Print

Print


Hi experts,

Trying to [join dCache-SE to CMS xrootd federation](https://twiki.cern.ch/twiki/bin/view/CMSPublic/DCacheXRootD#Configuration_of_dCache_Xrootd_D), I use xrootd 5.4.2 and xrootd-lcmaps 1.7.8 from OSG repo for the local federation host without a local redirector. A minimal configuration _with_ `sec.protocol gsi -authzfun:libXrdLcmaps.so` fails to start and keeps restarting after `Secgsi` stage. 

Is it a xrootd version issue?

The log repeats itself and looks like 
```
230126 02:58:50 49084 Starting on Linux 3.10.0-1160.81.1.el7.x86_64
230126 02:58:50 49084 /usr/bin/xrootd -l /var/log/xrootd/xrootd.log -c /etc/xrootd/xrootd-clustered.cfg -k fifo -s /run/xrootd/xrootd-clustered.pid -n clustered
Copr.  2004-2012 Stanford University, xrd version v5.4.2
++++++ xrootd [log in to unmask] initialization started.
++++++ xroot protocol initialization started.
++++++ Authentication system initialization started.
Plugin loaded secgsi v5.4.2 from sec.protocol /usr/lib64/libXrdSecgsi-5.so
Secgsi -------------------------------------------------------------------
Secgsi Mode: server
Secgsi Authz function: libXrdLcmaps.so
Secgsi Authz function parms: --lcmapscfg,/etc/xrootd/lcmaps.dbe,--loglevel,5
Secgsi ....
Secgsi Untrusting DNS for hostname checking
Secgsi -------------------------------------------------------------------
230126 02:59:01 49136 Starting on Linux 3.10.0-1160.81.1.el7.x86_64
...
REPEATED....
...
```
The minimal config I used is 
```
xrd.port 11001
all.adminpath /var/run/xrootd
all.pidpath /var/run/xrootd

all.export /
all.role server

xrootd.seclib /usr/lib64/libXrdSec.so
sec.protocol /usr/lib64 gsi -certdir:/etc/grid-security/certificates \
             -cert:/etc/grid-security/xrd/hostcert.pem -key:/etc/grid-security/xrd/hostkey.pem \
             -authzfun:libXrdLcmaps.so -authzfunparms:--lcmapscfg,/etc/xrootd/lcmaps.db,--loglevel,5
```
Using empty `lcmaps.db` doesn't change the behavior.

-- 
Reply to this email directly or view it on GitHub:
https://github.com/xrootd/xrootd/issues/1887
You are receiving this because you are subscribed to this thread.

Message ID: <[log in to unmask]>

########################################################################
Use REPLY-ALL to reply to list

To unsubscribe from the XROOTD-DEV list, click the following link:
https://listserv.slac.stanford.edu/cgi-bin/wa?SUBED1=XROOTD-DEV&A=1