Re: [Condor-users] WinXP Application Error running with Condor

["Upton, Stephen (Steve) (CIV)" <scupton@xxxxxxx>]

Thanks Coop, I'll give that a try.

steve


-----Original Message-----
From: condor-users-bounces@xxxxxxxxxxx on behalf of Thompson, Cooper
Sent: Tue 11/6/2007 1:41 PM
To: Condor-Users Mail List
Subject: Re: [Condor-users] WinXP Application Error running with Condor
 
When testing Condor jobs via the command line, I often use:
"runas /noprofile /user:domain\userid cmd"

Then run the Condor executable or batch file from the new command
window.

This simulates the environment in which a condor job will run.
Specifically this will show any problems associated with the application
accessing the user-specific portions of the registry, such as
HKEY_CURRENY_USER, or, as that won't ever exist, any write attempts to
HKEY_USERS/.DEFAULT (reads work fine).

Note that the user you 'runas' into should be different than the user
you are logged as - otherwise the profile is already loaded anyways.

Using the SysInternals regmon tool (use a filter) will let you see any
HKCU read/write attempts (which fail), and subsequent queries of
HKU/.Default, and any failed writes that result from that.  Filemon
might be more useful in this case to see what file your job is failing
to find.

http://www.microsoft.com/technet/sysinternals/utilities/regmon.mspx
http://www.microsoft.com/technet/sysinternals/utilities/filemon.mspx

Coop

-----Original Message-----
From: condor-users-bounces@xxxxxxxxxxx
[mailto:condor-users-bounces@xxxxxxxxxxx] On Behalf Of Ben Burnett
Sent: Tuesday, November 06, 2007 3:02 PM
To: 'Condor-Users Mail List'
Subject: Re: [Condor-users] WinXP Application Error running with Condor

Hi Steve:

One route would be to tailor some accounts under which Condor can run.
By this
I mean, have Condor use MyPrivelegedCondorUser@MyDomain instead of the
plain
condor-slot users.  See the following for more information:

http://www.cs.wisc.edu/condor/manual/v6.8/3_6Security.html#22012

Regards,
-B

-----Original Message-----
From: condor-users-bounces@xxxxxxxxxxx
[mailto:condor-users-bounces@xxxxxxxxxxx]
On Behalf Of Stephen Upton
Sent: Tuesday, November 06, 2007 1:06 PM
To: Condor-Users Mail List
Subject: Re: [Condor-users] WinXP Application Error running with Condor

Hi Ben,

Ok. I see that there has been some discussion that this will be fixed  
in a future version, but in the meantime, is there a way to force  
condor to use a particular account (I'm also not that windows-user- 
account savvy, so please bear with me)? Is there someplace in the  
manual you can refer me to? Or can I just add the condor user as  
having specific privileges?

Sorry for the basic question.

thanx
steve

On Nov 6, 2007, at 12:37 PM, Ben Burnett wrote:

