[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [Condor-users] Stork installation on our working Condor 6.8: confused about credd / authentication
- Date: Wed, 13 Dec 2006 14:22:00 +0100
- From: "François Bachmann" <f.bachmann@xxxxxxxxx>
- Subject: Re: [Condor-users] Stork installation on our working Condor 6.8: confused about credd / authentication
Hi Nick
thanks for getting back to me - the answer to all the certificate questions is "no", as we tried to to authentication via the filesystem (no CA / certification experience in-house). This cluster is not (yet) in the open, so we don't need any strong authentication (yet).
Is that a problem ?
Looking forward to more voodoo :)
Francois
On 11/21/06, Nick LeRoy <nleroy@xxxxxxxxxxx
> wrote:On Fri November 17 2006 5:37 am, François Bachmann wrote:
> Hi all
>
> my sysadmin & myself are trying to implement a Stork server for our
> existing & working Condor pool; it looks like we got lost somewhere around
> the you-will-need-credd-for- Stork-and-certificates-all-around-the-place
> bit :(
>
> I've read the http://www.cs.wisc.edu/condor/ stork
> /docs/Stork_technical_reference_manual.txt<
http://www.cs.wisc.edu/condor/st
>ork/docs/Stork_technical_reference_manual.txt>thoroughly, and I'm still
> puzzled: the stork_server and credd daemons are
> running (checked the logs, everything's fine) but still no bonus...
>
> Is there any guidance (if possible, step by step) for Stork installation?
> Our Stork server runs well in a Personal Condor environment, but as soon as
> we try to submit Stork jobs from another submit node on our cluster, we get
> authentication errors.
I'm trying to setup some similar tests for myself, but, in the mean time, here
are some general guidelines.
1. Do you have a host certificate for all involved machines, and have them
installed properly?
2. Do you have a user certificate and a valid proxy for it?
3. Do you have the root certificate of the signing authority that signed the
above host and user certificates installed in your "certificates" directory
(usually /etc/grid-security/certificates)?
There's a lot of voodoo to make this all work.
-Nick
--
<<< The matrix has you. >>>
/`-_ Nicholas R. LeRoy The Condor Project
{ }/ http://www.cs.wisc.edu/~nleroy http://www.cs.wisc.edu/condor
\ / nleroy@xxxxxxxxxxx
The University of Wisconsin
|_*_| 608-265-5761 Department of Computer Sciences
_______________________________________________
Condor-users mailing list
To unsubscribe, send a message to
condor-users-request@xxxxxxxxxxx with a
subject: Unsubscribe
You can also unsubscribe by visiting
https://lists.cs.wisc.edu/mailman/listinfo/condor-users
The archives can be found at either
https://lists.cs.wisc.edu/archive/condor-users/
http://www.opencondor.org/spaces/viewmailarchive.action?key=CONDOR