Re: [Condor-users] Restrict submission from only one submission node, how ?

[Alain Roy <roy@xxxxxxxxxxx>]

>    The problem is, I don't want my students to submit programs to 
> the pool. I
> want to restrict the submission from only the Central Manager or only from my
> PC.  And I hope that only I can submit jobs. May I know how can I configure ?

You can only submit jobs from a machine if you are running the 
condor_schedd program. Edit DAEMON_LIST on a computer so it does not 
list SCHEDD, and the condor_schedd will not be run. This will do 
exactly what you want.

To learn more about the different Condor daemons, read section 3.1 of 
the Condor 6.7 manual:
http://www.cs.wisc.edu/condor/manual/v6.7/3_1Introduction.html

To learn more about the DAEMON_LIST, see section 3.3.8 of the Condor 
6.7 manual:
http://www.cs.wisc.edu/condor/manual/v6.7/3_3Configuration.html#SECTION00438000000000000000

>    Attempting to achieve this, I had modified the START expression in the
> execution host. However, it was not successful. My job doesn't start:
> START = ( (ClientMachine == "condor.hku.hk") || \
> (RemoteUser  == "cmwoo@xxxxxxxxxxxxx") ||  \
> (RemoteOwner == "cmwoo@xxxxxxxxxxxxx") )

ClientMachine isn't in the job ClassAd, and I'm pretty sure that 
there is no attribute with that information at the time the START 
expression is evaluated.

If you want to restrict jobs to only come from you, you need to do 
something like:

START = TARGET.User == "cmwoo@xxxxxxxxxxxxx"

Note that it's not RemoteUser or RemoteOwner.

If you're worried about students maliciously trying to use your 
Condor pool, you should read the portion of the manual that is on 
security. It's Section 3.7 in the Conodr 6.7 manual.

http://www.cs.wisc.edu/condor/manual/v6.7/3_7Security.html

-alain