Hello, XRootD users,
I am contacting you because GSI has not been authenticated since the XRootD package was automatically updated.
We are using the XRootD Proxy Server for a global federation of CMS experiment.
The authentication of the server has problems.
The log is as follows: Please contact me if you need the entire log.
201102 15:33:21 6455 secgsi_Authenticate: ERROR: the authz plug-in reported failure
201102 15:33:21 6455 XrootdXeq: User authentication failed;
201102 15:33:21 6455 geonmo.11757:25@cms-t2-se01 XrootdResponse: sending err 3030:
201102 15:33:21 6455 XrootdXeq: geonmo.11757:25@cms-t2-se01 disc 0:00:00
201102 15:33:21 44816 geonmo.11757:24@cms-t2-se01 XrootdProtocol: more auth requested; sz=2699
INFO in AuthzKey: Returning creds of len 7588 as key.
AuthzVO: Invalid cert; vo missing
The xrootd configuration for GSI auth is,
# X509 configuration, change nothing
xrootd.seclib /usr/lib64/libXrdSec.so
sec.protocol /usr/lib64 gsi -authzfun:/usr/lib64/libXrdSecgsiAUTHZVO-4.so -gmapopt:10 -gmapto:0 -ca:1 -crl:1 -authzfunparms:debug=1,valido=cms,vo2grp=%s
acc.authdb /etc/xrootd/auth_file
acc.authrefresh 60
ofs.authorize
Regards,
--------------------------------------------------------------------------------------------------
Geonmo Ryu / 류건모
Korea Institute of Science and Technology Information (KISTI)
Global Science experimental Data hub Center (GSDC)
245 Daehak-ro, Yuseong-gu, Daejeon, 305-806, Republic of Korea
Tel : +82-42-869-1639
E-mail: (CMS Helpdesk) [log in to unmask] / (Contact) [log in to unmask]
--------------------------------------------------------------------------------------------------
Use REPLY-ALL to reply to list
To unsubscribe from the XROOTD-L list, click the following link:
https://listserv.slac.stanford.edu/cgi-bin/wa?SUBED1=XROOTD-L&A=1