Ok, Will create separate issues now. Redirector: ``` [root@xrootd-redir ~]# yum list installed | grep xrootd gfal2-plugin-xrootd.x86_64 2.18.1-1.1.osg35up.el7 @osg-upcoming-development xrootd.x86_64 1:5.2.0-0.rc1.1.osg35up.el7 @osg-upcoming-development xrootd-client.x86_64 1:5.2.0-0.rc1.1.osg35up.el7 @osg-upcoming-development xrootd-client-libs.x86_64 1:5.2.0-0.rc1.1.osg35up.el7 @osg-upcoming-development xrootd-cmstfc.x86_64 1.5.2-6.osg35.el7 @osg-contrib xrootd-lcmaps.x86_64 1.7.8-3.osgup.el7 @osg-upcoming-development xrootd-libs.x86_64 1:5.2.0-0.rc1.1.osg35up.el7 @osg-upcoming-development xrootd-multiuser.x86_64 1.0.0-1.osg35up.el7 @osg-upcoming-development xrootd-scitokens.x86_64 1:5.2.0-0.rc1.1.osg35up.el7 @osg-upcoming-development xrootd-selinux.noarch 1:5.2.0-0.rc1.1.osg35up.el7 @osg-upcoming-development xrootd-server.x86_64 1:5.2.0-0.rc1.1.osg35up.el7 @osg-upcoming-development xrootd-server-libs.x86_64 1:5.2.0-0.rc1.1.osg35up.el7 @osg-upcoming-development xrootd4-libs.x86_64 4.12.6-1.el7 @epel ``` DataServer: ``` [root@transfer-10 ~]# yum list installed | grep xrootd gfal2-plugin-xrootd.x86_64 2.18.1-1.1.osg35.el7 @osg gratia-probe-xrootd-storage.x86_64 1.23.2-1.osg35.el7 @osg gratia-probe-xrootd-transfer.x86_64 1.23.2-1.osg35.el7 @osg xrootd.x86_64 1:5.2.0-0.rc1.1.osg35up.el7 @osg-upcoming-development xrootd-client.x86_64 1:5.2.0-0.rc1.1.osg35up.el7 @osg-upcoming-development xrootd-client-libs.x86_64 1:5.2.0-0.rc1.1.osg35up.el7 @osg-upcoming-development xrootd-cmstfc.x86_64 1.5.2-6.osg35.el7 @osg-contrib xrootd-lcmaps.x86_64 1.7.8-3.osgup.el7 @osg-upcoming-testing xrootd-libs.x86_64 1:5.2.0-0.rc1.1.osg35up.el7 @osg-upcoming-development xrootd-multiuser.x86_64 1.0.0-0.2.rc.2.osg35up.el7 @osg-upcoming-minefield xrootd-scitokens.x86_64 1:5.2.0-0.rc1.1.osg35up.el7 @osg-upcoming-development xrootd-selinux.noarch 1:5.2.0-0.rc1.1.osg35up.el7 @osg-upcoming-development xrootd-server.x86_64 1:5.2.0-0.rc1.1.osg35up.el7 @osg-upcoming-development xrootd-server-libs.x86_64 1:5.2.0-0.rc1.1.osg35up.el7 @osg-upcoming-development xrootd4-client-libs.x86_64 4.12.6-1.el7 @epel xrootd4-libs.x86_64 4.12.6-1.el7 @epel ``` Redirector (DataServer) same config: ``` [root@xrootd-redir ~]# cat /etc/xrootd/config.d/99-local.cfg # =================================================================== # WARNING! THIS FILE WAS AUTOMATICALLY PREPARED BY PUPPET # ANY MODIFICATIONS TO THIS FILE WILL BE OVERWRITTEN ON PUPPET RUN # IN CASE YOU WANT TO DO MODIFICATIONS, MAKE SURE YOU DISABLE PUPPET! # =================================================================== # XrootD Security # --------------------------------------- xrootd.seclib /usr/lib64/libXrdSec.so sec.protocol /usr/lib64 gsi -certdir:/etc/grid-security/certificates -cert:/etc/grid-security/xrootd/xrootdcert.pem -key:/etc/grid-security/xrootd/xrootdkey.pem -crl:3 -authzfun:libXrdLcmaps.so -authzto:900 -authzfunparms:lcmapscfg=/etc/xrootd/lcmaps.cfg -gmapopt:10 -gmapto:0 acc.authdb /etc/xrootd/auth_file ofs.authorize macaroons.secretkey /etc/xrootd/macaroon-secret ofs.authlib ++ libXrdMacaroons.so ofs.authlib ++ libXrdAccSciTokens.so # -------------------------------------- # XrootD Monitoring # -------------------------------------- # Monitoring for AAA Dashboard : xrd.report 169.228.130.91:9931 every 30s all sync xrootd.monitor all auth flush 30s window 5s fstat 60 lfn ops xfr 5 dest files io info user 169.228.130.91:9930 dest fstat info user xrd-mon.osgstorage.org:9930 all.sitename T2_US_Caltech # ------------------------------------- # Configure redirector/server # ------------------------------------- set xrdr = xrootd-redir.ultralight.org xrd.port 1094 all.manager $(xrdr):1213 if $(xrdr) # It's role is manager all.role manager # The known managers (fnal redirector) all.manager meta all cmsxrootd.fnal.gov+ 1213 # Redirect all lookup calls to original data servers. Redirector does not have visibility of FS cms.dfs lookup distrib mdhold 20m redirect immed else # Role is server all.role server # The known managers (local redirector) all.manager meta xrootd-redir.ultralight.org:1213 fi # ------------------------------------- # Allow only specific path, checksum config # ------------------------------------- # Allow any path to be exported; this is further refined in the authfile. all.export / # Hosts allowed to use this xrootd cluster cms.allow host * xrootd.chksum max 10 adler32 # Disable async. Related issue: https://github.com/xrootd/xrootd/issues/1113 xrootd.async off # ------------------------------------- # Integrate with CMS TFC, placed in /etc/storage.xml # It will see files under /store/... # ------------------------------------- oss.namelib /usr/lib64/libXrdCmsTfc.so file:/etc/xrootd/storage.xml?protocol=ceph # ------------------------------------- # Configure davs/https for TPC # ------------------------------------- # Enable https over XrootD if exec xrootd xrd.protocol http:1094 /usr/lib64/libXrdHttp.so http.cadir /etc/grid-security/certificates http.cert /etc/grid-security/xrootd/xrootdcert.pem http.key /etc/grid-security/xrootd/xrootdkey.pem http.secxtractor /usr/lib64/libXrdLcmaps.so http.secretkey NNNNNNNNNN # Enable third-party-copy http.exthandler xrdtpc libXrdHttpTPC.so # Pass the bearer token to the Xrootd authorization framework. http.header2cgi Authorization authz http.listingdeny yes http.desthttps yes http.selfhttps2http no http.staticpreload http://static/robots.txt /etc/xrootd/robots.txt http.exthandler xrdmacaroons libXrdMacaroons.so fi ``` storage.xml: ``` [root@xrootd-redir ~]# cat /etc/xrootd/storage.xml <storage-mapping> <!-- XRootD Server Ceph hack --> <lfn-to-pfn protocol="ceph" destination-match=".*" path-match="/+(store/.*)" result="/storage/cms/$1"/> </storage-mapping> ``` -- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/xrootd/xrootd/issues/1456#issuecomment-840891725 ######################################################################## Use REPLY-ALL to reply to list To unsubscribe from the XROOTD-DEV list, click the following link: https://listserv.slac.stanford.edu/cgi-bin/wa?SUBED1=XROOTD-DEV&A=1