On 11/4/20 9:48 AM, Michal Simon wrote:
> Hi Adrian,
Hi!
> It’s better you create an issue in GitHub. Fabrizio is probably the
> right person to answer your question, once we have a ticket I will point
> him to it.
https://github.com/xrootd/xrootd/issues/1320
thanks a lot!
Adrian
>
> Cheers,
> Michal
>
>> On 3 Nov 2020, at 20:55, Adrian Sevcenco <[log in to unmask]
>> <mailto:[log in to unmask]>> wrote:
>>
>> On 11/3/20 5:43 PM, Adrian Sevcenco wrote:
>>> Hi! I just observed on my servers (4.12.3) that http is no longer
>>> working (it seems that at one moment it was working)
>>> at this moment when trying with curl i get:
>>> * Trying 85.120.46.25:1094...
>>> * TCP_NODELAY set
>>> * Connected to storage05.spacescience.ro
>>> <http://storage05.spacescience.ro> (85.120.46.25) port 1094 (#0)
>>> > GET
>>> //home/aliprod/data/04/53413/5db44470-1dc5-11eb-a2c0-08f1eaf0250c?authz=-----BEGIN+SEALED+CIPHER-----long_auth_envelope-----END+SEALED+ENVELOPE-----%0A
>>> HTTP/1.1
>>> > Host: storage05.spacescience.ro:1094
>>> <http://storage05.spacescience.ro:1094>
>>> > User-Agent: curl/7.66.0
>>> > Accept: */*
>>> >
>>> * Mark bundle as not supporting multiuse
>>> < HTTP/1.1 403 Forbidden
>>> HTTP/1.1 403 Forbidden
>>> < Connection: Close
>>> Connection: Close
>>> < Content-Length: 99
>>> Content-Length: 99
>>> <
>>> Unable to open
>>> /home/aliprod/data/04/53413/5db44470-1dc5-11eb-a2c0-08f1eaf0250c;
>>> permission denied
>>> and in logs i see:
>>> 201103 17:01:34 1572 XrootdBridge: unknown.9:129@[::46.243.114.230]
>>> login as nobody
>>> XrdAggregatingN2N processing.
>>> buff='/home/aliprod/data/04/53413/5db44470-1dc5-11eb-a2c0-08f1eaf0250c'
>>> Error: nothing could be decrypted
>>> 201103 17:01:35 1572 XrdAliceTokenAcc::Access: Unable to read
>>> provided authz for
>>> /home/aliprod/data/04/53413/5db44470-1dc5-11eb-a2c0-08f1eaf0250c;
>>> permission denied
>>> 201103 17:01:35 1572 ofs_open: unknown.9:129@[::46.243.114.230]
>>> Unable to open
>>> /home/aliprod/data/04/53413/5db44470-1dc5-11eb-a2c0-08f1eaf0250c;
>>> permission denied
>>> 201103 17:01:35 1572 XrootdXeq: unknown.9:129@[::46.243.114.230] disc
>>> 0:00:01 (send failure)
>>> e metafile that have a working xrootd path can be found here:
>>> https://cernbox.cern.ch/index.php/s/V21naWT790be6p8
>>> <https://cernbox.cern.ch/index.php/s/V21naWT790be6p8>
>>> first thing to suspect is that the envelope it was not correctly
>>> converted to be used by curl ... is there any facility that would
>>> halp with this?
>>> Can be any other problem? (this is 4.12.3 xrootd server)
>>
>> so, i forgot to add the details about the settings:
>> the serve settings have this
>> if exec xrootd
>> xrd.protocol http /usr/lib64/libXrdHttp.so
>> http.exthandler xrdtpc /usr/lib64/libXrdHttpTPC.so
>> http.header2cgi Authorization authz
>> http.header2cgi authz authz
>> http.listingdeny yes
>> http.trace all
>> fi
>>
>> and with trace all on the server i see:
>>
>> sec_PM: Using unix protocol, args=''
>> --
>>
>> 201103 20:38:39 26982 sysXrdHttp: rc:38 got hdr line:
>> Host:storage05.spacescience.ro:1094
>> <http://storage05.spacescience.ro:1094/>
>>
>> 201103 20:38:39 26982 sysXrdHttp: rc:25 got hdr line: User-Agent:
>> curl/7.66.0
>>
>> 201103 20:38:39 26982 sysXrdHttp: rc:13 got hdr line: Accept: */*
>>
>> 201103 20:38:39 26982 sysXrdHttp: rc:2 got hdr line:
>>
>> 201103 20:38:39 26982 sysXrdHttp: rc:2 detected header end.
>> 201103 20:38:39 26982 XrootdBridge: unknown.3:98@[::46.243.114.230]
>> login as nobody
>>
>> So, any idea what i'm missing?
>> Thanks a lot!
>> Adrian
>>
>>
>>
>>
>>
>>
>>
>> ########################################################################
>> Use REPLY-ALL to reply to list
>>
>> To unsubscribe from the XROOTD-L list, click the following link:
>> https://listserv.slac.stanford.edu/cgi-bin/wa?SUBED1=XROOTD-L&A=1
>> <https://listserv.slac.stanford.edu/cgi-bin/wa?SUBED1=XROOTD-L&A=1>
>
--
----------------------------------------------
Adrian Sevcenco, Ph.D. |
Institute of Space Science - ISS, Romania |
adrian.sevcenco at {cern.ch,spacescience.ro} |
----------------------------------------------
########################################################################
Use REPLY-ALL to reply to list
To unsubscribe from the XROOTD-L list, click the following link:
https://listserv.slac.stanford.edu/cgi-bin/wa?SUBED1=XROOTD-L&A=1
