Re: [Condor-users] Permission Denied when get info about jobs via SOAP API

["Xuan Bach Luong" <bachcntt@xxxxxxxxx>]

Dear Matt,
Thanks for your help!
After doing your instruction, my program gets through that permission checks.
Best,

Luong Xuan Bach

On Mon, May 12, 2008 at 8:39 AM, Matthew Farrellee <mfarrellee@xxxxxxxxxx> wrote:

Are you getting any messages about authentication failing or requests being rejected in your SchedLog?

You might need to increase your Schedd's debug level to D_FULLDEBUG to see useful messages.

Alternatively, you might need to set HOSTALLOW_* config options.

Actually, your example below is for Condor 6.8.5, so you most likely need to use HOSTALLOW_* instead of ALLOW_*.

Best,


matt

Xuan Bach Luong wrote:

Dear Matt,
This is a part of my condor_config file and I think that I've already
set ALLOW*_READ/_WRITE ok.
##--------------------------------------------------------------------
##  Pathnames:
##--------------------------------------------------------------------
##  Where have you installed the bin, sbin and lib condor directories?
RELEASE_DIR             = /usr/local/condor-6.8.5
WEB_ROOT_DIR            = /usr/local/condor-6.8.5/lib/webservice
ENABLE_SOAP             = TRUE
ENABLE_WEB_SERVER       = TRUE
ALLOW_SOAP      =*/*
QUEUE_ALL_USERS_TRUSTED = TRUE
ALLOW_READ = */*
ALLOW_WRITE=*/*
<...>

Could you continue give me a hint. Or could you help me do
authentication with X.509 certs as you mentioned above more detail.
Best Regards.

On 5/12/08, Matthew Farrellee <mfarrellee@xxxxxxxxxx> wrote:

Make sure your ALLOW*_READ/_WRITE config settings let the host you are
connecting from through, or do authentication with X.509 certs and make
sure the authenticated users have READ/WRITE access.

Best,


matt

Luong Xuan Bach wrote:

Dear Matthew,
Could you give me a hint to pass through permission checks?

Best Regards.

-----Original Message-----
From: condor-users-bounces@xxxxxxxxxxx
[mailto:condor-users-bounces@xxxxxxxxxxx] On Behalf Of Matthew Farrellee
Sent: 12 Tháng Năm 2008 12:25 SA
To: Condor-Users Mail List
Subject: Re: [Condor-users] Permission Denied when get info about jobs via
SOAP API

Xuan Bach Luong wrote:

Hi all,

When I try to get information about submitted job in condor pool via SOAP
API (getJobAds) with condorSchedd.wsdl, i received an error "permission
denied" but my getVersionString still work well.
This is my code (use gSOAP lib)

#include "stdio.h"
#include "soapH.h"
#include "condorSchedd.nsmap"

int main(int argc, char* argv[])
{
 struct soap soap;

 struct _ns1__getVersionString                 ns1__getVersionString;
 struct _ns1__getVersionStringResponse
ns1__getVersionStringResponse;

 struct _ns1__getJobAds                         ns1__getJobAds;
 struct _ns1__getJobAdsResponse                 ns1__getJobAdsResponse;

 soap_init(&soap);

 char *myProxyHost = "192.168.50.130";
 int myProxyPort = 1134;

 soap.proxy_host = myProxyHost;
 soap.proxy_port = myProxyPort;

 if (soap_call___ns1__getVersionString(&soap,
                                         NULL,
                                         NULL,
                                         &ns1__getVersionString,
                                         &ns1__getVersionStringResponse
                                        ) == SOAP_OK)
 {
   printf("Response for getVersionString: %s\n",
ns1__getVersionStringResponse.response->message);
 }
 else
 {
   soap_print_fault(&soap, stderr);
 }


 if (soap_call___ns1__getJobAds(&soap,
                                     NULL,
                                   NULL,
                                   &ns1__getJobAds,
                                   &ns1__getJobAdsResponse
                                   ) == SOAP_OK )
 {
     struct ns1__Status* sp = ns1__getJobAdsResponse.response->status;
     printf ("getJobAdsResponse.response->status: %s\n", sp->message);
 }
 else
 {
   soap_print_fault(&soap, stderr);
 }

 soap_destroy(&soap);
 soap_end(&soap);
 soap_done(&soap);

 return 0;
}


This is something like my output:
Response for getVersionString: $CondorVersion: 6.8.5 May 17 2007 $
getJobAdsResponse.response->status: Permission denied

Please help me as soon as you can.
Thanks in advance!

Getting information means you need to have read access. The
getVersion/Platform functions arguably should be doing permission checks
as well.

Best,


matt
_______________________________________________
Condor-users mailing list
To unsubscribe, send a message to condor-users-request@xxxxxxxxxxx with a
subject: Unsubscribe
You can also unsubscribe by visiting
https://lists.cs.wisc.edu/mailman/listinfo/condor-users

The archives can be found at:
https://lists.cs.wisc.edu/archive/condor-users/

_______________________________________________
Condor-users mailing list
To unsubscribe, send a message to condor-users-request@xxxxxxxxxxx with a
subject: Unsubscribe
You can also unsubscribe by visiting
https://lists.cs.wisc.edu/mailman/listinfo/condor-users

The archives can be found at:
https://lists.cs.wisc.edu/archive/condor-users/

-- 
Try not to become a man of success but rather to become a man of value. (Albert Einstein)