Mailing List ArchivesAuthenticated access |
![[Computer Systems Lab]](http://www.cs.wisc.edu/pics/csl_logo.gif){kind=logo}
|
Mailing List ArchivesAuthenticated access |
|
|
Hi, I am trying to test some security settings on a single computer running condor. I have put these settings into the local configuration file: HOSTALLOW_WRITE = * HOSTALLOW_READ = * ALLOW_READ = * ALLOW_WRITE = * SEC_DEFAULT_AUTHENTICATION = OPTIONAL SEC_DEFAULT_INTEGRITY = OPTIONAL SEC_DEFAULT_ENCRYPTION = OPTIONAL SEC_PASSWORD_FILE = /var/lib/condor/log/pool_password SEC_DAEMON_AUTHENTICATION = REQUIRED SEC_DAEMON_INTEGRITY = REQUIRED SEC_DAEMON_AUTHENTICATION_METHODS = PASSWORD, FS, CLAIMTOBE SEC_NEGOTIATOR_AUTHENTICATION = REQUIRED SEC_NEGOTIATOR_INTEGRITY = REQUIRED SEC_NEGOTIATOR_AUTHENTICATION_METHODS = PASSWORD, FS, CLAIMTOBE SEC_CLIENT_AUTHENTICATION_METHODS = CLAIMTOBE ALLOW_CONFIG = * ALLOW_DAEMON = * ALLOW_NEGOTIATOR = * I have created the password file /var/lib/condor/log/pool_password When I try to run condor_status, it says: CEDAR:6001:Failed to connect to <127.0.1.1:9618> Error: Couldn't contact the condor_collector on ......... The end of the MasterLog contains: 1/18 15:30:53 IO: Failed to compute Message Digest/MAC 1/18 15:30:53 IO: Failed to compute Message Digest/MAC 1/18 15:30:58 IO: Failed to compute Message Digest/MAC 1/18 15:30:58 IO: Failed to compute Message Digest/MAC 1/18 15:30:58 condor_read(): recv() returned -1, errno = 104, assuming failure reading 5 bytes from unknown source. 1/18 15:30:58 IO: Failed to read packet header 1/18 15:30:58 attempt to connect to <127.0.1.1:9618> failed: Connection refused (connect errno = 111). 1/18 15:30:58 ERROR: SECMAN:2004:Was waiting for TCP auth session to <127.0.1.1:9618>, but it failed. 1/18 15:30:58 Failed to start non-blocking update to <127.0.1.1:9618>. 1/18 15:30:58 ERROR: SECMAN:2004:Was waiting for TCP auth session to <127.0.1.1:9618>, but it failed. 1/18 15:30:58 Failed to start non-blocking update to <127.0.1.1:9618>. 1/18 15:30:58 ERROR: SECMAN:2004:Failed to create security session to <127.0.1.1:9618> with TCP.|SECMAN:2003:TCP connection to <127.0.1.1:9618> failed. 1/18 15:30:58 Failed to start non-blocking update to <127.0.1.1:9618>. 1/18 15:30:58 The COLLECTOR (pid 4392) exited with status 4 1/18 15:30:58 restarting /usr/sbin/condor_collector in 521 seconds 1/18 15:30:58 attempt to connect to <127.0.1.1:9618> failed: Connection refused (connect errno = 111). 1/18 15:30:58 ERROR: SECMAN:2004:Failed to create security session to <127.0.1.1:9618> with TCP.|SECMAN:2003:TCP connection to <127.0.1.1:9618> failed. 1/18 15:30:58 Failed to start non-blocking update to <127.0.1.1:9618>. 1/18 15:30:58 IO: Failed to compute Message Digest/MAC 1/18 15:30:58 IO: Failed to compute Message Digest/MAC 1/18 15:30:58 The NEGOTIATOR (pid 4393) exited with status 4 1/18 15:30:58 restarting /usr/sbin/condor_negotiator in 521 seconds 1/18 15:30:58 attempt to connect to <127.0.1.1:9618> failed: Connection refused (connect errno = 111). 1/18 15:30:58 IO: Failed to compute Message Digest/MAC 1/18 15:30:58 IO: Failed to compute Message Digest/MAC 1/18 15:30:58 ERROR: SECMAN:2004:Failed to create security session to <127.0.1.1:9618> with TCP.|SECMAN:2003:TCP connection to <127.0.1.1:9618> failed. 1/18 15:30:58 Failed to start non-blocking update to <127.0.1.1:9618>. 1/18 15:30:58 The SCHEDD (pid 4394) exited with status 4 1/18 15:30:59 restarting /usr/sbin/condor_schedd in 521 seconds 1/18 15:30:59 attempt to connect to <127.0.1.1:9618> failed: Connection refused (connect errno = 111). 1/18 15:30:59 ERROR: SECMAN:2004:Failed to create security session to <127.0.1.1:9618> with TCP.|SECMAN:2003:TCP connection to <127.0.1.1:9618> failed. 1/18 15:30:59 Failed to start non-blocking update to <127.0.1.1:9618>. 1/18 15:31:15 Started DaemonCore process "/usr/sbin/condor_startd", pid and pgroup = 4401 1/18 15:31:15 attempt to connect to <127.0.1.1:9618> failed: Connection refused (connect errno = 111). 1/18 15:31:15 ERROR: SECMAN:2004:Failed to create security session to <127.0.1.1:9618> with TCP.|SECMAN:2003:TCP connection to <127.0.1.1:9618> failed. 1/18 15:31:15 Failed to start non-blocking update to <127.0.1.1:9618>. 1/18 15:31:20 IO: Failed to compute Message Digest/MAC 1/18 15:31:20 IO: Failed to compute Message Digest/MAC 1/18 15:31:25 IO: Failed to compute Message Digest/MAC 1/18 15:31:25 IO: Failed to compute Message Digest/MAC 1/18 15:31:31 IO: Failed to compute Message Digest/MAC 1/18 15:31:31 IO: Failed to compute Message Digest/MAC 1/18 15:31:31 The STARTD (pid 4401) exited with status 0 1/18 15:31:31 restarting /usr/sbin/condor_startd in 521 seconds 1/18 15:31:31 attempt to connect to <127.0.1.1:9618> failed: Connection refused (connect errno = 111). 1/18 15:31:31 ERROR: SECMAN:2004:Failed to create security session to <127.0.1.1:9618> with TCP.|SECMAN:2003:TCP connection to <127.0.1.1:9618> failed. 1/18 15:31:31 Failed to start non-blocking update to <127.0.1.1:9618>. Can someone give me any advice on how to get the password security working, and md5 integrity. Thanks, Joe Download the new Windows Live Looking for a place to manage all your online stuff? |