 |
 |
Hello, I am having trouble configuring correctly TPC transfers from ALICE, through a Ceph gateway running xrootd@proxy and xrootd@ceph services. According to the VO's auth requirements, I have in the xrootd-proxy.cfg sec.protocol /usr/lib64/ unix sec.protbind * only unix ofs.authorize ofs.authlib /usr/lib64/libXrdAliceTokenAcc.so The ofs.tpc directive is set as: ofs.tpc echo scan all ttl 80 90 xfr 200 pgm /etc/xrootd/xrdcp-tpc.sh As far as I understand, TPC should not require any authentication as this has already been dealt with in xroot-proxy,cfg. However, when I try to initiate a TPC transfer I see that the xrootd@proxy is trying to enforce sss authentication and fails (see below). After that, it re-trying with unix and stalls. I do have sec.protocol sss -s /etc/grid-security/xrootd/sss.keytab.grp -c /etc/grid-security/xrootd/sss.keytab.grp defined in xrootd-ceph.cfg but I thought that its purpose is only for authentication between xrootd@proxy and [log in to unmask] Can you please let me know how to get around this? Many thanks. George TPC job 198: [2021-06-08 10:57:23.349872 +0100][Debug ][XRootDTransport ] [ceph-dev-gw2.gridpp.rl.ac.uk:1095.0] Authentication is required: &P=sss,0.+13:/etc/grid-security/xrootd/sss.keytab.grp TPC job 198: [2021-06-08 10:57:23.349876 +0100][Debug ][XRootDTransport ] [ceph-dev-gw2.gridpp.rl.ac.uk:1095.0] Sending authentication data TPC job 198: [2021-06-08 10:57:23.350485 +0100][Debug ][XRootDTransport ] [ceph-dev-gw2.gridpp.rl.ac.uk:1095.0] Trying to authenticate using sss TPC job 198: [2021-06-08 10:57:23.350583 +0100][Dump ][AsyncSock ] [ceph-dev-gw2.gridpp.rl.ac.uk:1095.0] Wrote a message: (0x4642ba00), 264 bytes TPC job 198: [2021-06-08 10:57:23.350699 +0100][Dump ][XRootDTransport ] [msg: 0x4642ba00] Expecting 31 bytes of message body TPC job 198: [2021-06-08 10:57:23.350717 +0100][Dump ][AsyncSock ] [ceph-dev-gw2.gridpp.rl.ac.uk:1095.0] Received message header, size: 8 TPC job 198: [2021-06-08 10:57:23.350724 +0100][Dump ][AsyncSock ] [ceph-dev-gw2.gridpp.rl.ac.uk:1095.0] Received a message of 39 bytes TPC job 198: [2021-06-08 10:57:23.350728 +0100][Error ][XRootDTransport ] [ceph-dev-gw2.gridpp.rl.ac.uk:1095.0] Authentication with sss failed: Invalid keyname specified. TPC job 198: [2021-06-08 10:57:23.350738 +0100][Error ][XRootDTransport ] [ceph-dev-gw2.gridpp.rl.ac.uk:1095.0] No protocols left to try This email and any attachments are intended solely for the use of the named recipients. If you are not the intended recipient you must not use, disclose, copy or distribute this email or any of its attachments and should notify the sender immediately and delete this email from your system. UK Research and Innovation (UKRI) has taken every reasonable precaution to minimise risk of this email or any attachments containing viruses or malware but the recipient should carry out its own virus and malware checks before opening the attachments. UKRI does not accept any liability for any losses or damages which the recipient may sustain due to presence of any viruses. Opinions, conclusions or other information in this message and attachments that are not related directly to UKRI business are solely those of the author and do not represent the views of UKRI. ######################################################################## Use REPLY-ALL to reply to list To unsubscribe from the XROOTD-L list, click the following link: https://listserv.slac.stanford.edu/cgi-bin/wa?SUBED1=XROOTD-L&A=1