 |
 |
Final point. I was trying to figure out how to activate the BUILD_SCITOKENS flag. Haven't been able to yet. But if I simply copy the missing library from the master build into the 5.4.3 installation, it works. [arossi@fndcatemp1 ~]$ xrdcp54 -f xroots://fndcatemp2.fnal.gov:1095//pnfs/fs/usr/fermilab/users/arossi/tape/data_1b /dev/null [1B/1B][100%][==================================================][1B/s] -Al ________________________________________________ Albert L. Rossi Senior Software Developer Scientific Computing Division, Scientific Data Services, Distributed Data Development WH 566 Fermi National Accelerator Laboratory Batavia, IL 60510 (630) 840-3023 ________________________________ From: [log in to unmask] <[log in to unmask]> on behalf of Albert Rossi <[log in to unmask]> Sent: Thursday, February 16, 2023 6:11 PM To: Albert Rossi <[log in to unmask]>; [log in to unmask] <[log in to unmask]> Cc: Dmitry O Litvintsev <[log in to unmask]> Subject: Re: 5.4.3 and tokens (The reason we ask is because we have some users with 5.4.3 who were trying to do token authentication and were failing with this error.) ________________________________________________ Albert L. Rossi Senior Software Developer Scientific Computing Division, Scientific Data Services, Distributed Data Development WH 566 Fermi National Accelerator Laboratory Batavia, IL 60510 (630) 840-3023 ________________________________ From: Albert Rossi <[log in to unmask]> Sent: Thursday, February 16, 2023 6:10 PM To: Albert Rossi <[log in to unmask]>; [log in to unmask] <[log in to unmask]> Cc: Dmitry O Litvintsev <[log in to unmask]> Subject: Re: 5.4.3 and tokens Andy, from our diagnosis, it would seem that the 5.4 stable (5.4.3) branch is missing the dynamic library in the lib64 directory. I see no libXrdSecztn-5.so there. Do you need to do something special to build this? Thanks, Al ________________________________________________ Albert L. Rossi Senior Software Developer Scientific Computing Division, Scientific Data Services, Distributed Data Development WH 566 Fermi National Accelerator Laboratory Batavia, IL 60510 (630) 840-3023 ________________________________ From: [log in to unmask] <[log in to unmask]> on behalf of Albert Rossi <[log in to unmask]> Sent: Thursday, February 16, 2023 12:34 PM To: [log in to unmask] <[log in to unmask]> Cc: Dmitry O Litvintsev <[log in to unmask]> Subject: 5.4.3 and tokens Hello again (Andy), A new question. When I try to use the 5.4.3 client, I get the following error: [arossi@fndcatemp1 ~]$ xrdcp54 -f xroot://fndcatemp2.fnal.gov:1094//pnfs/fs/usr/fermilab/users/arossi/tape/data_1b /dev/null Plugin version SecClnt v5.4.3 is incompatible with secztn v5.5.1 (must be <= 5.4.x) in sec.protocol libXrdSecztn-5.so [1B/1B][100%][==================================================][0B/s] debug log (relevant lines): [2023-02-16 12:18:30.220151 -0600][Debug ][XRootDTransport ] [fndcatemp2.fnal.gov:1094.0] kXR_protocol successful (type: manager [], protocol version 500) [2023-02-16 12:18:30.220416 -0600][Debug ][XRootDTransport ] [fndcatemp2.fnal.gov:1094.0] Sending out kXR_login request, username: arossi, cgi: xrd.cc=us&xrd.tz=-6&xrd.appname=xrdcp&xrd.info=&xrd.hostname=fndcatemp1.fnal.gov&xrd.rn=v5.4.3, dual-stack: false, private