[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Condor-users] Setting up credd in Windows



I'm still stuck with this!

I've got condor running on a central server. I've copied c:\condor\etc\condor_config.local.credd to c:\condor\condor_config.local and made the following changes:

   CREDD_HOST = myhostname.cc.ic.ac.uk
   ALLOW_CONFIG = user1@*, user2@*

On a test submission machine I've got c:\condor\condor_config.local containing:

   CREDD_HOST = myhostname.cc.ic.ac.uk
   CREDD_CACHE_LOCALLY = True
   
   STARTER_ALLOW_RUNAS_OWNER = True
   
   HOSTALLOW_CONFIG = $(HOSTALLOW_ADMINISTRATOR)
   ALLOW_CONFIG = user1@*, user2@*
   SEC_CLIENT_AUTHENTICATION_METHODS = NTSSPI, PASSWORD
   SEC_CONFIG_NEGOTIATION = REQUIRED
   SEC_CONFIG_AUTHENTICATION = REQUIRED
   SEC_CONFIG_ENCRYPTION = REQUIRED
   SEC_CONFIG_INTEGRITY = REQUIRED

(user1 and user2 are both domain accounts available on the server and submission machine; both have admin rights on both machines)

I've logged on as user1 on the machine running credd and run condor_store_cred add -c; I enter a password when prompted and it appears to be accepted. I then try to run condor_store_cred add -c -n myworkstation.ma.ic.ac.uk and get the following error:

Account: condor_pool@xxxxxxxxxxxxxxxxxxxxxx

Operation failed.
    Make sure you have CONFIG access to the target Master.

What have I missed? Why does it say "account: condor_pool" rather than showing my username?

I did find a message on the list which suggested I need to stop/start the condor services so I've also done that but it doesn't help.

I've turned on debug logging for credd and this appears in credd.log

07/13/11 11:45:03 getStoredCredential(): Could not locate credential for user 'condor_pool@xxxxxxxxxxxxxxxxxxxxxx'
07/13/11 11:45:03 Found credential for user 'condor_pool@xxxxxxxxxxxxxxxxxxxxxx'
07/13/11 11:45:23 condor_read(): timeout reading 5 bytes from <155.198.xx.yy:50580>.
07/13/11 11:45:23 IO: Failed to read packet header
07/13/11 11:45:23 AUTHENTICATE: handshake failed!
07/13/11 11:45:23 DC_AUTHENTICATE: required authentication of 155.198.xx.yy failed: AUTHENTICATE:1002:Failure performing handshake|AUTHENTICATE:1004:Failed to authenticate using PASSWORD

Steve