Incompatibility with schedd 8.8.1 and frontend at 8.6
Edgar reported that the ligo frontend was not able to query a schedd anymore after it was updated to 8.8.1
I debugged this with him and found out that this fixed the problem:
SEC_CLIENT_AUTHENTICATION = OPTIONAL SEC_CLIENT_INTEGRITY = OPTIONAL
we had to modify creation/lib/cvWCreate.py to make this work at every reconfig.
I'd like to try to replicate this. Should we check schedd versions and report the incompatibility if it's the case?
#6 Updated by Marco Mambelli 4 months ago
- Assignee changed from Marco Mascheroni to Marco Mambelli
This should have been fixed by
Relaxing security should not be the solution. In specific these are the lines (in glideinwms-userschedd 3.6.1) that should be of help, because the newest OSG condor disables GSI authentication by default:
/etc/condor/config.d/00_gwms_general.config:SEC_DEFAULT_AUTHENTICATION_METHODS = $(SEC_DEFAULT_AUTHENTICATION_METHODS),FS,GSI
/etc/condor/config.d/00_gwms_general.config:SEC_DAEMON_AUTHENTICATION_METHODS = $(SEC_DAEMON_AUTHENTICATION_METHODS),FS,GSI
Will check w/ Edgar and test if it is still a problem.
#7 Updated by Marco Mambelli 4 months ago
- Assignee changed from Marco Mambelli to Marco Mascheroni
- Status changed from New to Feedback
The versions and the OSG configuration are red herrings.
The problem is that when using condor bindings the env variables CONDOR... are not used (are used instead in the tools) and the correct mapfile set using _CONDOR_CERTIFICATE_MAPFILE was not picked by the bindings.
Changes in v36/22245
There are 2 commits, one w/ pep8, one w/ the functional part