[HTCondor-users] condor_config_val stopped working after updating to 8.4.7

[mohammad kashif <kashif.alig@xxxxxxxxx>]

Hi Iain

Sorry for starting new thread. I was on digest mode and didn't receive your reply directly. I have changed my configuration so I should be able receive reply.

>>Just as a test to rule it out.

>>Could you run the following from the same node as the condor_config_val.

>> condor_ping -name <node-name> -type STARTD -table ALL

>>There should be a line starting with ADMINISTRATOR.

>>e.g.

>>ADMINISTRATORÂ Â Â Â Â Â GSIÂ Â Â Â3DESÂ Â Â ÂMD5Â Â ALLOW cm@xxxxxxxxxxxx

>>If the last column in that is unmapped or FAIL then you have a security/authorization
>>mis-configuration.

>>You should also see in the StartLog of the startd a message to say that it failed and it may give a >>reason.

>>You might need to enable D_SECURITY in STARTD_DEBUG.

condor_ping -name >node-name> -type STARTD -table ALL
ÂÂÂÂÂÂÂÂ Instruction Authentication Encryption Integrity Decision Identity
ÂÂÂÂÂÂÂÂÂÂÂÂÂÂ ALLOWÂÂÂÂÂÂ PASSWORDÂÂ BLOWFISHÂÂÂÂÂÂ MD5ÂÂÂ ALLOW condor_pool@phy*
ÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂ READÂÂÂÂÂÂ PASSWORDÂÂ BLOWFISHÂÂÂÂÂÂ MD5ÂÂÂ ALLOW condor_pool@phy*
ÂÂÂÂÂÂÂÂÂÂÂÂÂÂ WRITEÂÂÂÂÂÂ PASSWORDÂÂ BLOWFISHÂÂÂÂÂÂ MD5ÂÂÂ ALLOW condor_pool@phy*
ÂÂÂÂÂÂÂÂÂ NEGOTIATORÂÂÂÂÂÂ PASSWORDÂÂ BLOWFISHÂÂÂÂÂÂ MD5ÂÂÂ ALLOW condor_pool@phy*
ÂÂÂÂÂÂ ADMINISTRATORÂÂÂÂÂÂ PASSWORDÂÂ BLOWFISHÂÂÂÂÂÂ MD5ÂÂÂ ALLOW condor_pool@phy*
ÂÂÂÂÂÂÂÂÂÂÂÂÂÂ OWNERÂÂÂÂÂÂÂÂÂÂ FAILÂÂÂÂÂÂ FAILÂÂÂÂÂ FAILÂÂÂÂ FAIL FAILÂ (use -verbose for more info)
ÂÂÂÂÂÂÂÂÂÂÂÂÂ CONFIGÂÂÂÂÂÂÂÂÂÂ FAILÂÂÂÂÂÂ FAILÂÂÂÂÂ FAILÂÂÂÂ FAIL FAILÂ (use -verbose for more info)
ÂÂÂÂÂÂÂÂÂÂÂÂÂ DAEMONÂÂÂÂÂÂ PASSWORDÂÂ BLOWFISHÂÂÂÂÂÂ MD5ÂÂÂ ALLOW condor_pool@phy*
ÂÂÂ ADVERTISE_STARTDÂÂÂÂÂÂ PASSWORDÂÂ BLOWFISHÂÂÂÂÂÂ MD5ÂÂÂ ALLOW condor_pool@phy*
ÂÂÂ ADVERTISE_SCHEDDÂÂÂÂÂÂ PASSWORDÂÂ BLOWFISHÂÂÂÂÂÂ MD5ÂÂÂ ALLOW condor_pool@phy*
ÂÂÂ ADVERTISE_MASTERÂÂÂÂÂÂ PASSWORDÂÂ BLOWFISHÂÂÂÂÂÂ MD5ÂÂÂ ALLOW condor_pool@phy*

Authentication seems to be OK in startd log file

08/09/16 13:42:35 AUTHENTICATE: Result of end of authenticate is 1.
08/09/16 13:42:35 DC_AUTHENTICATE: authentication of 163.1.5.51 complete.
08/09/16 13:42:35 DC_AUTHENTICATE: message authenticator enabled with key id t2wn10:4043196:1470746555:1.
08/09/16 13:42:35 DC_AUTHENTICATE: encryption enabled for session t2wn10:4043196:1470746555:1
08/09/16 13:42:35 DC_AUTHENTICATE: Success.
08/09/16 13:42:35 PERMISSION GRANTED to condor_pool@phy* from host 163.1.5.51 for command 60002 (DC_CONFIG_PERSIST), access level ALLOW: reason:
08/09/16 13:42:35 DC_AUTHENTICATE: added incoming session id t2wn10:4043196:1470746555:1 to cache for 80 seconds (lease is 3620s, return address is unknown).
08/09/16 13:42:35 WARNING: Someone at 163.1.5.51 is trying to modify "StartJobs"
08/09/16 13:42:35 WARNING: Potential security problem, request refused

Same configuration works on pool nodes with condor 8.4.4

Thanks

Kashif

Cheers, Iain