Re: [Condor-users] GSI authentication succeeds but authorization fails

[Zachary Miller <zmiller@xxxxxxxxxxx>]

> 
> Next question: Do I have to also map the certificate that is
> being used by the daemons to a Condor user ID in order for the
> daemons to talk amongst themselves? 
> 
> More specifically, do I have to map
> 
> "/DC=org/DC=doegrids/OU=Services/CN=ldg-portal.phys.uwm.edu" condor@xxxxxxxxxxxx

yep, you got it.  the server will use this to map the client, even if the
client is another condor daemon.  (e.g. the collector authenticating a startd)

after you add that mapping, your pool should start working again.  check the
collector log before and after to verify that's the case.


cheers,
-zach