Tokens are processed by scitokens-cpp library - are you using ancient
version < 0.6.0?
Petr
On 3/25/22 17:36, Albert Rossi wrote:
> Hi all,
>
> I hate to bother you with this, but I need to test dCache/xrootd TPC
> interaction and I can't seem to get the xrootd server set up correctly
> to accept the token that is issued to me by cilogon.
>
> I have attached a description of the problem.
>
> Also, I tried to revert to using demo tokens from the
> demo.scitokens.org generator. xrootd rejects it:
>
> 220325 11:11:24 3012 scitokens_Validate: Failed to deserialize SciToken: token verification failed: Unknown profile version in token: scitoken:2.0
>
> The demo token looks like this:
>
> {
> "ver": "scitoken:2.0",
> "aud": "https://wlcg.cern.ch/jwt/v1/any",
> "iss": "https://demo.scitokens.org",
> "sub": "arossi",
> "scope": "storage.create:/data/xrootdfs compute.create compute.read
> compute.cancel compute.modify storage.read:/data/xrootdfs",
> "exp": 1648226355,
> "iat": 1648225755,
> "nbf": 1648225755,
> "jti": "dc985830-fd90-49ae-a8fb-d08da5ec4c26"
> }
>
> I cannot eliminate the "ver" attribute (the generator keeps including
> it). What does xrootd need to see as "ver" ?
>
> (This problem is less important that trying to understand why the
> cilogon token doesn't get me the needed permissions the way I
> configured the server.)
>
> Thank you for your help, and apologies for the bother.
>
> Al
>
> ________________________________________________
> Albert L. Rossi
> Senior Software Developer
> Scientific Computing Division, Scientific Data Services, Distributed
> Data Development
> FCC 229A
> Mail Station 369 (FCC 2W)
> Fermi National Accelerator Laboratory
> Batavia, IL 60510
> (630) 840-3023
>
>
> ------------------------------------------------------------------------
>
> Use REPLY-ALL to reply to list
>
> To unsubscribe from the XROOTD-L list, click the following link:
> https://listserv.slac.stanford.edu/cgi-bin/wa?SUBED1=XROOTD-L&A=1
> <https://listserv.slac.stanford.edu/cgi-bin/wa?SUBED1=XROOTD-L&A=1>
>
########################################################################
Use REPLY-ALL to reply to list
To unsubscribe from the XROOTD-L list, click the following link:
https://listserv.slac.stanford.edu/cgi-bin/wa?SUBED1=XROOTD-L&A=1