IPv4: false, private IPv6: false [2023-02-16 12:18:30.220455 -0600][Debug ][AsyncSock ] [fndcatemp2.fnal.gov:1094.0] TLS hand-shake exchange. [2023-02-16 12:18:30.231664 -0600][Debug ][AsyncSock ] [fndcatemp2.fnal.gov:1094.0] TLS hand-shake exchange. [2023-02-16 12:18:30.236217 -0600][Debug ][AsyncSock ] [fndcatemp2.fnal.gov:1094.0] TLS hand-shake exchange. [2023-02-16 12:18:30.236454 -0600][Info ][AsyncSock ] [fndcatemp2.fnal.gov:1094.0] TLS hand-shake done. [2023-02-16 12:18:30.236564 -0600][Dump ][AsyncSock ] [fndcatemp2.fnal.gov:1094.0] Wrote a message: (0x50000be0), 118 bytes [2023-02-16 12:18:30.257334 -0600][Dump ][XRootDTransport ] [msg: 0x5003e290] Expecting 70 bytes of message body [2023-02-16 12:18:30.257384 -0600][Dump ][AsyncSock ] [fndcatemp2.fnal.gov:1094.0] Received message header, size: 8 [2023-02-16 12:18:30.257407 -0600][Dump ][AsyncSock ] [fndcatemp2.fnal.gov:1094.0] Received a message of 78 bytes [2023-02-16 12:18:30.257433 -0600][Debug ][XRootDTransport ] [fndcatemp2.fnal.gov:1094.0] Logged in, session: 3764e358bab6a3b2a07c00a87cd61c95 [2023-02-16 12:18:30.257450 -0600][Debug ][XRootDTransport ] [fndcatemp2.fnal.gov:1094.0] Authentication is required: &P=ztn,0:4096:&P=gsi,v:10400,c:ssl,ca:f5f0dfc2&P=unix [2023-02-16 12:18:30.257476 -0600][Debug ][XRootDTransport ] [fndcatemp2.fnal.gov:1094.0] Sending authentication data Plugin version SecClnt v5.4.3 is incompatible with secztn v5.5.1 (must be <= 5.4.x) in sec.protocol libXrdSecztn-5.so master of course (that's my client wrapper xrdcp5x) works fine, of course: [arossi@fndcatemp1 ~]$ xrdcp5x -f xroot://fndcatemp2.fnal.gov:1094//pnfs/fs/usr/fermilab/users/arossi/tape/data_1b /dev/null [1B/1B][100%][==================================================][0B/s] Is dCache not doing something we should be here? Thanks, Al ________________________________________________ Albert L. Rossi Senior Software Developer Scientific Computing Division, Scientific Data Services, Distributed Data Development WH 566 Fermi National Accelerator Laboratory Batavia, IL 60510 (630) 840-3023 ________________________________ Use REPLY-ALL to reply to list To unsubscribe from the XROOTD-L list, click the following link: https://listserv.slac.stanford.edu/cgi-bin/wa?SUBED1=XROOTD-L&A=1<https://urldefense.proofpoint.com/v2/url?u=https-3A__listserv.slac.stanford.edu_cgi-2Dbin_wa-3FSUBED1-3DXROOTD-2DL-26A-3D1&d=DwMFAw&c=gRgGjJ3BkIsb5y6s49QqsA&r=60rQ0HHqHmEY1P6VSdyuTQ&m=0gwuw63frxwIKC7BofRYgZjZBJzJDjmColi1CJg1rHEW37tnPTVAzORqb3dqyPp3&s=4PSCp7BtPNYBmR3_lBU4pK5Gsl8vTA8ByWWlPKSN98Q&e=> ________________________________ Use REPLY-ALL to reply to list To unsubscribe from the XROOTD-L list, click the following link: https://listserv.slac.stanford.edu/cgi-bin/wa?SUBED1=XROOTD-L&A=1<https://urldefense.proofpoint.com/v2/url?u=https-3A__listserv.slac.stanford.edu_cgi-2Dbin_wa-3FSUBED1-3DXROOTD-2DL-26A-3D1&d=DwMFAg&c=gRgGjJ3BkIsb5y6s49QqsA&r=60rQ0HHqHmEY1P6VSdyuTQ&m=qlsJ2bPlJxXltOT4mlLGPdHndUd9lJqQ2wcseMbIgJgP3Thw_dH2Rw0Q47COTYyK&s=CbBl2X-dJ1Uvsgreb1nH0ckvuMw89_S6m8qpXpdg9SQ&e=> ######################################################################## Use REPLY-ALL to reply to list To unsubscribe from the XROOTD-L list, click the following link: https://listserv.slac.stanford.edu/cgi-bin/wa?SUBED1=XROOTD-L&A=1