Bug #2794
Condor-C requires GSI to be explicitly listed
Start date:
06/25/2012
Due date:
% Done:
0%
Estimated time:
First Occurred:
Occurs In:
Stakeholders:
Description
To get Condor-C submission to work, we need to explicitly set GSI as an authentication method. We had set
SCHEDD.SEC_WRITE_AUTHENTICATION_METHODS = FS,GSI
But Igor mentions that this would allow any dn listed in the condor gridmap file to mess mess with the collector. This is a security hole. Further research suggests that SEC_CLIENT_AUTHENTICATION_METHODS should do what we want. Needs to be tested.
History
#1 Updated by Anthony Tiradani over 8 years ago
SCHEDD.SEC_CLIENT_AUTHENTICATION_METHODS = FS,GSI works. This change has been checked into the condor_c branch.
#2 Updated by Anthony Tiradani over 8 years ago
- Status changed from Assigned to Resolved
#3 Updated by Parag Mhashilkar over 7 years ago
- Status changed from Resolved to Closed