You are receiving this because you are subscribed to this thread.
Reply to this email directly, view it on GitHub, or unsubscribe.
Ok, Will create separate issues now.
Redirector:
[root@xrootd-redir ~]# yum list installed | grep xrootd
gfal2-plugin-xrootd.x86_64 2.18.1-1.1.osg35up.el7 @osg-upcoming-development
xrootd.x86_64 1:5.2.0-0.rc1.1.osg35up.el7 @osg-upcoming-development
xrootd-client.x86_64 1:5.2.0-0.rc1.1.osg35up.el7 @osg-upcoming-development
xrootd-client-libs.x86_64 1:5.2.0-0.rc1.1.osg35up.el7 @osg-upcoming-development
xrootd-cmstfc.x86_64 1.5.2-6.osg35.el7 @osg-contrib
xrootd-lcmaps.x86_64 1.7.8-3.osgup.el7 @osg-upcoming-development
xrootd-libs.x86_64 1:5.2.0-0.rc1.1.osg35up.el7 @osg-upcoming-development
xrootd-multiuser.x86_64 1.0.0-1.osg35up.el7 @osg-upcoming-development
xrootd-scitokens.x86_64 1:5.2.0-0.rc1.1.osg35up.el7 @osg-upcoming-development
xrootd-selinux.noarch 1:5.2.0-0.rc1.1.osg35up.el7 @osg-upcoming-development
xrootd-server.x86_64 1:5.2.0-0.rc1.1.osg35up.el7 @osg-upcoming-development
xrootd-server-libs.x86_64 1:5.2.0-0.rc1.1.osg35up.el7 @osg-upcoming-development
xrootd4-libs.x86_64 4.12.6-1.el7 @epel
DataServer:
[root@transfer-10 ~]# yum list installed | grep xrootd
gfal2-plugin-xrootd.x86_64 2.18.1-1.1.osg35.el7 @osg
gratia-probe-xrootd-storage.x86_64 1.23.2-1.osg35.el7 @osg
gratia-probe-xrootd-transfer.x86_64 1.23.2-1.osg35.el7 @osg
xrootd.x86_64 1:5.2.0-0.rc1.1.osg35up.el7 @osg-upcoming-development
xrootd-client.x86_64 1:5.2.0-0.rc1.1.osg35up.el7 @osg-upcoming-development
xrootd-client-libs.x86_64 1:5.2.0-0.rc1.1.osg35up.el7 @osg-upcoming-development
xrootd-cmstfc.x86_64 1.5.2-6.osg35.el7 @osg-contrib
xrootd-lcmaps.x86_64 1.7.8-3.osgup.el7 @osg-upcoming-testing
xrootd-libs.x86_64 1:5.2.0-0.rc1.1.osg35up.el7 @osg-upcoming-development
xrootd-multiuser.x86_64 1.0.0-0.2.rc.2.osg35up.el7 @osg-upcoming-minefield
xrootd-scitokens.x86_64 1:5.2.0-0.rc1.1.osg35up.el7 @osg-upcoming-development
xrootd-selinux.noarch 1:5.2.0-0.rc1.1.osg35up.el7 @osg-upcoming-development
xrootd-server.x86_64 1:5.2.0-0.rc1.1.osg35up.el7 @osg-upcoming-development
xrootd-server-libs.x86_64 1:5.2.0-0.rc1.1.osg35up.el7 @osg-upcoming-development
xrootd4-client-libs.x86_64 4.12.6-1.el7 @epel
xrootd4-libs.x86_64 4.12.6-1.el7 @epel
Redirector (DataServer) same config:
