Re: [Condor-users] A little security -- we don't want too much though

[Zachary Miller <zmiller@xxxxxxxxxxx>]

On Wed, May 25, 2011 at 11:11:49AM +0000, Ian Cottam wrote:
> Many thanks - will give it a go!
> -Ian
> ps: I thought I'd already tried this
> but some machines that can flock to our pool
> were still showing up. I may have made a mistake,
> so will try again.

this is checked when a machine advertises to your collector.  if the schedd
was already there, it may take a while to time out and disappear.  new updates
from the flocked schedd should be refused however.

perhaps restart your collector if that's an option to get a clean slate?

if it's not working as expected, take a look at your collector log.  you can
also enable:
  COLLECTOR_DEBUG = D_FULLDEBUG

and you will get a dump of the allow/deny settings when the collector starts
up.  feel free to send this log to me or to condor-admin if you'd like us to
take a look.


cheers,
-zach