Andy, sorry, missed your first reply here.

First, yes, the error message seems to indicate conflicting load library paths.  But I am pretty sure that, at least for me, that was not the case.

Second, if indeed this comes from trying to use 5.5.1 library, why is it then that copying the 5.5.1 library (built using master) into the lib64 directory for the 5.4.3 installation solves the problem?  As far as 5.4.3, before I copied the missing libXrdSecztn there, no ztn or scitoken .so's existed.

As far as GH:   when I check out 5.4 stable, I see:

[arossi@fndcatemp1 xrootd]$ git branch
  master
* stable-5.4.x

[arossi@fndcatemp1 xrootd]$ ls -l src/*Sci*
-rw-r--r-- 1 arossi ods 1349 Nov 16  2021 src/XrdSciTokens.cmake

src/XrdSciTokens:
total 76
drwxr-xr-x 2 arossi ods  4096 May  3  2021 configs
-rw-r--r-- 1 arossi ods 11357 May  3  2021 LICENSE
-rw-r--r-- 1 arossi ods  7220 Feb 16 11:59 README.md
drwxr-xr-x 3 arossi ods  4096 May  3  2021 test
drwxr-xr-x 4 arossi ods  4096 May  3  2021 vendor
-rw-r--r-- 1 arossi ods 37914 Feb 16 11:59 XrdSciTokensAccess.cc
-rw-r--r-- 1 arossi ods  2910 May  3  2021 XrdSciTokensHelper.hh

I simply follow the usual build process:

scl enable devtoolset-7 /bin/bash
mkdir build
cd build
cmake .. -DCMAKE_INSTALL_PREFIX=/opt/xrootd/v5.4
make
make install

When I do that for master, the libraries are present in lib64; when I do that for 5.4, they aren't.

Al
 
________________________________________________
Albert L. Rossi
Senior Software Developer
Scientific Computing Division, Scientific Data Services, Distributed Data Development
WH 566
Fermi National Accelerator Laboratory
Batavia, IL 60510
(630) 840-3023

From: [log in to unmask] <[log in to unmask]> on behalf of Andrew Hanushevsky <[log in to unmask]>
Sent: Thursday, February 16, 2023 7:37 PM
To: [log in to unmask] <[log in to unmask]>
Cc: Dmitry O Litvintsev <[log in to unmask]>
Subject: Re: 5.4.3 and tokens
 
You shouldn't have to install anything special. libXrdSecztn-5.so should
have been installed automatically but note that it is finding that library
but it finding the 5.5.1 version and a 5.4.3 client is trying to use that
version and they are not compatible. So, where it's looking is messed up.
Is it the case LD_LIBRARY_PATH was inadvertently set to another location?

What libraries are you seeing that start with libXrdSec* ?

Andy


On Fri, 17 Feb 2023, Albert Rossi wrote:

