Dear Elvin and Andreas
I can not authenticated on eos-server-5.0.2-1.el7 with x509 cerfificate for https protocol on xrdhttp plug-in ( gfal-ls , gfal-copy , … , same for the curl equivalent command)
only the token request is working
export MACAROON=$(curl --silent --cert /tmp/x509up_u$(id -u) --key /tmp/x509up_u$(id -u) --cacert /tmp/x509up_u$(id -u) --capath /etc/grid-security/certificates -X POST -H ‘Content-Type: application/macaroon-request’ -d ‘{“caveats”: [“activity:UPLOAD,DELETE,LIST”], “validity”: “PT3000M”}’ “$DST” | jq -r ‘.macaroon’)
I do not have a problem with xrootd and x509 authentication method
thank you in advance
best
e.v.
PS
a) /etc/xrootd/scitoken.cfg is configured
b) See the log for 1 gfal-cat https://grid21.lal.in2p3.fr:9000/eos/lab/dteam/file.grid21.30172
211028 12:12:44 31158 anon.0:409@aaubervilliers-154-1-2-114.w82-121.abo.wanadoo.fr sysXrdHttp: Extracting auth info.
211028 12:12:44 31158 XrdVomsFun: retrieval successful
211028 12:12:44 31158 XrdVomsFun: found VO: dteam
211028 12:12:44 31158 XrdVomsFun: —> group: ‘/dteam’, role: ‘NULL’, cap: ‘NULL’
211028 12:12:44 31158 XrdVomsFun: —> fqan: ‘/dteam/Role=NULL/Capability=NULL’
211028 12:12:44 31158 XrdVomsFun: —> group: ‘/dteam/france’, role: ‘NULL’, cap: ‘NULL’
211028 12:12:44 31158 XrdVomsFun: —> fqan: ‘/dteam/france/Role=NULL/Capability=NULL’
211028 12:12:44 31158 anon.0:409@aaubervilliers-154-1-2-114.w82-121.abo.wanadoo.fr sysXrdHttp: Mapping name: ‘/O=GRID-FR/C=FR/O=CNRS/OU=LAL/CN=Emmanouil Vamvakopoulos’ → dte
http Protocol ‘gsi’
http Name ‘dte’
http Host ‘[::ffff:82.121.149.114]’
http Vorg ‘dteam’
http Role ‘NULL’
http Grps ‘/dteam’
http Caps ‘’
http Pidn ‘’
http Crlen 0
http ueid 0
http uid 0
http gid 0
211028 12:12:44 31158 sysXrdHttp: getDataOneShot BuffAvailable: 1048576 maxread: 1048576
211028 12:12:44 31158 sysXrdHttp: getDataOneShot sslavail: 1048576
211028 12:12:44 31158 sysXrdHttp: read 224 of 1048576 bytes
211028 12:12:44 31158 sysXrdHttp: rc:48 got hdr line: HEAD /eos/lab/dteam/file.grid21.30172 HTTP/1.1
211028 12:12:44 31158 sysXrdHttp: Parsing first line: HEAD /eos/lab/dteam/file.grid21.30172 HTTP/1.1
211028 12:12:44 31158 sysXrdHttp: rc:55 got hdr line: User-Agent: gfal2-util/1.5.3 gfal2/2.18.2 neon/0.0.29
211028 12:12:44 31158 sysXrdHttp: rc:14 got hdr line: Keep-Alive:
211028 12:12:44 31158 sysXrdHttp: rc:24 got hdr line: Connection: Keep-Alive
211028 12:12:44 31158 sysXrdHttp: rc:14 got hdr line: TE: trailers
211028 12:12:44 31158 sysXrdHttp: rc:32 got hdr line: Host: grid21.lal.in2p3.fr:9000
211028 12:12:44 31158 sysXrdHttp: rc:35 got hdr line: Accept: application/metalink4+xml
211028 12:12:44 31158 sysXrdHttp: rc:2 got hdr line:
211028 12:12:44 31158 sysXrdHttp: rc:2 detected header end.
