vokac

HTTP-TPC push fails for destination that presents invalid unused certs

7

Uploading data to the storage that during TLS handshake sends unused certificates fails if these superfluous certificate doesn't pass "globus policy validation", e.g. ```bash $ export SRC=https://se1.farm.particle.cz/dpm/farm.particle.cz/home/atlas/1M $ export TSRC=$(curl...

WLCG token wlcg.groups claim ignores OP identity

3

Similarly to the #5950 and as discussed recently in WLCG AuthZ mailing list same problem apply also to `wlcg.groups` or generally token group identity mapping. Nobody can guarantee that two...

dCache doesn't correctly detect java version, because following code https://github.com/dCache/dcache/blob/f5cd99a116645b5aa874b6975c52f5f0a888bad7/skel/share/lib/loadConfig.sh#L57-L65 always return 0, because `*1[1-9]*` matches output from all java version. With installed Java 1.8 dCache startup doesn't log any...

Unable to explain login "group:" and "oidcgrp:"

1

I'm using multimap gplazma plugin where it is possible to use `group:` and `oidcgrp:`, but these prefixes doesn't work when I try to use them in the admin shell e.g....

Problems parsing certificate subject alternative name

6

HTTP-TPC pull fails with dCache 6.2.13 destionation and one TRIUMF dCache source dpool49.lcg.triumf.ca that's behind webdav.lcg.triumf.ca alias (the rest works fine, but they have a bit different certificates). TPC client...

It is not possible to add certificate with same subject and just different issuer. There are a lot of accounts in legacy VOMS where synchronization script fails to create compatible...

To support dualstack machines with network configured by DHCPv4 and DHCPv6 it is necessary to extend *::dynamic defines and corresponding templates with DHCPV6C

IPV6 address redirection with xrootd Doors

2

I see probably same issue described in #6602 with our dCache 7.2.20. I agree dCache should use hostname instead of IPv6 address, but in case dCache decides to use directly...

Always send PerformanceMarker for HTTP transfers

1

Similarly to the https://github.com/xrootd/xrootd/issues/1785 dCache also doesn't sent performance marker for short transfers, e.g. ``` > COPY /atlas/atlasdatadisk/SAM/x HTTP/1.1 > Host: se1.farm.particle.cz > User-Agent: curl/8.0.1 > Accept: */* > Secure-Redirection:...

HTTP-TPC transfer monitoring - stripe source and destination perf marker

16

To improve HTTP-TPC transfer monitoring and for better transfer issue diagnosis WLCG BDT group [proposed HTTP-TPC update](https://twiki.cern.ch/twiki/bin/view/LCG/HttpTpcUpdates#Update4) which adds new `Perf Marker` entries that provide real transfer connection source (`Stripe...