Re: [HTCondor-users] dirty AFS hook stuff?

[Zachary Miller <zmiller@xxxxxxxxxxx>]

On Mon, Nov 11, 2013 at 01:10:01PM -0500, Rich Pieri wrote:
> If I interpret the security section of the Condor manual correctly then
> this isn't true at all. What Condor calls authentication is not
> verification of a user's identity. It is verification of a user's
> permissions to use the pool's resources.

To clarify, there are two distinct steps:  Authentication and Authorization.

Condor does authenticate users identities, using a variety of mechanims
including Kerberos, GSI, SSL, and others.  These are specified in the
*_AUTHENTICATION_METHODS config entries.

Once the identity is established, authorization based on that identity is
done.  These are specified in the ALLOW_* (and DENY_*) config entries.


Cheers,
-zach