 |
 |
- why not give the destination server the source token via CGI? This matches what is done with HTTP and analogous to what we do with delegating the credential with GSI. Ah, there is the solution I originally toyed with in dCache. The reason I did this is because it fits perfectly what ALICE does. It seems that their special plugin to dCache requires two tokens on the destination end, both given to the TPC client. Those tokens are available in the opaque data IF you do --tpc delegate only not --tpc only. So, it is a de facto delegation. Below is client log of the open on the destination. What dCache's TPC client does is just promote the token in the tpc.scgi to the main authz token, and what I believe the Alice wrapper script is simply to use that url as the source url. While I am not sure if the token embedded in tpc.scgi is the same as the one used by the initiator to talk to the source, this scheme to me seems like it would work. After all, the third-party client is sort of a double for the original client ... as if that client hopped over to the destination server and asked the source file itself. ? Al Target url is: root://alice.echo.stfc.ac.uk:1094/alice:/05/30011/802c7880-3014-11ec-b8b3-0242ee26aa8b?authz=-----BEGIN SEALED CIPHER----- TZFUwnVZ9XzAqIiFUE5qHqWUms7NCfR8JZBoKzP4kXuBlwiygOAI-IJwyIVLyU9XaN4q+STPM5I1 MP5ln-ngtANbgYDCxDAr-VmYWo5VZ-kiAdQAZrZT11POayy4SjU39rT7TKiFGfud7QwYeLnPkUx1 LVvXwkDSNOOq77kdz8U= -----END SEALED CIPHER----- -----BEGIN SEALED ENVELOPE----- AAAAgF6Nmeor2vla5OsUNpnM6AS4QHwijRL-To+2UkWCit7eHDc4LZJba697+3Ipx7WsA+4G12jg mf0xmTzhlMESmv3ppQlqS5UDUHJhNWi+KPDZ0pH186CpjTi4cv2qU8muNBeNdZCe3QuRgLg8TDcW mQ1IreZM2nFkkoHoKgzsq0htbnPcfZx9opQmDS8FqCLciAoFOG8JAKdYVR2R5MGPiEVhG31O6KcJ +Yxv8wIQwNZh0odcM+fIMHAPo2x77ANl7oK+Ucho1hGNbeQONVp4HhKeXHMBFDDPn4x+WkIAx1ac yVz-E9dfAG5VmuUcPVf9+oLLGaIBorI2vRrLEOJS3ov4OanBKEjGFpOu3hi2GXuMchPl0BEqX5cK 6mhvZaC9grLWr6ijn3WmiQ3erj1O2MO50t8WVVjqCy3qnslQooaK75Uxuvp7t6B-NURJ35OJ6D9J Ej9xTFsLONqzS2HNalK7c5S+jplUkiDOrmI8CpZvXRcgVEFqXyYqTkGu8J-fydQuyfXpf4VNvam+ Ps5mDH7k4Pp3BVYBnZQB4ely8BOw7gxxxHVYS1qCLLDPvHzCvHN6neoEdF36slXtx1D5sX0vGX3t cMgm62cTs42KEGJnPAtMEZ2QJWuyw8QSxaXajlftZU9HkKeaKOemlUE8hTvpWe9vTyRDBiperEiP dBwD4OPGJYxOG3rZsvHfG3J4I7PYF9p6TO3Ms9qdKZOSe1Nig79pfoGYUa4VtbpW+av5hkrCgaqn 