Re: [Condor-users] Condor 6.7.20 & BirdBath - java.rmi.RemoteException: Permission denied

[Matthew Farrellee <matt@xxxxxxxxxxx>]

Rob,

It occurs to me that this specific permission check is actually  
controlled by HOSTALLOW_READ/WRITE and ALLOW_READ/WRITE, not  
ALLOW_SOAP, sorry. Are those set to allow write access from your IP?


matt

On Jun 26, 2006, at 11:06 AM, Rob Blake wrote:

> Matt,
>
> Thanks for your quick response.
>
> Yes I'm still getting the error if ALLOW_SOAP=*. However I have  
> changed the logging level within my condor config and the following  
> is now taken from scheddlog:
>
> 6/26 17:01:53 Received HTTP POST connection from <myipaddress>
> 6/26 17:01:53 Current Socket bufsize=8k
> 6/26 17:01:53 Current Socket bufsize=8k
> 6/26 17:01:53 About to serve HTTP request...
> 6/26 17:01:53 MAX_SOAP_TRANSACTION_DURATION is undefined, using  
> default value of -1
> 6/26 17:01:53 SOAP entered beginTransaction(), transaction: 0
> 6/26 17:02:06 SOAP call rejected, no permission for user NULL/ 
> myipaddress>
> 6/26 17:02:06 SOAP leaving beginTransaction() result=1
> 6/26 17:02:06 Completed servicing HTTP request
>
> Perhaps a setup error on my account regarding condor users?
>
> thanks again
>
> Rob
>
> On 6/26/06, Matthew Farrellee < matt@xxxxxxxxxxx> wrote:My best  
> guess on this is that ALLOW_SOAP is too restrictive. Do you
> have the same problem if you try "allow_soap=*"?
>
> As for the log, most of the SOAP messages are logged to the
> D_FULLDEBUG level, so you'll need to add "schedd_debug=d_fulldebug"
> to your config file to see anything interesting...
>
> Best,
>
>
> matt
>
> On Jun 26, 2006, at 10:18 AM, Rob Blake wrote:
>
> > Hi folks,
> >
> > I'm just playing around with the latest version of Condor and I'm
> > attempting to get BirbBath to work. As seems to be the norm, I'm
> > following Matt's slides from Condor week on the initial example
> > just to test the water. At the moment I am receiveing the following
> > error when attempting to begin a Transaction:
> >
> > java.rmi.RemoteException : Permission denied
> > at birdbath.Utilities.checkAndThrowRemoteException(Utilities.java: 
> 27)
> > at birdbath.Transaction.begin(Transaction.java:30)
> >
> > My java code is as follows:
> >
> > try
> >    {
> >             Schedd schedd = new Schedd(new URL("http://myhost:
> > 12000"));
> >             Transaction transaction = schedd.createTransaction();
> >
> >             transaction.begin (30);
> >             int cluster = transaction.createCluster();
> >    }
> >
> > *Note: I'm currently no further into Matt's example as I cannot get
> > any further than this without throwing an exception.
> >
> > My condor_config is as follows:
> >
> > #####################
> > # BIRDBATH SETTINGS #
> > #####################
> > WEB_ROOT_DIR = $(RELEASE_DIR)/web
> > ENABLE_SOAP = TRUE
> > ENABLE_WEB_SERVER = TRUE
> > QUEUE_ALL_USERS_TRUSTED = TRUE
> > ALLOW_SOAP = *.mydomain
> > SCHEDD_ARGS = -p 12000
> >
> > And currently there seems to be nothing of interest regarding the
> > permissions error being logged into the scheddlog. Below is an
> > example scheddlog entry generated when trying to run the above
> > example.
> >
> > 6/26 16:08:25 (pid:652) Received HTTP POST connection from
> > <myipaddress>
> > 6/26 16:08:25 (pid:652) About to serve HTTP request...
> > 6/26 16:08:38 (pid:652) Completed servicing HTTP request
> >
> > Perhaps some more info that would aid any trouble shooting. This is
> > an example being run on Windows XP SP 2 using the 1.5 JDK, and as
> > mentioned with Condor version 6.7.20.  The Transaction is being
> > started by a client running on the same machine as the birdbath
> > daemons.
> >
> > If anyone can offer any help, it  would be greatly appreciated.
> >
> > Cheers
> >
> > Rob
> > _______________________________________________
> > Condor-users mailing list
> > To unsubscribe, send a message to condor-users-request@xxxxxxxxxxx
> > with a
> > subject: Unsubscribe
> > You can also unsubscribe by visiting
> > https://lists.cs.wisc.edu/mailman/listinfo/condor-users
> >
> > The archives can be found at either
> > https://lists.cs.wisc.edu/archive/condor-users/
> > http://www.opencondor.org/spaces/viewmailarchive.action?key=CONDOR
>
> _______________________________________________
> Condor-users mailing list
> To unsubscribe, send a message to condor-users-request@xxxxxxxxxxx  
> with a
> subject: Unsubscribe
> You can also unsubscribe by visiting
> https://lists.cs.wisc.edu/mailman/listinfo/condor-users
>
> The archives can be found at either
> https://lists.cs.wisc.edu/archive/condor-users/
> http://www.opencondor.org/spaces/viewmailarchive.action?key=CONDOR
>
> _______________________________________________
> Condor-users mailing list
> To unsubscribe, send a message to condor-users-request@xxxxxxxxxxx  
> with a
> subject: Unsubscribe
> You can also unsubscribe by visiting
> https://lists.cs.wisc.edu/mailman/listinfo/condor-users
>
> The archives can be found at either
> https://lists.cs.wisc.edu/archive/condor-users/
> http://www.opencondor.org/spaces/viewmailarchive.action?key=CONDOR