DOMA / TPC Meeting

Wednesday 16 Dec 2020, 17:30 → 18:35 Europe/Zurich

Topic: WLCG DOMA TPC Meeting

Join Zoom Meeting
https://cern.zoom.us/j/99836057922?pwd=ZFhWN3NpYi9oZmwvM3pIRE9zdzFnZz09

Meeting ID: 998 3605 7922
Passcode: 733660
One tap mobile
+41315280988,,99836057922# Switzerland
+41432107042,,99836057922# Switzerland

Dial by your location
        +41 31 528 09 88 Switzerland
        +41 43 210 70 42 Switzerland
        +41 43 210 71 08 Switzerland
        +33 1 7037 2246 France
        +33 1 7037 9729 France
        +33 1 8699 5831 France
Meeting ID: 998 3605 7922
Find your local number: https://cern.zoom.us/u/aeB4ArMgmT

17:30 → 17:50 SRM - tape T0 - T1 transfers

Speaker: Mihai Patrascoiu (CERN)

17:50 → 18:05 Experiments production

Speakers: Alessandra Forti (University of Manchester (GB)), Diego Davila Foyo (Univ. of California San Diego (US)), Petr Vokac (Czech Technical University (CZ))

Tested gfal2 2.19.1 & FTS (still require additional OSG package x509-scitokens-issuer-client)

• dCache (FZK) TAPE endpoint works fine with SRM+HTTP macaroons
• StoRM (INFN-T1) TAPE endpoint still fails to provide SRM+HTTP support

$ gfal-copy srm://storm-fe.cr.cnaf.infn.it:8444/srm/managerv2?SFN=/atlas/atlasdatatape/data16_13TeV/DAOD_RPVLL/r9264_r10573_p3578/data16_13TeV.00302831.physics_Main.merge.DAOD_RPVLL.r9264_r10573_p3578_tid14401125_00/DAOD_RPVLL.14401125._000062.pool.root.1 davs://golias100.farm.particle.cz/dpm/farm.particle.cz/home/atlas/test/x.srm.storm
gfal-copy error: 5 (Input/output error) - SOURCE SRM_GET_TURL error on the turl  request : [SE][StatusOfGetRequest][SRM_FAILURE] Unable to decide TURL!

Should we try GGUS to INFN-T1 or is there better way to pass this new requirement to the INFN-T1 storage ops team? ... Enabling SRM+HTTP needs official ATLAS request.

Unable to test with fts3-next-devel, because it prefers just gsiftp as TURL_3RD_PARTY_PROTOCOLS (still use gridsite X.509 delegation with my old FTS 3.9.5).

UPDATE: fts3-next-devel now use https as preferred protocol while SRM asks for TURL and I can confirm that FZK tape now works fine with SRM+HTTP(macaroon) using this FTS instance. We can start to think about TAPE endpoint tests SRM+HTTP tests.

UPDATE2: GGUS:149954 SRM+HTTP can be used to upload file to StoRM disk, but upload to INFN-T1 tape works just partially, because uploaded file can't be accessed with SRM+GridFTP (empty file).

18:05 → 18:15 Token Authorization testbed

Speakers: Andrea Ceccanti (Universita e INFN, Bologna (IT)), Andrea Ceccanti (Unknown), Jaroslav Guenther (CERN)

# WLCG JWT compliance test suite in CI

WLCG JWT compliance test suite is now running in CI on GH actions:

https://github.com/indigo-iam/wlcg-jwt-compliance-tests/actions

Runs every day at 13 UTC.

Results are published on amnesiac (requires WLCG auth):

https://amnesiac.cloud.cnaf.infn.it/wlcg/

Last run:

https://amnesiac.cloud.cnaf.infn.it:8443/wlcg/jwt-compliance-reports/20201118_171224/joint-report.html

18:15 → 18:20 HTTP Protocol Update

Speaker: Brian Paul Bockelman (University of Nebraska Lincoln (US))

18:20 → 18:25 Xrootd Protocol Update

Speaker: Wei Yang (SLAC National Accelerator Laboratory (US))

18:25 → 18:30 AOB