Uploaded image for project: 'DMC - Development'
  1. DMC - Development
  2. DMC-852

GridFTP: Workaround for Globus' higher priority to /etc/grid-security/hostcert.pem

    XMLWordPrintable

    Details

    • Type: Task
    • Status: Closed
    • Priority: Minor
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: gfal 2.12
    • Component/s: gfal 2
    • Security Level: Public Data (This ticket is visible to anyone on the internet and will be indexed by search engines)
    • Labels:
      None

      Description

      This means that if /etc/grid-security/hostcert.pem exists, X509_USER_PROXY is ignored. An environment variable which has been explicitly set by the user should override default locations, no?

      Moreover, hostcert has a higher priority than /tmp/x509up_u for gridftp, but not for davs and xrootd. This inconsistency can be pretty confusing for the user, and hard to debug. I had to check the server logs to figure out what was happening, for example, which a normal user will not have access to.

      X509_USER_CERT and X509_USER_KEY do have a higher priority than hostcert, though.

        Attachments

          Activity

            People

            • Assignee:
              aalvarez Alejandro Alvarez Ayllon (Inactive)
              Reporter:
              gbitzes Georgios Bitzes
              Component Watchers:
            • Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: