Bug #24966
Condor 8.9 not playing nicely with 8.9 pilots in 3.6.3
0%
Description
Hi Dennis,
this is happening w/ 3.6.3.
We'd like also 3.6.3 to work w/ HTCondor 8.9 (and the upcoming 8.10).
I think you fixed something for v3.7.x, not sure if it was backported for 3.6.x
Please open a Redmine ticket w/ the issue (something like "Work correctly w/ HTCondor 8.9.x authentication) and assign it to you.
To work on it, you can install v3.6.3 form osg-testing, and do a smoke test w/ HTCondor 8.9 (e.g. from osg-upcoming) and see if the config settings need to be changed.
Thanks,
Marco
Begin forwarded message:
From: Edgar Fajardo Hernandez <emfajardohernandez@physics.ucsd.edu>
Subject: Condor 8.9 not playing nicely with 8.9 pilots
Date: September 11, 2020 at 20:04:39 CDT
To: Todd Tannenbaum <tannenba@cs.wisc.edu>
Cc: "Peter F. Couvares" <pcouvare@caltech.edu>, Marco Mambelli <marcom@fnal.gov>, "Bockelman, Brian" <BBockelman@morgridge.org>
Hi All,
I had to downgrade condor to 8.8 in the central manager cause it was getting errors like this in the Collector LOG:
09/11/20 17:41:53 Query info: matched=1; skipped=0; query_time=0.000040; send_time=0.000161; type=Negotiator; requirements={true}; locate=0; limit=0; from=SCHEDD; peer=<169.228.130.161:5406>; projection={}; filter_private_ads=1
09/11/20 17:41:54 PERMISSION DENIED to cab10@condor-osg.ligo.caltech.edu from host 169.228.130.161 for command 1 (UPDATE_SCHEDD_AD), access level ADVERTISE_SCHEDD: reason: ADVERTISE_SCHEDD authorization policy contains no matching ALLOW entry for this request; identifiers used for this host: 169.228.130.161,cabinet-10-10-4.t2.ucsd.edu, hostname size = 1, original ip address = 169.228.130.161
09/11/20 17:41:54 DC_AUTHENTICATE: Command not authorized, done!
I believe they (HTCondor) changed the defaults of the SEC_*_AUTHENTICATION and it bite us with pilots and central manager both in 8.9.
[edgar.hernandez@condor-osg condor]$ condor_config_val HOSTALLOW_WRITE
*
[edgar.hernandez@condor-osg condor]$ condor_config_val ALLOW_WRITE
*
I wold expect that configuration that works in 8.8 should work in 8.9.
Edgar M Fajardo Hernandez
emfajard@ucsd.edu