Re: [HTCondor-users] Using authentication

[Zachary Miller <zmiller@xxxxxxxxxxx>]

> Searching the local and general config files did not give me a clear idea of
> where the authentication methods were being set.   From the web documentation I
> tried to setup simple PASSWORD authentication. 

PASSWORD authentication is great for authenticating daemon-to-daemon
communication, but it can't (well, shouldn't) be used for authenticating
users and job submissions.

In your config:

> SEC_DEFAULT_AUTHENTICATION_METHODS = PASSWORD

...you are using PASSWORD for all communication.  My suggestion would be to
also add FS to the list for authenticating users:

	SEC_DEFAULT_AUTHENTICATION_METHODS = FS, PASSWORD
	SEC_PASSWORD_FILE = /etc/condor/pool
	SEC_DAEMON_AUTHENTICATION_METHODS = PASSWORD
	ALLOW_DAEMON = condor_pool@$(UID_DOMAIN)/*.my.domain, \
				   condor@$(UID_DOMAIN)/$(IP_ADDRESS)
	ALLOW_NEGOTIATOR = condor_pool@$(UID_DOMAIN)/oracle1.my.domain
	ALLOW_ADVERTISE_STARTD = condor_pool@$(UID_DOMAIN)/*.my.domain


Let me know if you are still having trouble with that configuration.


Cheers,
-zach