> (The reason we ask is because we have some users with 5.4.3 who were trying to do token authentication and were failing with this error.)
>
>
> ________________________________________________
> Albert L. Rossi
> Senior Software Developer
> Scientific Computing Division, Scientific Data Services, Distributed Data Development
> WH 566
> Fermi National Accelerator Laboratory
> Batavia, IL 60510
> (630) 840-3023
>
> ________________________________
> From: Albert Rossi <[log in to unmask]>
> Sent: Thursday, February 16, 2023 6:10 PM
> To: Albert Rossi <[log in to unmask]>; [log in to unmask] <[log in to unmask]>
> Cc: Dmitry O Litvintsev <[log in to unmask]>
> Subject: Re: 5.4.3 and tokens
>
> Andy,
>
> from our diagnosis, it would seem that the 5.4 stable (5.4.3) branch is
missing the dynamic library in the lib64 directory.
>
> I see no libXrdSecztn-5.so there.
>
> Do you need to do something special to build this?
>
> Thanks, Al
>
> ________________________________________________
> Albert L. Rossi
> Senior Software Developer
> Scientific Computing Division, Scientific Data Services, Distributed Data Development
> WH 566
> Fermi National Accelerator Laboratory
> Batavia, IL 60510
> (630) 840-3023
>
> ________________________________
> From: [log in to unmask] <[log in to unmask]> on behalf of Albert Rossi <[log in to unmask]>
> Sent: Thursday, February 16, 2023 12:34 PM
> To: [log in to unmask] <[log in to unmask]>
> Cc: Dmitry O Litvintsev <[log in to unmask]>
> Subject: 5.4.3 and tokens
>
> Hello again (Andy),
>
> A new question.
>
> When I try to use the 5.4.3 client, I get the following error:
>
> [arossi@fndcatemp1 ~]$ xrdcp54 -f xroot://fndcatemp2.fnal.gov:1094//pnfs/fs/usr/fermilab/users/arossi/tape/data_1b /dev/null
> Plugin version SecClnt v5.4.3 is incompatible with secztn v5.5.1 (must
be <= 5.4.x) in sec.protocol libXrdSecztn-5.so
> [1B/1B][100%][==================================================][0B/s]
>
> debug log (relevant lines):
>
> [2023-02-16 12:18:30.220151 -0600][Debug  ][XRootDTransport   ] [fndcatemp2.fnal.gov:1094.0] kXR_protocol successful (type: manager [], protocol version 500)
>
> [2023-02-16 12:18:30.220416 -0600][Debug  ][XRootDTransport   ] [fndcatemp2.fnal.gov:1094.0] Sending out kXR_login request, username: arossi, cgi: xrd.cc=us&xrd.tz=-6&xrd.appname=xrdcp&xrd.info=&xrd.hostname=fndcatemp1.fnal.gov&xrd.rn=v5.4.3, dual-stack: false, private IPv4: false, private IPv6: false
>
> [2023-02-16 12:18:30.220455 -0600][Debug  ][AsyncSock         ] [fndcatemp2.fnal.gov:1094.0] TLS hand-shake exchange.
>
> [2023-02-16 12:18:30.231664 -0600][Debug  ][AsyncSock         ] [fndcatemp2.fnal.gov:1094.0] TLS hand-shake exchange.
>
> [2023-02-16 12:18:30.236217 -0600][Debug  ][AsyncSock         ] [fndcatemp2.fnal.gov:1094.0] TLS hand-shake exchange.
>
> [2023-02-16 12:18:30.236454 -0600][Info   ][AsyncSock         ] [fndcatemp2.fnal.gov:1094.0] TLS hand-shake done.
>
> [2023-02-16 12:18:30.236564 -0600][Dump   ][AsyncSock         ] [fndcatemp2.fnal.gov:1094.0] Wrote a message:  (0x50000be0), 118 bytes
>
> [2023-02-16 12:18:30.257334 -0600][Dump   ][XRootDTransport   ] [msg: 0x5003e290] Expecting 70 bytes of message body
>
