 |
 |
Recently, XRootD started to be unable to find the Kerberos credentials cache. When trying xrdcp or uproot.open() with an xrootd path (CERN EOS), it fails with
Run: [ERROR] Server responded with an error: [3010] Unable to give access - user access restricted - unauthorized identity used ; Permission denied (source)
Running with debugging messages enabled, I see
[2023-03-28 13:19:00.725690 +0200][Debug ][XRootDTransport ] [eoslhcb.cern.ch:1094.0] Logged in, session: 217a7e00c2330400000a000045778600
[2023-03-28 13:19:00.725695 +0200][Debug ][XRootDTransport ] [eoslhcb.cern.ch:1094.0] Authentication is required: &P=krb5,[log in to unmask]&P=gsi,v:10600,c:ssl,ca:5168735f.0|4339b4bc.0&P=sss,0.+13:/etc/eos.keytab&P=unix
[2023-03-28 13:19:00.725704 +0200][Debug ][XRootDTransport ] [eoslhcb.cern.ch:1094.0] Sending authentication data
[2023-03-28 13:19:00.743189 +0200][Debug ][XRootDTransport ] [eoslhcb.cern.ch:1094.0] Trying to authenticate using krb5
[2023-03-28 13:19:00.744740 +0200][Debug ][XRootDTransport ] [eoslhcb.cern.ch:1094.0] Cannot get credentials for protocol krb5: Seckrb5: No or invalid credentials; No credentials cache found ([log in to unmask]).
Running klist shows that the credentials are there (and ssh can find and use them)
Credentials cache: API:6136D20A-21F8-4FF3-B968-A4415990AFF1
Principal: [log in to unmask]
Issued Expires Principal
Mar 28 13:18:54 2023 Mar 28 23:18:52 2023 [log in to unmask]
Mar 28 13:18:55 2023 Mar 28 23:18:52 2023 [log in to unmask]
—
Reply to this email directly, view it on GitHub, or unsubscribe.
You are receiving this because you are subscribed to this thread.
Use REPLY-ALL to reply to list
To unsubscribe from the XROOTD-DEV list, click the following link:
https://listserv.slac.stanford.edu/cgi-bin/wa?SUBED1=XROOTD-DEV&A=1