Re: [Condor-users] Setting Root User Problem

[Jaime Frey <jfrey@xxxxxxxxxxx>]

On Oct 13, 2005, at 9:50 AM, Stephen Broughton wrote:

> I am setting up a Linux Redhad Fedora 3 isolated grid.  The Condor
> documentation recommends running Condor as the root user is  
> possible.  I am
> having problems trying to make this happen.
>
> [root@condor1 sbin]# ps -ef | egrep condor_
> daemon    3454     1  0 Oct05 ?        00:24:41 condor_master -f
> daemon    3314  3454  0 13:54 ?        00:00:00 condor_collector -f
> daemon    3315  3454  0 13:54 ?        00:00:00 condor_negotiator -f
> daemon    3317  3454  0 13:54 ?        00:00:00 condor_schedd -f
> daemon    3320  3454  0 13:54 ?        00:00:12 condor_startd -f
>
> The default user for the processes to run is "daemon", the manual  
> says to
> use condor_config --owner=<user> to change that, but it is giveing  
> me an
> error:
>
> [root@condor1 examples]# condor_configure  --owner="root"
>
> Invalid user: getpwnam("root") failed!
>
> [root@condor1 examples]# condor_configure  --owner="root"
>
> Invalid user: getpwnam("root") failed!

When the Condor daemons are started as root, they switch to a non- 
privileged user for most of their life and switch back to root only  
when necessary (to start a job as the user, for example). The --owner  
option to condor_configure says what non-privileged user this should  
be. By default, Condor looks for a 'condor' user.

> When I try to submit the example programs with the current setting  
> I get
> this error:
>
> [root@condor1 examples]# condor_submit stream.cmd
>
> ERROR: Submitting jobs as user/group 0 (root) is not allowed for  
> security
> reasons.
>
> [root@condor1 examples]# condor_submit sh_loop.cmd
>
> ERROR: Submitting jobs as user/group 0 (root) is not allowed for  
> security
> reasons.

The submit jobs as a user other than root.

+----------------------------------+---------------------------------+
|            Jaime Frey            |  Public Split on Whether        |
|        jfrey@xxxxxxxxxxx         |  Bush Is a Divider              |
|  http://www.cs.wisc.edu/~jfrey/  |         -- CNN Scrolling Banner |
+----------------------------------+---------------------------------+