[root@xrootd-redir ~]# cat /etc/xrootd/config.d/99-local.cfg
# ===================================================================
# WARNING! THIS FILE WAS AUTOMATICALLY PREPARED BY PUPPET
# ANY MODIFICATIONS TO THIS FILE WILL BE OVERWRITTEN ON PUPPET RUN
# IN CASE YOU WANT TO DO MODIFICATIONS, MAKE SURE YOU DISABLE PUPPET!
# ===================================================================
# XrootD Security
# ---------------------------------------
xrootd.seclib /usr/lib64/libXrdSec.so
sec.protocol /usr/lib64 gsi -certdir:/etc/grid-security/certificates -cert:/etc/grid-security/xrootd/xrootdcert.pem -key:/etc/grid-security/xrootd/xrootdkey.pem -crl:3 -authzfun:libXrdLcmaps.so -authzto:900 -authzfunparms:lcmapscfg=/etc/xrootd/lcmaps.cfg -gmapopt:10 -gmapto:0
acc.authdb /etc/xrootd/auth_file
ofs.authorize
macaroons.secretkey /etc/xrootd/macaroon-secret
ofs.authlib ++ libXrdMacaroons.so
ofs.authlib ++ libXrdAccSciTokens.so
# --------------------------------------
# XrootD Monitoring
# --------------------------------------
# Monitoring for AAA Dashboard :
xrd.report 169.228.130.91:9931 every 30s all sync
xrootd.monitor all auth flush 30s window 5s fstat 60 lfn ops xfr 5 dest files io info user 169.228.130.91:9930 dest fstat info user xrd-mon.osgstorage.org:9930
all.sitename T2_US_Caltech
# -------------------------------------
# Configure redirector/server
# -------------------------------------
set xrdr = xrootd-redir.ultralight.org
xrd.port 1094
all.manager $(xrdr):1213
if $(xrdr)
# It's role is manager
all.role manager
# The known managers (fnal redirector)
all.manager meta all cmsxrootd.fnal.gov+ 1213
# Redirect all lookup calls to original data servers. Redirector does not have visibility of FS
cms.dfs lookup distrib mdhold 20m redirect immed
else
# Role is server
all.role server
# The known managers (local redirector)
all.manager meta xrootd-redir.ultralight.org:1213
fi
# -------------------------------------
# Allow only specific path, checksum config
# -------------------------------------
# Allow any path to be exported; this is further refined in the authfile.
all.export /
# Hosts allowed to use this xrootd cluster
cms.allow host *
xrootd.chksum max 10 adler32
# Disable async. Related issue: https://github.com/xrootd/xrootd/issues/1113
xrootd.async off
# -------------------------------------
# Integrate with CMS TFC, placed in /etc/storage.xml
# It will see files under /store/...
# -------------------------------------
oss.namelib /usr/lib64/libXrdCmsTfc.so file:/etc/xrootd/storage.xml?protocol=ceph
# -------------------------------------
# Configure davs/https for TPC
# -------------------------------------
# Enable https over XrootD
if exec xrootd
xrd.protocol http:1094 /usr/lib64/libXrdHttp.so
http.cadir /etc/grid-security/certificates
http.cert /etc/grid-security/xrootd/xrootdcert.pem
http.key /etc/grid-security/xrootd/xrootdkey.pem
http.secxtractor /usr/lib64/libXrdLcmaps.so
http.secretkey NNNNNNNNNN
# Enable third-party-copy
http.exthandler xrdtpc libXrdHttpTPC.so
# Pass the bearer token to the Xrootd authorization framework.
http.header2cgi Authorization authz
http.listingdeny yes
http.desthttps yes
http.selfhttps2http no
http.staticpreload http://static/robots.txt /etc/xrootd/robots.txt
http.exthandler xrdmacaroons libXrdMacaroons.so
fi
storage.xml:
[root@xrootd-redir ~]# cat /etc/xrootd/storage.xml
<storage-mapping>
<!-- XRootD Server Ceph hack -->
<lfn-to-pfn protocol="ceph" destination-match=".*" path-match="/+(store/.*)" result="/storage/cms/$1"/>
</storage-mapping>
—
You are receiving this because you are subscribed to this thread.
Reply to this email directly, view it on GitHub, or unsubscribe.
Use REPLY-ALL to reply to list
To unsubscribe from the XROOTD-DEV list, click the following link:
https://listserv.slac.stanford.edu/cgi-bin/wa?SUBED1=XROOTD-DEV&A=1