    >>> 200626 09:30:46 15701 secgsi_InitOpts:  CRL check level: 3
    >>> 200626 09:30:46 15701 secgsi_InitOpts:  CRL refresh time: 86400
    >>> 200626 09:30:46 15701 secgsi_InitOpts:  Certificate:
    >>> /etc/grid-security/dpmmgr/dpmcert.pem
    >>> 200626 09:30:46 15701 secgsi_InitOpts:  Key:
    >>> /etc/grid-security/dpmmgr/dpmkey.pem
    >>> 200626 09:30:46 15701 secgsi_InitOpts:  Proxy delegation option: 0
    >>> 200626 09:30:46 15701 secgsi_InitOpts:  GRIDmap file:
    >>> /etc/grid-security/grid-mapfile
    >>> 200626 09:30:46 15701 secgsi_InitOpts:  GRIDmap option: 10
    >>> 200626 09:30:46 15701 secgsi_InitOpts:  GRIDmap cache entries expiration
    >>> (secs): 600
    >>> 200626 09:30:46 15701 secgsi_InitOpts:  Client proxy availability in
    >>> XrdSecEntity.endorsement: 0
    >>> 200626 09:30:46 15701 secgsi_InitOpts:  VOMS option: 1
    >>> 200626 09:30:46 15701 secgsi_InitOpts:  VOMS extraction function:
    >>> /usr/lib64/libXrdSecgsiVOMS.so
    >>> 200626 09:30:46 15701 secgsi_InitOpts:  MonInfo option: 0
    >>> 200626 09:30:46 15701 secgsi_InitOpts:  Crypto modules: ssl
    >>> 200626 09:30:46 15701 secgsi_InitOpts:  Ciphers:
    >>> aes-128-cbc:bf-cbc:des-ede3-cbc
    >>> 200626 09:30:46 15701 secgsi_InitOpts:  MDigests: sha256:sha1
    >>> 200626 09:30:46 15701 secgsi_InitOpts:  Trusting DNS for hostname checking
    >>> 200626 09:30:46 15701 secgsi_InitOpts: ***
    >>> ------------------------------------------------------------ ***
    >>> 200626 09:30:46 15701 secgsi_LoadVOMSFun: Unable to load vomslib plugin
    >>> /usr/lib64/libXrdSecgsiVOMS.so
    >>> 200626 09:30:46 15701 secgsi_LoadVOMSFun: could not find
    >>> 'XrdSecgsiVOMSFun()' in /usr/lib64/libXrdSecgsiVOMS.so
    >>> 200626 09:30:46 15701 secgsi_Init: Secgsi: ErrError: VOMS plug-in could
    >>> not be loaded: /usr/lib64/libXrdSecgsiVOMS.so
    >>> Secgsi: ErrError: VOMS plug-in could not be loaded:
    >>> /usr/lib64/libXrdSecgsiVOMS.so
    >>>
    >>>
    >>> ########################################################################
    >>> Use REPLY-ALL to reply to list
    >>>
    >>> To unsubscribe from the XROOTD-L list, click the following link:
    >>> https://listserv.slac.stanford.edu/cgi-bin/wa?SUBED1=XROOTD-L&A=1
    >>
    > 
    > ########################################################################
    > Use REPLY-ALL to reply to list
    > 
    > To unsubscribe from the XROOTD-L list, click the following link:
    > https://listserv.slac.stanford.edu/cgi-bin/wa?SUBED1=XROOTD-L&A=1
    > 
    
    
    
    ########################################################################
    Use REPLY-ALL to reply to list
    
    To unsubscribe from the XROOTD-L list, click the following link:
    https://listserv.slac.stanford.edu/cgi-bin/wa?SUBED1=XROOTD-L&A=1
    


########################################################################
Use REPLY-ALL to reply to list

To unsubscribe from the XROOTD-L list, click the following link:
https://listserv.slac.stanford.edu/cgi-bin/wa?SUBED1=XROOTD-L&A=1