Print

Print


Ciao.

In order to try and find a (user allowed) way to overcome network
limitations in HPC sites, we were trying to use tsocks. In this way, we can
~ establish a VPN without the need to be root or such.

The system used "ssh -D" (today) or "openconnect" (tomorrow) to
establish the connection, and it seems transparent to most (!) of the user
commands we tried.

For example, the machine we are on has no connectivity to PISA, but a
"tsocks ssh [log in to unmask]" (or the bare command with a
proper LD_PRELOAD) works just fine.

So, we are confident the basic routing table works (wget is ok, scp is ok,
etc etc etc).

BUT: xrdcp does not like it, and a command like

xrdcp  -d 3 root://
stormfe1.pi.infn.it//store/mc/SAM/GenericTTbar/AODSIM/CMSSW_9_0_0_90X_mcRun1_realistic_v4-v1/10000/28B9D1FB-8B31-E711-AA4E-0025905B85B2.root
 .

stops with

[2020-08-04 16:19:56.308921 +0200][Error  ][AsyncSock         ] [
stormfe1.pi.infn.it:1094 #0.0] Socket error while handshaking: [ERROR]
Socket error
[2020-08-04 16:19:56.309017 +0200][Debug  ][AsyncSock         ] [
stormfe1.pi.infn.it:1094 #0.0] Closing the socket
[2020-08-04 16:19:56.309228 +0200][Debug  ][Poller            ]
<[::ffff:127.0.0.1]:30547><--><[::ffff:127.0.0.1]:5555> Removing socket
from the poller


So question is: is there any trivial reason why XrootD protocol should not
be able to route via a tsocks?

thanks a lot

mirko, daniele, tom

-- 
Tommaso Boccali
INFN Pisa

########################################################################
Use REPLY-ALL to reply to list

To unsubscribe from the XROOTD-L list, click the following link:
https://listserv.slac.stanford.edu/cgi-bin/wa?SUBED1=XROOTD-L&A=1