Print

Print


Hi,

I am testing the CMS framework, CMSSW_12_3_0_pre4, with the xrootd 5.3.1 as the external library.

When I configured tls in the xrootd server like so:

xrd.tls /etc/grid-security/xrd/xrdcert.pem /etc/grid-security/xrd/xrdkey.pem
xrd.tlsca certdir /etc/grid-security/certificates
xrootd.tls capable all
sec.protocol /usr/lib64 ztn

to test token with the CMSSW_12_3_0_pre4, the x509 authorization also gets stuck in the readv (Vector Read) of the root file on the xrootd server:

%MSG-w XrdAdaptorInternal:  AfterFile 08-Feb-2022 12:51:22 EST pre-events
Bockjoo readv IOPosBuffer before readv_result.first.get()  0
%MSG
[2022-02-08 12:54:23.117531 -0500][Error  ][XRootD            ][2571135] [cmsio2.rc.ufl.edu:1094] Unable to get the response to request kXR_readv (handle: 0x00000000, chunks: 2, total size: 224380)

So, I can not even test the token.

If I turn off the TLS configuration in the xrootd server, reading the root file on the xrootd server works fine with the x509 authorization.

By the way xrdcp from xrootd 5.3.1 in the CMSSW_12_3_0_pre4 works without the readv issue with the TLS configuration on the server:

[bockjoo@cms runAnalysis]$ which xrdcp
/opt/cms/services/aaa/CMSSWTokenTest/CMSSW_12_3_0_pre3/external/slc7_amd64_gcc10/bin/xrdcp
[bockjoo@cms runAnalysis]$ xrdcp -d 1 -f root://cmsio2.rc.ufl.edu//store/mc/RunIIAutumn18MiniAOD/ZToMuMu_NNPDF31_13TeV-powheg_M_4500_6000/MINIAODSIM/102X_upgrade2018_realistic_v15-v2/120000/CFAA5B09-4746-594F-9B1C-5F415F673C4E_Florida.root /dev/null
[2022-02-08 14:31:42.233334 -0500][Info   ][AsyncSock         ] [cmsio2.rc.ufl.edu:1094.0] TLS hand-shake done.
[144MB/378.8MB][ 38%][===================>                              ][144MB/s][378.8MB/378.8MB][100%][==================================================][378.8MB/s]  [2022-02-08 14:31:43.488218 -0500][Error  ][PostMaster        ] Unable to get transport handler for file protocol
[378.8MB/378.8MB][100%][==================================================][378.8MB/s]  

Will xrootd 5.4 client help with the issue with the TLS configured xrootd server?

Why is the readv behaving differently with the TLS configuration?

Thanks,

Bockjoo


On 1/13/22 15:33, Bockjoo Kim wrote:
> Hi,
>
> I am testing a token that I requested.
>
> How do I send a token using the xrdcp command or any xrd* command?
>
> Thanks,
>
> Bockjoo
>

########################################################################
Use REPLY-ALL to reply to list

To unsubscribe from the XROOTD-L list, click the following link:
https://listserv.slac.stanford.edu/cgi-bin/wa?SUBED1=XROOTD-L&A=1