[Condor-users] Restrict submission from only one submission node, how ?

[Woo Chat Ming <cmwoo@xxxxxxxxxxxx>]

Dear Condor friends,

  I have just set up a Condor pool and it works fine. :) The pool consist of 
one Central Manager. It is a Linux machine and it runs Collector, Negiotiator 
and Schedd daemons. I can submit jobs from this Central Manager.

  The Execution nodes are Windows XP machines which my students are using 
interactively.

  The problem is, I don't want my students to submit programs to the pool. I 
want to restrict the submission from only the Central Manager or only from my 
PC.  And I hope that only I can submit jobs. May I know how can I configure ?

  Attempting to achieve this, I had modified the START expression in the 
execution host. However, it was not successful. My job doesn't start:
START = ( (ClientMachine == "condor.hku.hk") || \
(RemoteUser  == "cmwoo@xxxxxxxxxxxxx") ||  \
(RemoteOwner == "cmwoo@xxxxxxxxxxxxx") )
My job doesn't start even though it says :
$ condor_q -long
Owner = "cmwoo"
User = "cmwoo@xxxxxxxxxxxxx"
LastRejMatchReason = "no match found"

  May I know why my jobs doesn't start ? Should I configure Central Manager 
instead ?

  Thanks for your kindly help in advance.

Regards,
Woo Chat Ming,
Computer Centre,
The University of Hong Kong.