Paul Millar

Hi Simon, Yes, you have identified a valid concern. dCache currently doesn't distinguish groups asserted by different OPs. This can lead to the problem you describe: two OPs use the...

Hi Simon, Yes, you're right that an OP could (maliciously or otherwise) falsely assert group membership on an individual. I deliberately didn't add any protection in dCache against this as...

I think I would approach this in a slightly different way, but I think the end-result would be the same. Rather than adding the OP to the group, I would...

You're quite right: the log message is not good. The problem here likely comes from pool-manager, rather than space-manager. Space-manager checks that there's at least one pool that the client...

Does the NFS door's access log file provide any useful information on the client interaction? This should contain (almost) all client interactions that led up to this problem.

Hi Adrien, I agree, this is rather annoying. To clarify what's happening here. The door is asking pool-manager "give me a pool from which my user can read this file"....

Hi Christian, I agree the current setup is sub-optimal. The currently multi-line output from login failures is quite deliberate. It is very hard to describe why a login failed as...

Yes, the same problem exists for the FTP logging for aborted transfers. There might be other places where dCache logs multiple lines, but I can't think of them just now.

In order to support pools many very many concurrent requests, the numbers you see in the info command and on the admin web-interface are cached. This summary data (number of...

Ah, that's interesting. It looks like there's a client attempting to read a file that is (seemingly) not currently available on the pool. The file appears to be `/space/atlas/tape/pool/data/0000B59ED861D7604787A0CB056601` with...