 |
 |
Dear colleagues, I'm not sure if others have seen it yet, but likely since the VOMS upgrades today, it seems all XRootD sites (both production and testing sites) have been broken depending on which VOMS proxies are used: $ voms-proxy-init3 -voms atlas -bits 2048 -old $ xrdfs se1.oscer.ou.edu ls /xrd/atlasdatadisk/ >/dev/null => works $ voms-proxy-init3 -voms atlas -bits 2048 -rfc $ xrdfs se1.oscer.ou.edu ls /xrd/atlasdatadisk/ >/dev/null [ERROR] Server responded with an error: [3010] Unable to locate /xrd/atlasdatadisk/; permission denied I can also reproduce with our Bonn Tier3s production storage: $ xrdfs xrootd.physik.uni-bonn.de ls /cephfs/grid/atlas/user/scratch [ERROR] Server responded with an error: [3010] Unable to locate /cephfs/grid/atlas/user/scratch; permission denied Checking the XRootD server logs, I find: --------------------------------------------- 200923 16:18:39 3004 XrdVomsFun: proxy: /C=DE/O=GermanGrid/OU=UniBonn/CN=Oliver Freyermuth/CN=1295746099 200923 16:18:39 3004 XrdVomsFun: adding cert: /C=DE/O=GermanGrid/OU=UniBonn/CN=Oliver Freyermuth 200923 16:18:39 3004 XrdVomsFun: retrieval FAILED: AC issuer key unreadable or unverifiable. --------------------------------------------- I'm sorry for adding so many lists, but I think this is important for the DOMA-TPC group (since many participants are affected), the VOMS admins (who may know if there's still something amiss?) and the XRootD developers (who may be able to guess what is broken). We find this error going back in our logs starting from ~12:30 today. The EGI WebDAV probe finally started failing about an hour ago (likely when it refreshed it's proxy?). If there's any better place to contact about this issue, please let me know — since nothing changed locally and many sites are affected, I presume it's an effect of the VOMS upgrade. Cheers, Oliver -- Oliver Freyermuth Universität Bonn Physikalisches Institut, Raum 1.047 Nußallee 12 53115 Bonn -- Tel.: +49 228 73 2367 Fax: +49 228 73 7869 -- ######################################################################## Use REPLY-ALL to reply to list To unsubscribe from the XROOTD-L list, click the following link: https://listserv.slac.stanford.edu/cgi-bin/wa?SUBED1=XROOTD-L&A=1