Re: [Condor-users] Permission Denied when get info about jobs via SOAP API

[Matthew Farrellee <mfarrellee@xxxxxxxxxx>]

Are you getting any messages about authentication failing or requests 
being rejected in your SchedLog?

You might need to increase your Schedd's debug level to D_FULLDEBUG to 
see useful messages.

Alternatively, you might need to set HOSTALLOW_* config options.

Actually, your example below is for Condor 6.8.5, so you most likely 
need to use HOSTALLOW_* instead of ALLOW_*.

Best,


matt

Xuan Bach Luong wrote:
> Dear Matt,
> This is a part of my condor_config file and I think that I've already
> set ALLOW*_READ/_WRITE ok.
> ##--------------------------------------------------------------------
> ##  Pathnames:
> ##--------------------------------------------------------------------
> ##  Where have you installed the bin, sbin and lib condor directories?
> RELEASE_DIR             = /usr/local/condor-6.8.5
> WEB_ROOT_DIR            = /usr/local/condor-6.8.5/lib/webservice
> ENABLE_SOAP             = TRUE
> ENABLE_WEB_SERVER       = TRUE
> ALLOW_SOAP      =*/*
> QUEUE_ALL_USERS_TRUSTED = TRUE
> ALLOW_READ = */*
> ALLOW_WRITE=*/*
> <...>
>
> Could you continue give me a hint. Or could you help me do
> authentication with X.509 certs as you mentioned above more detail.
> Best Regards.
>
> On 5/12/08, Matthew Farrellee <mfarrellee@xxxxxxxxxx> wrote:
> > Make sure your ALLOW*_READ/_WRITE config settings let the host you are
> > connecting from through, or do authentication with X.509 certs and make
> > sure the authenticated users have READ/WRITE access.
> >
> > Best,
> >
> >
> > matt
> >
> > Luong Xuan Bach wrote:
> > > Dear Matthew,
> > > Could you give me a hint to pass through permission checks?
> > >
> > > Best Regards.
> > >
> > > -----Original Message-----
> > > From: condor-users-bounces@xxxxxxxxxxx
> > > [mailto:condor-users-bounces@xxxxxxxxxxx] On Behalf Of Matthew Farrellee
> > > Sent: 12 Tháng Năm 2008 12:25 SA
> > > To: Condor-Users Mail List
> > > Subject: Re: [Condor-users] Permission Denied when get info about jobs via
> > > SOAP API
> > >
> > > Xuan Bach Luong wrote:
> > > > Hi all,
> > > >
> > > > When I try to get information about submitted job in condor pool via SOAP
> > > > API (getJobAds) with condorSchedd.wsdl, i received an error "permission
> > > > denied" but my getVersionString still work well.
> > > > This is my code (use gSOAP lib)
> > > >
> > > > #include "stdio.h"
> > > > #include "soapH.h"
> > > > #include "condorSchedd.nsmap"
> > > >
> > > > int main(int argc, char* argv[])
> > > > {
> > > >   struct soap soap;
> > > >
> > > >   struct _ns1__getVersionString                 ns1__getVersionString;
> > > >   struct _ns1__getVersionStringResponse
> > > > ns1__getVersionStringResponse;
> > > >
> > > >   struct _ns1__getJobAds                         ns1__getJobAds;
> > > >   struct _ns1__getJobAdsResponse                 ns1__getJobAdsResponse;
> > > >
> > > >   soap_init(&soap);
> > > >
> > > >   char *myProxyHost = "192.168.50.130";
> > > >   int myProxyPort = 1134;
> > > >
> > > >   soap.proxy_host = myProxyHost;
> > > >   soap.proxy_port = myProxyPort;
> > > >
> > > >   if (soap_call___ns1__getVersionString(&soap,
> > > >                                           NULL,
> > > >                                           NULL,
> > > >                                           &ns1__getVersionString,
> > > >                                           &ns1__getVersionStringResponse
> > > >                                          ) == SOAP_OK)
> > > >   {
> > > >     printf("Response for getVersionString: %s\n",
> > > > ns1__getVersionStringResponse.response->message);
> > > >   }
> > > >   else
> > > >   {
> > > >     soap_print_fault(&soap, stderr);
> > > >   }
> > > >
> > > >
> > > >   if (soap_call___ns1__getJobAds(&soap,
> > > >                                       NULL,
> > > >                                     NULL,
> > > >                                     &ns1__getJobAds,
> > > >                                     &ns1__getJobAdsResponse
> > > >                                     ) == SOAP_OK )
> > > >   {
> > > >       struct ns1__Status* sp = ns1__getJobAdsResponse.response->status;
> > > >       printf ("getJobAdsResponse.response->status: %s\n", sp->message);
> > > >   }
> > > >   else
> > > >   {
> > > >     soap_print_fault(&soap, stderr);
> > > >   }
> > > >
> > > >   soap_destroy(&soap);
> > > >   soap_end(&soap);
> > > >   soap_done(&soap);
> > > >
> > > >   return 0;
> > > > }
> > > >
> > > >
> > > > This is something like my output:
> > > > Response for getVersionString: $CondorVersion: 6.8.5 May 17 2007 $
> > > > getJobAdsResponse.response->status: Permission denied
> > > >
> > > > Please help me as soon as you can.
> > > > Thanks in advance!
> > > Getting information means you need to have read access. The
> > > getVersion/Platform functions arguably should be doing permission checks
> > > as well.
> > >
> > > Best,
> > >
> > >
> > > matt
> > > _______________________________________________
> > > Condor-users mailing list
> > > To unsubscribe, send a message to condor-users-request@xxxxxxxxxxx with a
> > > subject: Unsubscribe
> > > You can also unsubscribe by visiting
> > > https://lists.cs.wisc.edu/mailman/listinfo/condor-users
> > >
> > > The archives can be found at:
> > > https://lists.cs.wisc.edu/archive/condor-users/
> > >
> > > _______________________________________________
> > > Condor-users mailing list
> > > To unsubscribe, send a message to condor-users-request@xxxxxxxxxxx with a
> > > subject: Unsubscribe
> > > You can also unsubscribe by visiting
> > > https://lists.cs.wisc.edu/mailman/listinfo/condor-users
> > >
> > > The archives can be found at:
> > > https://lists.cs.wisc.edu/archive/condor-users/