On 1/12/2013 6:26 AM, Matthew Farrellee wrote:
I've had success with startd cron for advertising the contents of a cache, and highly recommend it over configuration changes.
As I understand startd cron, you configure your nodes to periodically run a script that publishes custom attributes, and the way a regular user would publish their custom attributes is by modifying the script. (Or am I missing something?)
The script runs as condor (root) user, so security-wise this is worse than letting them 'sudo condor-reconfig' as now they can run anything as condor.
Either way, my point was that doesn't work when you're shipping (flocking, gliding) jobs off-site and have no control over execute nodes whatsoever.
Dima