Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Item

Presenter

Notes

XrootD 5.5.4 testing

link ssl read errors still happening, but gws in sandbox have been stable during high traffic times. Socket connections are closing better (seeing more socket errors being handled from client sigterm) compared to host in 5.5.0

Tokens testing

JW

Following XRootD workshop; can now restrict a VO to it’s own path / pool.

  • todo: discuss how to move towards production.

Status of space reporting and tests on Alice dev gateway and setting up of a unified configuration.

Jira Legacy
serverSystem JIRA
serverId929eceee-34b0-3928-beeb-a1a37de31a8b
keyXRD-21

Are we done ?

Updated

Jira Legacy
serverSystem JIRA
serverId929eceee-34b0-3928-beeb-a1a37de31a8b
keyXRD-21
to reflect the current status. We have sign-off from ALICE and handover to operations for updating figures. Code needs merging.

CMSD status

Jira Legacy
serverSystem JIRA
serverId929eceee-34b0-3928-beeb-a1a37de31a8b
keyXRD-41

CC document

https://stfc.atlassian.net/wiki/spaces/GRIDPP/pages/136446019/High-level+XrootD+redirection+for+Echo?focusedCommentId=136118425

https://helpdesk.gridpp.rl.ac.uk/Ticket/Display.html?id=481645

https://helpdesk.gridpp.rl.ac.uk/Ticket/Display.html?id=481665

echo-manager{01,02} re-iped to OPN, but wrong IPv6 addresses given to the alias - being corrected.
- final SAN ?

Keep with the original planned rdr echo address ?

Vector Read

https://stfc.atlassian.net/wiki/spaces/GRIDPP/pages/137265343/Non-striper+read+v+implementation+for+WN+s+xrootd+gateways

Two nodes for testing; needs Grid services to enable more.
These nodes have a high failure rate, as XrdSecGSISRVNAMES is removed on them currently (see below)

Code review in progress; consideration for sparse files needed.

XrdSecGSISRVNAMES on WNs

Secgsi warning because of XrdSecGSISRVNAMES variable
XrdSecGSISRVNAMES=lcg2622.gridpp.rl.ac.uk

XrdSecGSISRVNAMES is set on the WNs (and as a Singularity bound variable) to allow old 4.8.X clients to authenticate against the WN xrootd server (which it thinks is webdav.echo.stfc.ac.uk).
This triggers a warning “secgsi: proxy delegation forbidden when trusting DNS to resolve 'eoslhcb.cern.ch'!”

Removal of the variable not possible as user analysis workflows have this embedded within it.

...