Re: [Condor-users] Permission Denied when get info about jobs via SOAP API

["Xuan Bach Luong" <bachcntt@xxxxxxxxx>]

Dear Matt,
This is a part of my condor_config file and I think that I've already
set ALLOW*_READ/_WRITE ok.
##--------------------------------------------------------------------
##  Pathnames:
##--------------------------------------------------------------------
##  Where have you installed the bin, sbin and lib condor directories?
RELEASE_DIR             = /usr/local/condor-6.8.5
WEB_ROOT_DIR            = /usr/local/condor-6.8.5/lib/webservice
ENABLE_SOAP             = TRUE
ENABLE_WEB_SERVER       = TRUE
ALLOW_SOAP      =*/*
QUEUE_ALL_USERS_TRUSTED = TRUE
ALLOW_READ = */*
ALLOW_WRITE=*/*
<...>

Could you continue give me a hint. Or could you help me do
authentication with X.509 certs as you mentioned above more detail.
Best Regards.

On 5/12/08, Matthew Farrellee <mfarrellee@xxxxxxxxxx> wrote:
> Make sure your ALLOW*_READ/_WRITE config settings let the host you are
> connecting from through, or do authentication with X.509 certs and make
> sure the authenticated users have READ/WRITE access.
>
> Best,
>
>
> matt
>
> Luong Xuan Bach wrote:
>> Dear Matthew,
>> Could you give me a hint to pass through permission checks?
>>
>> Best Regards.
>>
>> -----Original Message-----
>> From: condor-users-bounces@xxxxxxxxxxx
>> [mailto:condor-users-bounces@xxxxxxxxxxx] On Behalf Of Matthew Farrellee
>> Sent: 12 Tháng Năm 2008 12:25 SA
>> To: Condor-Users Mail List
>> Subject: Re: [Condor-users] Permission Denied when get info about jobs via
>> SOAP API
>>
>> Xuan Bach Luong wrote:
>>> Hi all,
>>>
>>> When I try to get information about submitted job in condor pool via SOAP
>>> API (getJobAds) with condorSchedd.wsdl, i received an error "permission
>>> denied" but my getVersionString still work well.
>>> This is my code (use gSOAP lib)
>>>
>>> #include "stdio.h"
>>> #include "soapH.h"
>>> #include "condorSchedd.nsmap"
>>>
>>> int main(int argc, char* argv[])
>>> {
>>>   struct soap soap;
>>>
>>>   struct _ns1__getVersionString                 ns1__getVersionString;
>>>   struct _ns1__getVersionStringResponse
>>> ns1__getVersionStringResponse;
>>>
>>>   struct _ns1__getJobAds                         ns1__getJobAds;
>>>   struct _ns1__getJobAdsResponse                 ns1__getJobAdsResponse;
>>>
>>>   soap_init(&soap);
>>>
>>>   char *myProxyHost = "192.168.50.130";
>>>   int myProxyPort = 1134;
>>>
>>>   soap.proxy_host = myProxyHost;
>>>   soap.proxy_port = myProxyPort;
>>>
>>>   if (soap_call___ns1__getVersionString(&soap,
>>>                                           NULL,
>>>                                           NULL,
>>>                                           &ns1__getVersionString,
>>>                                           &ns1__getVersionStringResponse
>>>                                          ) == SOAP_OK)
>>>   {
>>>     printf("Response for getVersionString: %s\n",
>>> ns1__getVersionStringResponse.response->message);
>>>   }
>>>   else
>>>   {
>>>     soap_print_fault(&soap, stderr);
>>>   }
>>>
>>>
>>>   if (soap_call___ns1__getJobAds(&soap,
>>>                                       NULL,
>>>                                     NULL,
>>>                                     &ns1__getJobAds,
>>>                                     &ns1__getJobAdsResponse
>>>                                     ) == SOAP_OK )
>>>   {
>>>       struct ns1__Status* sp = ns1__getJobAdsResponse.response->status;
>>>       printf ("getJobAdsResponse.response->status: %s\n", sp->message);
>>>   }
>>>   else
>>>   {
>>>     soap_print_fault(&soap, stderr);
>>>   }
>>>
>>>   soap_destroy(&soap);
>>>   soap_end(&soap);
>>>   soap_done(&soap);
>>>
>>>   return 0;
>>> }
>>>
>>>
>>> This is something like my output:
>>> Response for getVersionString: $CondorVersion: 6.8.5 May 17 2007 $
>>> getJobAdsResponse.response->status: Permission denied
>>>
>>> Please help me as soon as you can.
>>> Thanks in advance!
>>
>> Getting information means you need to have read access. The
>> getVersion/Platform functions arguably should be doing permission checks
>> as well.
>>
>> Best,
>>
>>
>> matt
>> _______________________________________________
>> Condor-users mailing list
>> To unsubscribe, send a message to condor-users-request@xxxxxxxxxxx with a
>> subject: Unsubscribe
>> You can also unsubscribe by visiting
>> https://lists.cs.wisc.edu/mailman/listinfo/condor-users
>>
>> The archives can be found at:
>> https://lists.cs.wisc.edu/archive/condor-users/
>>
>> _______________________________________________
>> Condor-users mailing list
>> To unsubscribe, send a message to condor-users-request@xxxxxxxxxxx with a
>> subject: Unsubscribe
>> You can also unsubscribe by visiting
>> https://lists.cs.wisc.edu/mailman/listinfo/condor-users
>>
>> The archives can be found at:
>> https://lists.cs.wisc.edu/archive/condor-users/
>


-- 
Try not to become a man of success but rather to become a man of
value. (Albert Einstein)