Print

Print


Hi Marcus,

The problem is not with your config. The problem is that the cert that the 
gfal-copy is supposed to use has not been setup in the server. For 
instance, if you did a proxy_init (e.g. voms-proxy-init) then a proxy cert 
would writte to /tmp with a "standard name". You can also use envars to 
pint to the correct proxy cert that needs to be used. Note that because 
this is a proxy cert you wil need to periodically regenerate it before it 
expires (e.g. a cron job).

So, to reinterate, the message indicates that on of the authentication 
protocols succeeded. The most likely scenaion iis that the server wanted 
to use x509 (e.g. gsi) but the cert was not setup for gfalcopy to use.

Andy


On Tue, 24 Jan 2023, Marcus Lee wrote:

> Hey,
>
> I have been tryign to configure xrootd to perform tpc over the root protocol and have mostly been trying to follow the instructions in the official reference and on the Xrootd HowTos (https://xrootd-howto.readthedocs.io/en/latest/tpc/) but I keep getting the error:
>
> gfal-copy error: 52 (Invalid exchange) - Error on XrdCl::CopyProcess::Run(): [ERROR] Server responded with an error: [3030] [FATAL] Auth failed: No protocols left to try (source)
>
> and I'm not sure how to debug it. I've attached the configuration I've been using so far. For the pgm parameter for ofs.tpc I've tried xrdcp, xrdcp --server, and the xrootd-tpc.sh script shown on the Xrootd HowTos
>
> Thanks
>
>
> ########################################################################
> Use REPLY-ALL to reply to list
>
> To unsubscribe from the XROOTD-L list, click the following link:
> https://listserv.slac.stanford.edu/cgi-bin/wa?SUBED1=XROOTD-L&A=1
>

########################################################################
Use REPLY-ALL to reply to list

To unsubscribe from the XROOTD-L list, click the following link:
https://listserv.slac.stanford.edu/cgi-bin/wa?SUBED1=XROOTD-L&A=1