 |
 |
Added authorization, but now I see only one auth dump in the log:
Copr. 2004-2012 Stanford University, xrd version v5.5.1
++++++ xrootd [log in to unmask] initialization started.
Config using configuration file /etc/xrootd/xrootd-sciwork1802.cfg
=====> xrd.port 1094
=====> xrd.tls /etc/grid-security/xrd/hostcert.pem /etc/grid-security/xrd/hostkey.pem
=====> xrd.tlsca certdir /etc/grid-security/certificates
=====> all.adminpath /var/spool/xrootd
=====> all.pidpath /var/run/xrootd
++++++ xrootd [log in to unmask] TLS initialization started.
------ xrootd [log in to unmask] TLS initialization ended.
Config maximum number of connections restricted to 65536
Copr. 2012 Stanford University, xroot protocol 5.1.0 version v5.5.1
++++++ xroot protocol initialization started.
=====> all.export /gluex
=====> xrootd.seclib default
=====> xrootd.trace all
Config exporting /gluex
221212 10:30:19 22129 Xrootd_Protocol: Loading security library default
Plugin loaded secprot v5.5.1 from seclib libXrdSec-5.so
++++++ Authentication system initialization started.
Plugin loaded secztn v5.5.1 from sec.protocol libXrdSecztn-5.so
=====> sec.protocol ztn
Plugin loaded secsss v5.5.1 from sec.protocol libXrdSecsss-5.so
=====> sec.protocol sss -k -s /etc/xrootd/proxy.keytab -c /etc/xrootd/proxy.keytab --getcreds --proxy ztn
=====> sec.protbind dtn*jlab.org sss
=====> sec.protbind xrdmgr*jlab.org sss
Config 4 authentication directives processed in /etc/xrootd/xrootd-sciwork1802.cfg
------ Authentication system initialization completed.
++++++ Protection system initialization started.
Config warning: Security level is set to none; request protection disabled!
Config Local protection level: none
Config Remote protection level: none
------ Protection system initialization completed.
Config Authentication protocol(s) ztn require TLS; login now requires TLS.
Config Routing for sciwork1802.jlab.org: local pub4 prv4
Config Route all4: sciwork1802.jlab.org Dest=[::129.57.17.4]:1094
++++++ File system initialization started.
=====> all.role server
=====> ofs.osslib ++ libXrdMultiuser.so
=====> ofs.ckslib ++ libXrdMultiuser.so
=====> ofs.authlib ++ libXrdAccSciTokens.so
++++++ Storage system initialization started.
=====> all.export /gluex
=====> oss.localroot /export/test-xrootd
Config effective /etc/xrootd/xrootd-sciwork1802.cfg oss configuration:
oss.alloc 0 0 0
oss.spacescan 600
oss.fdlimit 32768 65536
oss.maxsize 0
oss.localroot /export/test-xrootd
oss.trace 0
oss.xfr 1 deny 10800 keep 1200
oss.memfile off max 135096131584
oss.defaults r/w nocheck nodread nomig nopurge norcreate nostage
oss.path /gluex r/w nocheck nodread nomig nopurge norcreate nostage
------ Storage system initialization completed.
Plugin loaded osg-multiuser v5.5.1 from osslib libXrdMultiuser-5.so
------ Initializing the multi-user plugin.
++++++ Authorization system initialization started.
221212 10:30:19 22129 acc_Config: Authorization system using configuration in /etc/xrootd/xrootd-sciwork1802.cfg
=====> acc.authdb /etc/xrootd/Authfile
=====> acc.authrefresh 60
Config 2 authorization directives processed in /etc/xrootd/xrootd-sciwork1802.cfg
Config 5 auth entries processed in /etc/xrootd/Authfile
------ Authorization system initialization completed.
Plugin loaded XrdAccSciTokens v5.5.1 from authlib libXrdAccSciTokens-5.so
++++++ XrdAccSciTokens: Initialized SciTokens-based authorization.
=====> scitokens.trace all debug
221212 10:30:19 22129 scitokens_Config: Logging levels enabled - all
221212 10:30:19 22129 scitokens_Reconfig: Parsing configuration file: /etc/xrootd/scitokens.cfg
221212 10:30:19 22129 scitokens_Reconfig: Configuring issuer https://cilogon.org/jlab
221212 10:30:19 22129 scitokens_Reconfig: Successfully parsed SciTokens mapfile: /etc/xrootd/scitokens-map.json
Plugin loaded osg-multiuser v5.5.1 from ckslib libXrdMultiuser-5.so
++++++ Configuring server role. . .
