 |
 |
You shouldn't have to install anything special. libXrdSecztn-5.so should have been installed automatically but note that it is finding that library but it finding the 5.5.1 version and a 5.4.3 client is trying to use that version and they are not compatible. So, where it's looking is messed up. Is it the case LD_LIBRARY_PATH was inadvertently set to another location? What libraries are you seeing that start with libXrdSec* ? Andy On Fri, 17 Feb 2023, Albert Rossi wrote: > (The reason we ask is because we have some users with 5.4.3 who were trying to do token authentication and were failing with this error.) > > > ________________________________________________ > Albert L. Rossi > Senior Software Developer > Scientific Computing Division, Scientific Data Services, Distributed Data Development > WH 566 > Fermi National Accelerator Laboratory > Batavia, IL 60510 > (630) 840-3023 > > ________________________________ > From: Albert Rossi <[log in to unmask]> > Sent: Thursday, February 16, 2023 6:10 PM > To: Albert Rossi <[log in to unmask]>; [log in to unmask] <[log in to unmask]> > Cc: Dmitry O Litvintsev <[log in to unmask]> > Subject: Re: 5.4.3 and tokens > > Andy, > > from our diagnosis, it would seem that the 5.4 stable (5.4.3) branch is missing the dynamic library in the lib64 directory. > > I see no libXrdSecztn-5.so there. > > Do you need to do something special to build this? > > Thanks, Al > > ________________________________________________ > Albert L. Rossi > Senior Software Developer > Scientific Computing Division, Scientific Data Services, Distributed Data Development > WH 566 > Fermi National Accelerator Laboratory > Batavia, IL 60510 > (630) 840-3023 > > ________________________________ > From: [log in to unmask] <[log in to unmask]> on behalf of Albert Rossi <[log in to unmask]> > Sent: Thursday, February 16, 2023 12:34 PM > To: [log in to unmask] <[log in to unmask]> > Cc: Dmitry O Litvintsev <[log in to unmask]> > Subject: 5.4.3 and tokens > > Hello again (Andy), > > A new question. > > When I try to use the 5.4.3 client, I get the following error: > > [arossi@fndcatemp1 ~]$ xrdcp54 -f xroot://fndcatemp2.fnal.gov:1094//pnfs/fs/usr/fermilab/users/arossi/tape/data_1b /dev/null > Plugin version SecClnt v5.4.3 is incompatible with secztn v5.5.1 (must be <= 5.4.x) in sec.protocol libXrdSecztn-5.so > [1B/1B][100%][==================================================][0B/s] > > debug log (relevant lines): > > [2023-02-16 12:18:30.220151 -0600][Debug ][XRootDTransport ] [fndcatemp2.fnal.gov:1094.0] kXR_protocol successful (type: manager [], protocol version 500) > > [2023-02-16 12:18:30.220416 -0600][Debug ][XRootDTransport ] [fndcatemp2.fnal.gov:1094.0] Sending out kXR_login request, username: arossi, cgi: xrd.cc=us&xrd.tz=-6&xrd.appname=xrdcp&xrd.info=&xrd.hostname=fndcatemp1.fnal.gov&xrd.rn=v5.4.3, dual-stack: false, private IPv4: false, private IPv6: false > > [2023-02-16 12:18:30.220455 -0600][Debug ][AsyncSock ] [fndcatemp2.fnal.gov:1094.0] TLS hand-shake exchange. > > [2023-02-16 12:18:30.231664 -0600][Debug ][AsyncSock ] [fndcatemp2.fnal.gov:1094.0] TLS hand-shake exchange. > > [2023-02-16 12:18:30.236217 -0600][Debug ][AsyncSock ] [fndcatemp2.fnal.gov:1094.0] TLS hand-shake exchange. > > [2023-02-16 12:18:30.236454 -0600][Info ][AsyncSock ] [fndcatemp2.fnal.gov:1094.0] TLS hand-shake done. > > [2023-02-16 12:18:30.236564 -0600][Dump ][AsyncSock ] [fndcatemp2.fnal.gov:1094.0] Wrote a message: (0x50000be0), 118 bytes > > [2023-02-16 12:18:30.257334 -0600][Dump ][XRootDTransport ] [msg: 0x5003e290] Expecting 70 bytes of message body > > [2023-02-16 12:18:30.257384 -0600][Dump ][AsyncSock ] [fndcatemp2.fnal.gov:1094.0] Received message header, size: 8 > > [2023-02-16 12:18:30.257407 -0600][Dump ][AsyncSock ] [fndcatemp2.fnal.gov:1094.0] Received a message of 78 bytes > > [2023-02-16 12:18:30.257433 -0600][Debug ][XRootDTransport ] [fndcatemp2.fnal.gov:1094.0] Logged in, session: 3764e358bab6a3b2a07c00a87cd61c95 > > [2023-02-16 12:18:30.257450 -0600][Debug ][XRootDTransport ] [fndcatemp2.fnal.gov:1094.0] Authentication is required: &P=ztn,0:4096:&P=gsi,v:10400,c:ssl,ca:f5f0dfc2&P=unix > > [2023-02-16 12:18:30.257476 -0600][Debug ][XRootDTransport ] [fndcatemp2.fnal.gov:1094.0] Sending authentication data > > Plugin version SecClnt v5.4.3 is incompatible with secztn v5.5.1 (must be <= 5.4.x) in sec.protocol libXrdSecztn-5.so > > > > master of course (that's my client wrapper xrdcp5x) works fine, of course: > > [arossi@fndcatemp1 ~]$ xrdcp5x -f xroot://fndcatemp2.fnal.gov:1094//pnfs/fs/usr/fermilab/users/arossi/tape/data_1b /dev/null > [1B/1B][100%][==================================================][0B/s] > > > Is dCache not doing something we should be here? > > Thanks, > > Al > ________________________________________________ > Albert L. Rossi > Senior Software Developer > Scientific Computing Division, Scientific Data Services, Distributed Data Development > WH 566 > Fermi National Accelerator Laboratory > Batavia, IL 60510 > (630) 840-3023 > > > ________________________________ > > Use REPLY-ALL to reply to list > > To unsubscribe from the XROOTD-L list, click the following link: > https://listserv.slac.stanford.edu/cgi-bin/wa?SUBED1=XROOTD-L&A=1<https://urldefense.proofpoint.com/v2/url?u=https-3A__listserv.slac.stanford.edu_cgi-2Dbin_wa-3FSUBED1-3DXROOTD-2DL-26A-3D1&d=DwMFAw&c=gRgGjJ3BkIsb5y6s49QqsA&r=60rQ0HHqHmEY1P6VSdyuTQ&m=0gwuw63frxwIKC7BofRYgZjZBJzJDjmColi1CJg1rHEW37tnPTVAzORqb3dqyPp3&s=4PSCp7BtPNYBmR3_lBU4pK5Gsl8vTA8ByWWlPKSN98Q&e=> > > ######################################################################## > Use REPLY-ALL to reply to list > > To unsubscribe from the XROOTD-L list, click the following link: > https://listserv.slac.stanford.edu/cgi-bin/wa?SUBED1=XROOTD-L&A=1 > ######################################################################## Use REPLY-ALL to reply to list To unsubscribe from the XROOTD-L list, click the following link: https://listserv.slac.stanford.edu/cgi-bin/wa?SUBED1=XROOTD-L&A=1