Project

General

Profile

Bug #24966

Condor 8.9 not playing nicely with 8.9 pilots in 3.6.3

Added by Dennis Box about 1 month ago.

Status:
New
Priority:
Normal
Assignee:
Category:
-
Target version:
Start date:
09/14/2020
Due date:
% Done:

0%

Estimated time:
First Occurred:
Occurs In:
Stakeholders:
Duration:

Description

Hi Dennis,
this is happening w/ 3.6.3.
We'd like also 3.6.3 to work w/ HTCondor 8.9 (and the upcoming 8.10).
I think you fixed something for v3.7.x, not sure if it was backported for 3.6.x

Please open a Redmine ticket w/ the issue (something like "Work correctly w/ HTCondor 8.9.x authentication) and assign it to you.
To work on it, you can install v3.6.3 form osg-testing, and do a smoke test w/ HTCondor 8.9 (e.g. from osg-upcoming) and see if the config settings need to be changed.

Thanks,
Marco

Begin forwarded message:

From: Edgar Fajardo Hernandez <>
Subject: Condor 8.9 not playing nicely with 8.9 pilots
Date: September 11, 2020 at 20:04:39 CDT
To: Todd Tannenbaum <>
Cc: "Peter F. Couvares" <>, Marco Mambelli <>, "Bockelman, Brian" <>

Hi All,

I had to downgrade condor to 8.8 in the central manager cause it was getting errors like this in the Collector LOG:

09/11/20 17:41:53 Query info: matched=1; skipped=0; query_time=0.000040; send_time=0.000161; type=Negotiator; requirements={true}; locate=0; limit=0; from=SCHEDD; peer=<169.228.130.161:5406>; projection={}; filter_private_ads=1
09/11/20 17:41:54 PERMISSION DENIED to from host 169.228.130.161 for command 1 (UPDATE_SCHEDD_AD), access level ADVERTISE_SCHEDD: reason: ADVERTISE_SCHEDD authorization policy contains no matching ALLOW entry for this request; identifiers used for this host: 169.228.130.161,cabinet-10-10-4.t2.ucsd.edu, hostname size = 1, original ip address = 169.228.130.161
09/11/20 17:41:54 DC_AUTHENTICATE: Command not authorized, done!

I believe they (HTCondor) changed the defaults of the SEC_*_AUTHENTICATION and it bite us with pilots and central manager both in 8.9.

[edgar.hernandez@condor-osg condor]$ condor_config_val HOSTALLOW_WRITE *
[edgar.hernandez@condor-osg condor]$ condor_config_val ALLOW_WRITE *

I wold expect that configuration that works in 8.8 should work in 8.9.

Edgar M Fajardo Hernandez



Also available in: Atom PDF