 |
 |
Hello, Yang.Our XRootD version is, Old version is "4.12.2-1.el7" New version is : "5.0.2-1.el7"By the way, it doesn't work well with non-eXtended attribute (NoXA) storage after the upgrade.I know xrootd team warned me to change it for a long time, but can't you still set it up to be compatible?Regards, -----------------------원본 메세지-----------------------보낸사람: "Yang, Wei "<[log in to unmask]>받는사람: "Geonmo Ryu" <[log in to unmask]>,xrootd-l <[log in to unmask]>보낸시간: 2020-11-02 17:28:45 GMT +0900 (ROK)제목: Re: After updating XRootD Package, I would like to inquire about the failure of authentication using GSI certificate.Hi Geonmo, What version of Xrootd you were running (if that works) and what version of Xrootd you are running now that doesn’t work? regards, -- Wei Yang | [log in to unmask] | 650-926-3338(O) On 11/1/20, 10:46 PM, "[log in to unmask] on behalf of "Geonmo Ryu"" <[log in to unmask] on behalf of [log in to unmask]> wrote: Hello, XRootD users, I am contacting you because GSI has not been authenticated since the XRootD package was automatically updated. We are using the XRootD Proxy Server for a global federation of CMS experiment. The authentication of the server has problems. The log is as follows: Please contact me if you need the entire log. 201102 15:33:21 6455 secgsi_Authenticate: ERROR: the authz plug-in reported failure 201102 15:33:21 6455 XrootdXeq: User authentication failed; 201102 15:33:21 6455 geonmo.11757:25@cms-t2-se01 XrootdResponse: sending err 3030: 201102 15:33:21 6455 XrootdXeq: geonmo.11757:25@cms-t2-se01 disc 0:00:00 201102 15:33:21 44816 geonmo.11757:24@cms-t2-se01 XrootdProtocol: more auth requested; sz=2699 INFO in AuthzKey: Returning creds of len 7588 as key. AuthzVO: Invalid cert; vo missing The xrootd configuration for GSI auth is, # X509 configuration, change nothing xrootd.seclib /usr/lib64/libXrdSec.so sec.protocol /usr/lib64 gsi -authzfun:/usr/lib64/libXrdSecgsiAUTHZVO-4.so -gmapopt:10 -gmapto:0 -ca:1 -crl:1 -authzfunparms:debug=1,valido=cms,vo2grp=%s acc.authdb /etc/xrootd/auth_file acc.authrefresh 60 ofs.authorize Regards, --------------------------------------------------------------------------------------------------Geonmo Ryu / 류건모Korea Institute of Science and Technology Information (KISTI)Global Science experimental Data hub Center (GSDC)245 Daehak-ro, Yuseong-gu, Daejeon, 305-806, Republic of KoreaTel : +82-42-869-1639E-mail: (CMS Helpdesk) [log in to unmask] / (Contact) [log in to unmask] Use REPLY-ALL to reply to list To unsubscribe from the XROOTD-L list, click the following link:https://listserv.slac.stanford.edu/cgi-bin/wa?SUBED1=XROOTD-L&A=1 Use REPLY-ALL to reply to listTo unsubscribe from the XROOTD-L list, click the following link:https://listserv.slac.stanford.edu/cgi-bin/wa?SUBED1=XROOTD-L&A=1 ######################################################################## Use REPLY-ALL to reply to list To unsubscribe from the XROOTD-L list, click the following link: https://listserv.slac.stanford.edu/cgi-bin/wa?SUBED1=XROOTD-L&A=1