Login

WLCG DOMA BDT Meeting

→ Europe/Zurich
Brian Paul Bockelman (University of Wisconsin Madison (US)), Maria Arsuaga Rios (CERN), Petr Vokac (Czech Technical University in Prague (CZ))
Description

Topic: WLCG DOMA BDT Meeting

    • 16:30 → 16:35
      Hot topics 5m
      • CMS sites pushed via GGUS tickets (e.g. T2_UK_London_Brunel) to install latest XRootD 5.4.2 with token support
      • XRootD checksums
        • LHCb observed higher CPU usage in 5.4.0
          • should be fixed in 5.4.1
        • OSCER sometimes overloaded with adler32 checksum
          • problems related with WebDAV TPC transfers
        • XRootD can't be used with NFS on RHEL7
          • old kernel doesn't support extended attributes necessary for storing checksums
      • CMS FTS with enabled HTTP streaming
        • used by users to transfer data from grid storage to CERNBox
        • low volume use-case - this should not overload FTS
        • future CERNBox should come with HTTP-TPC support
          • timeline unknown (non-trivial update)
    • 16:35 → 16:50
      Token Authorization testbed 15m
      Speaker: Francesco Giacomini (INFN CNAF)

      CERN EOS & VOMS Admin API

      • eos-iam-mapfile tool exists (source)
      • acts as a replacement for edg-mkgridmap tool
      • is it used in production? I guess no.
        • not everything gets automatically synchronized from VOMS to IAM (e.g. GGUS:156765)
        • we'll try to push fixes for synchronization script
        • similar issue with comma in certificate subject discovered also in XRootD (issue#1681)
      • necessary also for RAL Echo? (more?)
        • contact RAL

      ETF probes for storage with tokens

      • generic implementation for at least all LHC experiments with IAM / WLCG JWT tokens?
        • in the past this was not possible due to different test requirements for each experiment
      • what are the EGI Argo plans for token support? Is there already some implementation?
      • CMS plans to extend functionality of their storage probes by the end of summer
        • currently supports X509 and macaroons, add support for tokens
        • complex tests with many useful details for site administrators (e.g. examples how to reproduce detected issue)
        • use real datasets
      • ATLAS use just simple upload / list / download tests
        • add token support by the end of this year

      Gfal2 and roots:// protocol

      • should gfal2 support roots:// protocol or is it sufficient to rely on automatic TLS negotiation?
        • new protocol will be added
        • this seems to be simple, but it complication might be discovered during implementation
      • should we rely on xroot library to do automatic token discovery?
        • ticket already exists for HTTP protocol and token discovery
        • xroot will be also considered
    • 16:50 → 17:05
      Tape REST access 15m
      Speaker: Cedric Caffy (CERN)
    • 17:05 → 17:20
      Packet marking 15m
      Speakers: Marian Babik (CERN), Shawn Mc Kee (University of Michigan (US))
      Flow and Packet Marking Technical Specification

      - Next WG meeting will be beg. of May and will focus on packet marking (RFC review, eBPF/TC implementation, HW accounting)

      - WG udpate will be presented at HEPiX workshop next week

      - Flow and Packet Marking Technical Specification (attached): Contains proposals on protocol extensions that would make it possible to propagate experiment ids and activities from DDMs to storages (open to comments and suggestions). 

      - dCache flow marking meeting to be scheduled

       

       

    • 17:20 → 17:30
      AOB 10m