Project

General

Profile

Bug #2794

Condor-C requires GSI to be explicitly listed

Added by Anthony Tiradani over 7 years ago. Updated over 6 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Anthony Tiradani
Category:
Factory
Target version:
v3_1
Start date:
06/25/2012
Due date:
% Done:

0%

Estimated time:
First Occurred:
Occurs In:
Stakeholders:
Duration:

Description

To get Condor-C submission to work, we need to explicitly set GSI as an authentication method. We had set

SCHEDD.SEC_WRITE_AUTHENTICATION_METHODS = FS,GSI

But Igor mentions that this would allow any dn listed in the condor gridmap file to mess mess with the collector. This is a security hole. Further research suggests that SEC_CLIENT_AUTHENTICATION_METHODS should do what we want. Needs to be tested.

History

#1 Updated by Anthony Tiradani over 7 years ago

SCHEDD.SEC_CLIENT_AUTHENTICATION_METHODS = FS,GSI works. This change has been checked into the condor_c branch.

#2 Updated by Anthony Tiradani over 7 years ago

  • Status changed from Assigned to Resolved

#3 Updated by Parag Mhashilkar over 6 years ago

  • Status changed from Resolved to Closed

Also available in: Atom PDF