> Condor runs Windows jobs as an unprivileged user (condor-slot/n/),  
> so that,
> among other things, some malicious user cannot come along and  
> submit a job that
> trashes your execute nodes.  Along with this, we don't load the  
> unprivileged
> user's profile, so all registry entries are read-only (in fact, the  
> only "user"
> registry entries this user can see are those of the SYSTEM account  
> [which has
> next to nothing of relevance in it]).  A future version of Condor  
> will allow a
> submit script have the Windows profile loaded for a user, which  
> will bypass the
> problem of a read-only user registry.
>
> The reason, I suspect, that runs on a logged on user account, is  
> that there is
> some information available to it on that account, that it is  
> missing on the
> execute side.
>
>
> -B
>
> -----Original Message-----
> From: condor-users-bounces@xxxxxxxxxxx [mailto:condor-users- 
> bounces@xxxxxxxxxxx]
> On Behalf Of Stephen Upton
> Sent: Tuesday, November 06, 2007 10:44 AM
> To: Condor-Users Mail List
> Subject: Re: [Condor-users] WinXP Application Error running with  
> Condor
>
> Hi Ben,
>
> Thanks for you answer. I'll look into what the application is
> actually doing. The executable is on each of the nodes, and the .bat
> file that calls it, gives the absolute path to the executable (as
> well as the database it references, also configured on each node).
> Other than that, I can't give you much more, since I don't know
> myself (I'm helping the user out distributing his simulation).
>
> However, I wonder why the app runs fine just from the command line,
> i.e., just running the .bat file. Is windows doing something there or
> knows something that condor doesn't when it runs the .bat file (the
> app, and staring condor, are running under administrator)? Thanks for
> being patient.
>
> thanx
> steve
>
> On Nov 6, 2007, at 10:39 AM, Ben Burnett wrote:
>
>> Hi Steve:
>>
>> I'm not familiar with the .isf file extension personally; however,
>> if the
>> application that uses it requires local user registry entries (for
>> read AND
>> write) then it will probably fail for this reason (this will be
>> fixed in future
>> versions of Condor).  This problem is faced by any Windows
>> application that
>> requires read/write access to user registry entries.  If there is a
>> way to tell
>> the application to either draw from a configuration file, from the
>> machine
>> registry, or some other source, then all should be fine.  Also, is  
>> the
>> executable available on all the execute nodes?  You aren't explicitly
>> transferring it yourself, so it must either already be there;
>> either that, or
>> you will have to make sure it gets there somehow.
>>
>> If you post the .bat file, or explain what it is that is does (like
>> which
>> application it spawns), then I may be able to help you further.
>>
>> -B
>>
>> -----Original Message-----
>> From: condor-users-bounces@xxxxxxxxxxx [mailto:condor-users-
>> bounces@xxxxxxxxxxx]
>> On Behalf Of Stephen Upton
>> Sent: Monday, November 05, 2007 7:32 PM
>> To: Condor-Users Mail List
>> Subject: [Condor-users] WinXP Application Error running with Condor
>>
>> Hi All,
>>
>> I'm running condor 6.8.1 on a cluster of WinXP machines. The
>> executable in the submit file is a .bat file that calls the
>> application's executable. We are transferring one input file. Here's
>> the submit:
>> universe = vanilla
>> getenv = False
>> requirements = OpSys == "WINNT50" || OpSys == "WINNT51"
>> executable = iwars3.bat
>> arguments = expt_0001.isf
>> transfer_input_files = expt_0001.isf
>> log = expt_0001.log
>> output = expt_0001.out
>> error = expt_0001.err
>> notification = never
>> queue   1
>>
>> The iwars3.bat file runs fine from the command line, but when I do a
>> condor_submit on this submit file, it starts running, but then I get
>> an error that the app can't load a file. The app accesses a database
>> that is configured on each of the nodes as well and is part of the
>> command line call in the .bat file.
>>
>> I looked through the Start and StarterLog files on the execute node,
>> as well as the ShadowLog files, and nothing jumps out, e.g., file
>> permissions, etc.. I don't know yet if this relates to something like
>> the Excel problem previously reported, e.g., user registries and
>> profiles, but it might - I'm checking into that.
>>
>> In the meantime, does anyone have any insight, given what limited
>> picture I've portrayed, what else could be the source of the problem,
>> condor specific? I've thought about path issues, and permissions; is
>> there anything else, or anywhere else I could look?
>>
>> thanx
>> steve
>> _______________________________________________
>> Condor-users mailing list
>> To unsubscribe, send a message to condor-users-request@xxxxxxxxxxx
>> with a
>> subject: Unsubscribe
>> You can also unsubscribe by visiting
>> https://lists.cs.wisc.edu/mailman/listinfo/condor-users
>>
>> The archives can be found at:
>> https://lists.cs.wisc.edu/archive/condor-users/
>>
>> _______________________________________________
>> Condor-users mailing list
>> To unsubscribe, send a message to condor-users-request@xxxxxxxxxxx
>> with a
>> subject: Unsubscribe
>> You can also unsubscribe by visiting
>> https://lists.cs.wisc.edu/mailman/listinfo/condor-users
>>
>> The archives can be found at:
>> https://lists.cs.wisc.edu/archive/condor-users/
>
> _______________________________________________
> Condor-users mailing list
> To unsubscribe, send a message to condor-users-request@xxxxxxxxxxx  
> with a
> subject: Unsubscribe
> You can also unsubscribe by visiting
> https://lists.cs.wisc.edu/mailman/listinfo/condor-users
>
> The archives can be found at:
> https://lists.cs.wisc.edu/archive/condor-users/
>
> _______________________________________________
> Condor-users mailing list
> To unsubscribe, send a message to condor-users-request@xxxxxxxxxxx  
> with a
> subject: Unsubscribe
> You can also unsubscribe by visiting
> https://lists.cs.wisc.edu/mailman/listinfo/condor-users
>
> The archives can be found at:
> https://lists.cs.wisc.edu/archive/condor-users/

_______________________________________________
Condor-users mailing list
To unsubscribe, send a message to condor-users-request@xxxxxxxxxxx with
a
subject: Unsubscribe
You can also unsubscribe by visiting
https://lists.cs.wisc.edu/mailman/listinfo/condor-users

The archives can be found at: 
https://lists.cs.wisc.edu/archive/condor-users/

_______________________________________________
Condor-users mailing list
To unsubscribe, send a message to condor-users-request@xxxxxxxxxxx with
a
subject: Unsubscribe
You can also unsubscribe by visiting
https://lists.cs.wisc.edu/mailman/listinfo/condor-users

The archives can be found at: 
https://lists.cs.wisc.edu/archive/condor-users/
_______________________________________________
Condor-users mailing list
To unsubscribe, send a message to condor-users-request@xxxxxxxxxxx with a
subject: Unsubscribe
You can also unsubscribe by visiting
https://lists.cs.wisc.edu/mailman/listinfo/condor-users

The archives can be found at: 
https://lists.cs.wisc.edu/archive/condor-users/

<<winmail.dat>>