5Twa5LuB9Rt8-fKbDZIQ3wtXWmQEmuIo99lTuiQQt05ITDoU6S50df8SdrMbIOjCLKNTQiytJhJg TYcyx6qOr9parw7P9FBPWlRFSbQmWiYiwomtM5zBCBZMcxVvxyht6sWp+J19CZP6Hhb9eaF1VbsV Tw7Q-bsWrhPzRpk3LDhVgxE8yhGP9oSXFYDz1fkrXTqF1mb3FHrdpMwZsSpks34Vtr47pDVKJ5u3 tQJ9BjZJUJ83c3pdOtH5Bgsy6SD6EirAfktNC-Hae2+OnsjCKifkdVyTp10GbZQJicBUvqZ93g== -----END SEALED ENVELOPE----- &eos.app=transfer-3rd&oss.asize=219&tpc.dlg=preprod-srm.ndgf.org:1094&tpc.dlgon=1&tpc.key=19ae9f7ee0a9e0a2623c9168&tpc.lfn=/alice/cern.ch/user/g/grigoras/test_ndgf_test&tpc.scgi=authz=-----BEGIN SEALED CIPHER----- jM6af4uSZmu2Oudr8U4krouzDrJ-Js7HBrKjMEGBaOQF5M+8yeJaGiVR9Rub5gpnjUqD2t-kH1O0 uK7wIzVL8vBWwoq7dLuk4GB9JGiYu57h-X48hgpx66gavwHHrnvpKaa7mIMxKWAbN6o55FIrpA1b LDx9PIFWJYdU7-g3cNw= -----END SEALED CIPHER----- -----BEGIN SEALED ENVELOPE----- AAAAgDHAW7g2fglOsFXDQhnwen4zIBEQgKY6NAWS-twzmUDRB0uH8Q8O8xOeB01PDPqlXhtE7qKz +2TSOFvoNMkYuKcsrxTg1BTSFMX8y8HFy9L9xEQPtBYDxo8K0yDtyv8+jf7n9zz01u60SFzz2OGp lkk+YWAFv1fO8brnmFscGZhgdVhZG8O8KWati-FU41rta3irwnuOolvHjo8Aj6VTT56HZ-QD-S4g k88Km1NMbrxeL6e9KB+wXLwMtaqM2DHfH7kIyN8DUTOKa6479o0gD+DgHm026FFKpLkmlqi853aO Nhb+MPOcAnuyrr1TMMKeOsoHYIMZGIiFFgbtZKgivatwFYvP9XLIxD4B2TMODYXo0QE7UPI+ho-y KO5FfZAze22sSRUg4Wl0VJexbCNa4WWVlGJbEpKrKWa51VUVjaI1g3SfmqC0MhXW2pOhBuYtqYxj N5cmrA5SJKtlPgvjDG1nlI9WPWmuU4gpmTkkJNpjCdxDxfImJD3OXo+5VqZ6avzw9vxbzIVtSUvQ Q5L6gH06oBIdSow8XhBXQI3ctZ5ZdFnOlgkFiY7o8rqHy1-wS-86fw3vHHr2RMbxkJQfZnN0RSWm nsnIwzgyq9C3vc8Upfz++YFON0RWBpXtvQQ0OIDhA6J6IB88cVD3PCuuA4Qk6nk7Pd9uk88uEi2u aLQchE7NOL9LMlQpPUVVkLo8J2+gRlmQB7MkzS0MOY7U3oOU2GT6bwbOvHaoxE+sxU+KUICA21mc nYMH0pOT-Yktwcvj-amhH55kIoHaUIgpQjGtmndz1mrSGSyAckxBRtKZNnY8zA6ogpM9GiMCovEs gjPYYT3LaWLjowZgc5ygFPFud39cJ5Ktt6TGvPglLeAlO4FFSP9o6p9qFcJ4SqVnIS1wADBNwuMZ wcDGgfEmY8OpJE5nIIhr2Kc-HHB9PN3Edp5pQ+8AQzVz4Kqc+pMY-bqdJTtnTtEJbHYdISbxHkE6 QtsSut4yMOaMyrM8BnlGDAc9FKIyiWEUbJR2PTyTH3YVHSmFFtQOQqUQ38Hxp02W-F7ABiFK5SMU IRyPF2Au3O4d0ik-5S9Y8tZbktNJDK++0agtz7Jjo86PH04dXRAwG9S20BpvCA== -----END SEALED ENVELOPE----- eos.app=transfer-3rd tpc.stage=placement&tpc.spr=root&tpc.src=preprod-srm.ndgf.org:1094&tpc.stage=copy&tpc.str=1&tpc.tpr=root&xrdcl.intent=tpc ######################################################################## Use REPLY-ALL to reply to list To unsubscribe from the XROOTD-DEV list, click the following link: https://listserv.slac.stanford.edu/cgi-bin/wa?SUBED1=XROOTD-DEV&A=1