I built the xrootd out of xrootd github to use it as the CMSSW_12_3_0_pre4 external.
With this one, CMSSW reading an xrootd file worked fine with the x509 and the token.
So 5.3.1 has the problem with TLS.
Bockjoo
On 2/8/22 14:34, Bockjoo Kim wrote:
Hi,
I am testing the CMS framework, CMSSW_12_3_0_pre4, with the xrootd 5.3.1 as the external library.
When I configured tls in the xrootd server like so:
xrd.tls /etc/grid-security/xrd/xrdcert.pem /etc/grid-security/xrd/xrdkey.pem
xrd.tlsca certdir /etc/grid-security/certificates
xrootd.tls capable all
sec.protocol /usr/lib64 ztn
to test token with the CMSSW_12_3_0_pre4, the x509 authorization also gets stuck in the readv (Vector Read) of the root file on the xrootd server:
%MSG-w XrdAdaptorInternal: AfterFile 08-Feb-2022 12:51:22 EST pre-events
Bockjoo readv IOPosBuffer before readv_result.first.get() 0
%MSG
[2022-02-08 12:54:23.117531 -0500][Error ][XRootD ][2571135] [cmsio2.rc.ufl.edu:1094] Unable to get the response to request kXR_readv (handle: 0x00000000, chunks: 2, total size: 224380)
So, I can not even test the token.
If I turn off the TLS configuration in the xrootd server, reading the root file on the xrootd server works fine with the x509 authorization.
By the way xrdcp from xrootd 5.3.1 in the CMSSW_12_3_0_pre4 works without the readv issue with the TLS configuration on the server:
[bockjoo@cms runAnalysis]$ which xrdcp
/opt/cms/services/aaa/CMSSWTokenTest/CMSSW_12_3_0_pre3/external/slc7_amd64_gcc10/bin/xrdcp
[bockjoo@cms runAnalysis]$ xrdcp -d 1 -f root://cmsio2.rc.ufl.edu//store/mc/RunIIAutumn18MiniAOD/ZToMuMu_NNPDF31_13TeV-powheg_M_4500_6000/MINIAODSIM/102X_upgrade2018_realistic_v15-v2/120000/CFAA5B09-4746-594F-9B1C-5F415F673C4E_Florida.root /dev/null
[2022-02-08 14:31:42.233334 -0500][Info ][AsyncSock ] [cmsio2.rc.ufl.edu:1094.0] TLS hand-shake done.
[144MB/378.8MB][ 38%][===================> ][144MB/s][378.8MB/378.8MB][100%][==================================================][378.8MB/s] [2022-02-08 14:31:43.488218 -0500][Error ][PostMaster ] Unable to get transport handler for file protocol
[378.8MB/378.8MB][100%][==================================================][378.8MB/s]
Will xrootd 5.4 client help with the issue with the TLS configured xrootd server?
Why is the readv behaving differently with the TLS configuration?
Thanks,
Bockjoo
On 1/13/22 15:33, Bockjoo Kim wrote:
Hi,
I am testing a token that I requested.
How do I send a token using the xrdcp command or any xrd* command?
Thanks,
Bockjoo
########################################################################
Use REPLY-ALL to reply to list
To unsubscribe from the XROOTD-L list, click the following link:
https://listserv.slac.stanford.edu/cgi-bin/wa?SUBED1=XROOTD-L&A=1
########################################################################
Use REPLY-ALL to reply to list
To unsubscribe from the XROOTD-L list, click the following link:
https://listserv.slac.stanford.edu/cgi-bin/wa?SUBED1=XROOTD-L&A=1