Project

General

Profile

Bug #25306

Polish condor configuration

Added by Marco Mascheroni 3 months ago.

Status:
New
Priority:
Normal
Category:
-
Target version:
Start date:
12/11/2020
Due date:
% Done:

0%

Estimated time:
First Occurred:
Occurs In:
Stakeholders:
Duration:

Description

I just applied the rpmnew condor configurations in ITB. A couple of things to fix.

1) SEC_DEFAULT_AUTHENTICATION_METHODS is set in different files:

/etc/condor/config.d/00-osg_default_security.config:SEC_DEFAULT_AUTHENTICATION_METHODS = FS, PASSWORD
/etc/condor/config.d/00_gwms_factory_general.config.rpmnew:SEC_DEFAULT_AUTHENTICATION_METHODS = $(SEC_DEFAULT_AUTHENTICATION_METHODS),FS,GSI
/etc/condor/config.d/03_gwms_local.config.rpmnew:SEC_DEFAULT_AUTHENTICATION_METHODS = IDTOKENS,SCITOKENS,FS,GSI

by different packages:

[mmascher@vocms0203 config_d]$ rpm -q --whatprovides /etc/condor/config.d/00-osg_default_security.config
condor-8.8.10-1.3.osg35.el7.x86_64
[mmascher@vocms0203 config_d]$ rpm -q --whatprovides /etc/condor/config.d/00_gwms_factory_general.config 
glideinwms-factory-condor-3.7.2-0.1.rc1.osgup.el7.noarch

I'd remove it from 00_gwms_factory_general.config since this is the first time it is set, and it introduces a syntax error if not overwritten (config knob starting with a comma)

Then, again in 00_gwms_factory_general.config, this part is duplicated:

ALLOW_READ = *
ALLOW_DAEMON=$(ALLOW_WRITE)
ALLOW_ADVERTISE_MASTER = $(ALLOW_DAEMON)

Also available in: Atom PDF