Print

Print


Hi Geonmo,

 

What version of Xrootd you were running (if that works) and what version of Xrootd you are running now that doesn’t work?

 

regards,

--

Wei Yang  |  [log in to unmask]  |  650-926-3338(O)

 

On 11/1/20, 10:46 PM, "[log in to unmask] on behalf of "Geonmo Ryu"" <[log in to unmask] on behalf of [log in to unmask]> wrote:

 

Hello, XRootD users,

 

I am contacting you because GSI has not been authenticated since the XRootD package was automatically updated.

 

We are using the XRootD Proxy Server for a global federation of CMS experiment.

 

The authentication of the server has problems.

 

The log is as follows: Please contact me if you need the entire log.

 

201102 15:33:21 6455 secgsi_Authenticate: ERROR: the authz plug-in reported failure

201102 15:33:21 6455 XrootdXeq: User authentication failed;

201102 15:33:21 6455 geonmo.11757:25@cms-t2-se01 XrootdResponse: sending err 3030: 

201102 15:33:21 6455 XrootdXeq: geonmo.11757:25@cms-t2-se01 disc 0:00:00

201102 15:33:21 44816 geonmo.11757:24@cms-t2-se01 XrootdProtocol: more auth requested; sz=2699

INFO in AuthzKey: Returning creds of len 7588 as key.

AuthzVO: Invalid cert; vo missing

 

The xrootd configuration for GSI auth is,

 

# X509 configuration, change nothing

xrootd.seclib /usr/lib64/libXrdSec.so

sec.protocol /usr/lib64 gsi -authzfun:/usr/lib64/libXrdSecgsiAUTHZVO-4.so -gmapopt:10 -gmapto:0 -ca:1 -crl:1 -authzfunparms:debug=1,valido=cms,vo2grp=%s

acc.authdb /etc/xrootd/auth_file

acc.authrefresh 60

ofs.authorize

 

Regards,

 

 

--------------------------------------------------------------------------------------------------
Geonmo Ryu /
류건모

Korea Institute of Science and Technology Information (KISTI)
Global Science experimental Data hub Center (GSDC)
245 Daehak-ro, Yuseong-gu, Daejeon, 305-806, Republic of Korea
Tel :  +82-42-869-1639
E-mail: (CMS Helpdesk) [log in to unmask] / (Contact) [log in to unmask]
-------------------------------------------------------------------------------------------------- 

 

 

 

 

 

 

Image removed by sender.


Use REPLY-ALL to reply to list

To unsubscribe from the XROOTD-L list, click the following link:
https://listserv.slac.stanford.edu/cgi-bin/wa?SUBED1=XROOTD-L&A=1



Use REPLY-ALL to reply to list

To unsubscribe from the XROOTD-L list, click the following link:
https://listserv.slac.stanford.edu/cgi-bin/wa?SUBED1=XROOTD-L&A=1