211028 12:12:44 time=1635415964.679200 func=MatchesPath level=INFO logid=static… unit=mgm@grid21.lal.in2p3.fr:1094 tid=00007f88dbffd700 source=EosMgmHttpHandler:325 tident= sec=(null) uid=99 gid=99 name=- geo="" verb=HEAD path=/eos/lab/dteam/file.grid21.30172
211028 12:12:44 time=1635415964.679226 func=MatchesPath level=INFO logid=static… unit=mgm@grid21.lal.in2p3.fr:1094 tid=00007f88dbffd700 source=EosMgmHttpHandler:325 tident= sec=(null) uid=99 gid=99 name=- geo="" verb=HEAD path=/eos/lab/dteam/file.grid21.30172
211028 12:12:44 time=1635415964.679255 func=ProcessReq level=INFO logid=static… unit=mgm@grid21.lal.in2p3.fr:1094 tid=00007f88dbffd700 source=EosMgmHttpHandler:379 tident= sec=(null) uid=99 gid=99 name=- geo="" msg=“normalize hdr” key=“Accept” value=“application/metalink4+xml”
211028 12:12:44 time=1635415964.679268 func=ProcessReq level=INFO logid=static… unit=mgm@grid21.lal.in2p3.fr:1094 tid=00007f88dbffd700 source=EosMgmHttpHandler:379 tident= sec=(null) uid=99 gid=99 name=- geo="" msg=“normalize hdr” key=“Connection” value=“Keep-Alive”
211028 12:12:44 time=1635415964.679279 func=ProcessReq level=INFO logid=static… unit=mgm@grid21.lal.in2p3.fr:1094 tid=00007f88dbffd700 source=EosMgmHttpHandler:379 tident= sec=(null) uid=99 gid=99 name=- geo="" msg=“normalize hdr” key=“Host” value=“grid21.lal.in2p3.fr:9000”
211028 12:12:44 time=1635415964.679290 func=ProcessReq level=INFO logid=static… unit=mgm@grid21.lal.in2p3.fr:1094 tid=00007f88dbffd700 source=EosMgmHttpHandler:379 tident= sec=(null) uid=99 gid=99 name=- geo="" msg=“normalize hdr” key=“Keep-Alive” value=""
211028 12:12:44 time=1635415964.679300 func=ProcessReq level=INFO logid=static… unit=mgm@grid21.lal.in2p3.fr:1094 tid=00007f88dbffd700 source=EosMgmHttpHandler:379 tident= sec=(null) uid=99 gid=99 name=- geo="" msg=“normalize hdr” key=“TE” value=“trailers”
211028 12:12:44 time=1635415964.679310 func=ProcessReq level=INFO logid=static… unit=mgm@grid21.lal.in2p3.fr:1094 tid=00007f88dbffd700 source=EosMgmHttpHandler:379 tident= sec=(null) uid=99 gid=99 name=- geo="" msg=“normalize hdr” key=“User-Agent” value=“gfal2-util/1.5.3 gfal2/2.18.2 neon/0.0.29”
211028 12:12:44 time=1635415964.679321 func=ProcessReq level=INFO logid=static… unit=mgm@grid21.lal.in2p3.fr:1094 tid=00007f88dbffd700 source=EosMgmHttpHandler:379 tident= sec=(null) uid=99 gid=99 name=- geo="" msg=“normalize hdr” key=“xrd-http-fullresource” value="/eos/lab/dteam/file.grid21.30172"
211028 12:12:44 time=1635415964.679332 func=ProcessReq level=INFO logid=static… unit=mgm@grid21.lal.in2p3.fr:1094 tid=00007f88dbffd700 source=EosMgmHttpHandler:379 tident= sec=(null) uid=99 gid=99 name=- geo="" msg=“normalize hdr” key=“xrd-http-prot” value=“https”
211028 12:12:44 time=1635415964.679342 func=ProcessReq level=INFO logid=static… unit=mgm@grid21.lal.in2p3.fr:1094 tid=00007f88dbffd700 source=EosMgmHttpHandler:379 tident= sec=(null) uid=99 gid=99 name=- geo="" msg=“normalize hdr” key=“xrd-http-query” value=""
211028 12:12:44 31158 anon.0:409@aaubervilliers-154-1-2-114.w82-121.abo.wanadoo.fr sysXrdHttp: Sending resp: 403211028 12:12:44 time=1635415964.679386 func=ProcessReq level=ERROR logid=static… unit=mgm@grid21.lal.in2p3.fr:1094 tid=00007f88dbffd700 source=EosMgmHttpHandler:406 tident= sec=(null) uid=99 gid=99 name=- geo="" msg="(token) authorization failed" path="/eos/lab/dteam/file.grid21.30172"
header len:89
211028 12:12:44 31158 sysXrdHttp: Sending 89 bytes
211028 12:12:44 31158 sysXrdHttp: Sending 26 bytes
211028 12:12:44 31158 sysXrdHttp: XrdHttpReq request ended.
c) eos vid ls
[root@grid21 mgm]# eos vid ls
gsi:"":gid => root
gsi:"":uid => root
https:"":gid => root
https:"":uid => root
publicaccesslevel: => 1024
sss:"":gid => root
sss:"":uid => root
sudoer => uids()
unix:"":gid => nobody
unix:"":uid => nobody
voms:"/dteam:NULL":gid => dteam
voms:"/dteam:NULL":uid => dte