=====> all.adminpath /var/spool/xrootd
++++++ Checkpoint initialization started.
++++++ Checkpoint initialization completed.
Config POSC has been disabled by the osslib plugin.
Config effective /etc/xrootd/xrootd-sciwork1802.cfg ofs configuration:
all.role server
ofs.authorize
ofs.maxdelay 60
ofs.persist off hold 600
ofs.trace 0
ofs.authlib default
ofs.authlib ++ libXrdAccSciTokens.so
ofs.osslib default
ofs.osslib ++ libXrdMultiuser.so
221212 10:30:19 22160 cms_Open: Unable to connect socket to /var/spool/xrootd/sciwork1802/.olb/olbd.admin; connection refused
------ File system server initialization completed.
Config asynchronous I/O has been disabled!
------ xroot protocol initialization completed.
------ xrootd [log in to unmask]:1094 initialization completed.
221212 10:30:46 22149 anon.0:22@dtn2201 Xrootd_Protocol: 0000 req=protocol dlen=0
221212 10:30:46 22149 anon.0:22@dtn2201 Xrootd_Response: 0000 sending 8 data bytes; status=0
221212 10:30:46 22149 XrdLinkXeq: anon.0:22@dtn2201 connection upgraded to TLSv1.2
221212 10:30:46 22149 anon.0:22@dtn2201 Xrootd_Protocol: 0000 req=login dlen=92
221212 10:30:46 22149 p0.3576882:22@dtn2201 Xrootd_Response: 0000 sending 54 data bytes; status=0
221212 10:30:46 22149 p0.3576882:22@dtn2201 Xrootd_Protocol: 0000 req=auth dlen=218
221212 10:30:46 22149 p0.3576882:22@dtn2201 Xrootd_Response: 0000 sending OK
p0.3576882:22@dtn2201 Protocol 'sss'
p0.3576882:22@dtn2201 Name 'xrootd'
p0.3576882:22@dtn2201 Host 'dtn2201.jlab.org'
p0.3576882:22@dtn2201 Vorg ''
p0.3576882:22@dtn2201 Role ''
p0.3576882:22@dtn2201 Grps ''
p0.3576882:22@dtn2201 Caps ''
p0.3576882:22@dtn2201 Pidn 'p0.3576882:22@dtn2201'
p0.3576882:22@dtn2201 Crlen 0
p0.3576882:22@dtn2201 ueid 1
p0.3576882:22@dtn2201 uid 985
p0.3576882:22@dtn2201 gid 933
221212 10:30:46 22149 XrootdXeq: p0.3576882:22@dtn2201 pub IP46 TLSv1.2 login as xrootd
221212 10:30:46 22149 multiuser_UserSentry: Switching FS uid for user xrootd
221212 10:30:46 22149 p0.3576882:22@dtn2201 Xrootd_Protocol: 0000 req=endsess dlen=0
221212 10:30:46 22149 p0.3576882:22@dtn2201 Xrootd_Protocol: 0000 endsess 17454:22.1
221212 10:30:46 22149 p0.3576882:22@dtn2201 Xrootd_Response: 0000 sending OK
221212 10:30:46 22149 p0.3576882:22@dtn2201 Xrootd_Protocol: 0100 req=stat dlen=10
221212 10:30:46 22149 ofs_stat: p0.3576882:22@dtn2201 Unable to locate /gluex/fff; permission denied
221212 10:30:46 22149 p0.3576882:22@dtn2201 Xrootd_Protocol: 0100 rc=-1 stat /gluex/fff
221212 10:30:46 22149 p0.3576882:22@dtn2201 Xrootd_Response: 0100 sending err 3010: Unable to locate /gluex/fff; permission denied
221212 10:30:49 22149 p0.3576882:22@dtn2201 Xrootd_Protocol: 0100 request timeout; read 0 of 24 bytes
—
Reply to this email directly, view it on GitHub, or unsubscribe.
You are receiving this because you commented.
Use REPLY-ALL to reply to list
To unsubscribe from the XROOTD-DEV list, click the following link:
https://listserv.slac.stanford.edu/cgi-bin/wa?SUBED1=XROOTD-DEV&A=1