Re: [HTCondor-users] Issue Getting Apache to Submit Condor Job

[Todd Tannenbaum <tannenba@xxxxxxxxxxx>]

On 4/1/2016 9:58 AM, Iain Bradford Steers wrote:
> In particular I notice this error line:
>
> globus_sysconfig: File does not exist: /tmp/x509up_u0 is not a valid file
>
> Are you specifying a specific proxy file in your submit files or just
> 'use_x509userproxy'
>
> Thanks,
>
> Iain

In addition to wisdom from Iain and Brian, the above proxy name implies 
to me that condor_submit is being run as root (uid 0), not as the Apache 
user as you say below. This is not a good idea and probably not what you 
wanted to do. Or perhaps the uid for the apache user on your system is 0 
(yikes!) ?

regards
Todd

> Recently we upgraded our server from RHEL6 to RHEL7 and I installed the
> newest stable version of HTCondor (8.4.5 from 8.0.6).  When submitting
> jobs through the terminal, everything works correctly.  However, when
> letting Drupal submit the jobs (as the Apache user), I get this error:
>
> 04/01/16 10:29:23 (pid:21220) authenticate_self_gss: acquiring self
> credentials failed. Please check your Condor configuration file if this
> is a server process. Or the user environment variable if this is a user
> process.
>
> GSS Major Status: General failure
> GSS Minor Status Error Chain:
> globus_gsi_gssapi: Error with GSI credential
> globus_gsi_gssapi: Error with gss credential handle
> globus_credential: Valid credentials could not be found in any of the
> possible locations specified by the credential search order.
> Valid credentials could not be found in any of the possible locations
> specified by the credential search order.
>
> Attempt 1
> globus_credential: Error reading host credential
> globus_sysconfig: Could not find a valid certificate file: The host cert
> could not be found in:
> 1) env. var. X509_USER_CERT
> 2) /etc/grid-security/hostcert.pem
> 3) $GLOBUS_LOCATION/etc/hostcert.pem
> 4) $HOME/.globus/hostcert.pem
>
> The host key could not be found in:
> 1) env. var. X509_USER_KEY
> 2) /etc/grid-security/hostkey.pem
> 3) $GLOBUS_LOCATION/etc/hostkey.pem
> 4) $HOME/.globus/hostkey.pem
>
> Attempt 2
> globus_credential: Error reading proxy credential
> globus_sysconfig: Could not find a valid proxy certificate file location
> globus_sysconfig: Error with key filename
> globus_sysconfig: File does not exist: /tmp/x509up_u0 is not a valid file
> Attempt 3
> globus_credential: Error reading user credential
> globus_sysconfig: Error with certificate filename: The user cert could
> not be found in:
> 1) env. var. X509_USER_CERT
> 2) $HOME/.globus/usercert.pem
> 3) $HOME/.globus/usercred.p12
>
>
>
> 04/01/16 10:29:23 (pid:21220) DC_AUTHENTICATE: authentication of
> <192.168.1.80:49952 <http://192.168.1.80:49952>> did not result in a
> valid mapped user name, which is required for this command (1112
> QMGMT_WRITE_CMD), so aborting.
> 04/01/16 10:29:23 (pid:21220) DC_AUTHENTICATE: reason for authentication
> failure: AUTHENTICATE:1003:Failed to authenticate with any
> method|AUTHENTICATE:1004:Failed to authenticate using
> GSI|GSI:5003:Failed to authenticate.  Globus is reporting error
> (851968:713). There is probably a problem with your credentials.  (Did
> you run grid-proxy-init?)|AUTHENTICATE:1004:Failed to authenticate using
> KERBEROS|AUTHENTICATE:1004:Failed to authenticate using
> FS|FS:1004:Unable to lstat(/tmp/FS_XXXMX9YKD)
>
>
> Also, I wanted to say that everything works fine in our RHEL6 server
> using HTCondor 8.0.6.  I have been searching to see if anyone else had a
> similar problem, but I was not able to find anything.  I really
> appreciate the help.
>
> Thank you,
> Antelmo
>
>
> _______________________________________________
> HTCondor-users mailing list
> To unsubscribe, send a message to htcondor-users-request@xxxxxxxxxxx with a
> subject: Unsubscribe
> You can also unsubscribe by visiting
> https://lists.cs.wisc.edu/mailman/listinfo/htcondor-users
>
> The archives can be found at:
> https://lists.cs.wisc.edu/archive/htcondor-users/


--
Todd Tannenbaum <tannenba@xxxxxxxxxxx> University of Wisconsin-Madison
Center for High Throughput Computing   Department of Computer Sciences
HTCondor Technical Lead                1210 W. Dayton St. Rm #4257
Phone: (608) 263-7132                  Madison, WI 53706-1685