Print

Print


Hi Geonmo,

What version of Xrootd you were running (if that works) and what version of Xrootd you are running now that doesn’t work?

regards,
--
Wei Yang  |  [log in to unmask]<mailto:[log in to unmask]>  |  650-926-3338(O)

On 11/1/20, 10:46 PM, "[log in to unmask]<mailto:[log in to unmask]> on behalf of "Geonmo Ryu"" <[log in to unmask]<mailto:[log in to unmask]> on behalf of [log in to unmask]<mailto:[log in to unmask]>> wrote:


Hello, XRootD users,



I am contacting you because GSI has not been authenticated since the XRootD package was automatically updated.



We are using the XRootD Proxy Server for a global federation of CMS experiment.



The authentication of the server has problems.



The log is as follows: Please contact me if you need the entire log.



201102 15:33:21 6455 secgsi_Authenticate: ERROR: the authz plug-in reported failure

201102 15:33:21 6455 XrootdXeq: User authentication failed;

201102 15:33:21 6455 geonmo.11757:25@cms-t2-se01 XrootdResponse: sending err 3030:

201102 15:33:21 6455 XrootdXeq: geonmo.11757:25@cms-t2-se01 disc 0:00:00

201102 15:33:21 44816 geonmo.11757:24@cms-t2-se01 XrootdProtocol: more auth requested; sz=2699

INFO in AuthzKey: Returning creds of len 7588 as key.

AuthzVO: Invalid cert; vo missing



The xrootd configuration for GSI auth is,



# X509 configuration, change nothing

xrootd.seclib /usr/lib64/libXrdSec.so

sec.protocol /usr/lib64 gsi -authzfun:/usr/lib64/libXrdSecgsiAUTHZVO-4.so -gmapopt:10 -gmapto:0 -ca:1 -crl:1 -authzfunparms:debug=1,valido=cms,vo2grp=%s

acc.authdb /etc/xrootd/auth_file

acc.authrefresh 60

ofs.authorize



Regards,




--------------------------------------------------------------------------------------------------
Geonmo Ryu / 류건모

Korea Institute of Science and Technology Information (KISTI)
Global Science experimental Data hub Center (GSDC)
245 Daehak-ro, Yuseong-gu, Daejeon, 305-806, Republic of Korea
Tel :  +82-42-869-1639
E-mail: (CMS Helpdesk) [log in to unmask] / (Contact) [log in to unmask]
--------------------------------------------------------------------------------------------------












[Image removed by sender.]
________________________________

Use REPLY-ALL to reply to list

To unsubscribe from the XROOTD-L list, click the following link:
https://listserv.slac.stanford.edu/cgi-bin/wa?SUBED1=XROOTD-L&A=1

########################################################################
Use REPLY-ALL to reply to list

To unsubscribe from the XROOTD-L list, click the following link:
https://listserv.slac.stanford.edu/cgi-bin/wa?SUBED1=XROOTD-L&A=1