> [2023-02-16 12:18:30.257384 -0600][Dump   ][AsyncSock         ] [fndcatemp2.fnal.gov:1094.0] Received message header, size: 8
>
> [2023-02-16 12:18:30.257407 -0600][Dump   ][AsyncSock         ] [fndcatemp2.fnal.gov:1094.0] Received a message of 78 bytes
>
> [2023-02-16 12:18:30.257433 -0600][Debug  ][XRootDTransport   ] [fndcatemp2.fnal.gov:1094.0] Logged in, session: 3764e358bab6a3b2a07c00a87cd61c95
>
> [2023-02-16 12:18:30.257450 -0600][Debug  ][XRootDTransport   ] [fndcatemp2.fnal.gov:1094.0] Authentication is required: &P=ztn,0:4096:&P=gsi,v:10400,c:ssl,ca:f5f0dfc2&P=unix
>
> [2023-02-16 12:18:30.257476 -0600][Debug  ][XRootDTransport   ] [fndcatemp2.fnal.gov:1094.0] Sending authentication data
>
> Plugin version SecClnt v5.4.3 is incompatible with secztn v5.5.1 (must be <= 5.4.x) in sec.protocol libXrdSecztn-5.so
>
>
>
> master of course (that's my client wrapper xrdcp5x) works fine, of course:
>
> [arossi@fndcatemp1 ~]$ xrdcp5x -f xroot://fndcatemp2.fnal.gov:1094//pnfs/fs/usr/fermilab/users/arossi/tape/data_1b /dev/null
> [1B/1B][100%][==================================================][0B/s]
>
>
> Is dCache not doing something we should be here?
>
> Thanks,
>
> Al
> ________________________________________________
> Albert L. Rossi
> Senior Software Developer
> Scientific Computing Division, Scientific Data Services, Distributed Data Development
> WH 566
> Fermi National Accelerator Laboratory
> Batavia, IL 60510
> (630) 840-3023
>
>
> ________________________________
>
> Use REPLY-ALL to reply to list
>
> To unsubscribe from the XROOTD-L list, click the following link:
> https://urldefense.proofpoint.com/v2/url?u=https-3A__listserv.slac.stanford.edu_cgi-2Dbin_wa-3FSUBED1-3DXROOTD-2DL-26A-3D1&d=DwIBAg&c=gRgGjJ3BkIsb5y6s49QqsA&r=60rQ0HHqHmEY1P6VSdyuTQ&m=zQhvjZWy93q5kJyUN-D1Xg0OAdfvHs3N5nBlfnvujdmXy2bYxMpmQaWuoi1b7Qfg&s=SGYlabpaWDDtwwiM-FfRraZ8Htk8J0uGkmSpH5-ooO0&e= <https://urldefense.proofpoint.com/v2/url?u=https-3A__listserv.slac.stanford.edu_cgi-2Dbin_wa-3FSUBED1-3DXROOTD-2DL-26A-3D1&d=DwMFAw&c=gRgGjJ3BkIsb5y6s49QqsA&r=60rQ0HHqHmEY1P6VSdyuTQ&m=0gwuw63frxwIKC7BofRYgZjZBJzJDjmColi1CJg1rHEW37tnPTVAzORqb3dqyPp3&s=4PSCp7BtPNYBmR3_lBU4pK5Gsl8vTA8ByWWlPKSN98Q&e=>
>
> ########################################################################
> Use REPLY-ALL to reply to list
>
> To unsubscribe from the XROOTD-L list, click the following link:
> https://urldefense.proofpoint.com/v2/url?u=https-3A__listserv.slac.stanford.edu_cgi-2Dbin_wa-3FSUBED1-3DXROOTD-2DL-26A-3D1&d=DwIBAg&c=gRgGjJ3BkIsb5y6s49QqsA&r=60rQ0HHqHmEY1P6VSdyuTQ&m=zQhvjZWy93q5kJyUN-D1Xg0OAdfvHs3N5nBlfnvujdmXy2bYxMpmQaWuoi1b7Qfg&s=SGYlabpaWDDtwwiM-FfRraZ8Htk8J0uGkmSpH5-ooO0&e=
>

########################################################################
Use REPLY-ALL to reply to list

To unsubscribe from the XROOTD-L list, click the following link:
https://urldefense.proofpoint.com/v2/url?u=https-3A__listserv.slac.stanford.edu_cgi-2Dbin_wa-3FSUBED1-3DXROOTD-2DL-26A-3D1&d=DwIBAg&c=gRgGjJ3BkIsb5y6s49QqsA&r=60rQ0HHqHmEY1P6VSdyuTQ&m=zQhvjZWy93q5kJyUN-D1Xg0OAdfvHs3N5nBlfnvujdmXy2bYxMpmQaWuoi1b7Qfg&s=SGYlabpaWDDtwwiM-FfRraZ8Htk8J0uGkmSpH5-ooO0&e=

Use REPLY-ALL to reply to list

To unsubscribe from the XROOTD-L list, click the following link:
https://listserv.slac.stanford.edu/cgi-bin/wa?SUBED1=XROOTD-L&A=1