Re: [HTCondor-users] jobs getting run as nobody

[Marco Mambelli <marcom@xxxxxxxx>]

Hi Francisco,

reverse DNS (or /etc/hosts entries) are required for UID_DOMAIN to be honored.

You said that /etc/hosts is OK

Try anyway to set:

NO_DNS to True and

DEFAULT_DOMAIN_NAME to the same value in submit and worker

As they said

STARTER_ALLOW_RUNAS_OWNER = True  (in the startd config - should be the default on linux)

and

RunAsOwner = True (in the job ClassAd 

both affect running as owner instead of nobody.

Best,

Marco

On Feb 10, 2016, at 11:11 AM, Francisco Pereira <francisco.pereira@xxxxxxxxx> wrote:

Hi John,

Yes, STARTER_ALLOW_RUNAS_OWNER = TRUE on both submitter (head node) and executer sides (sorry for omitting this). I also checked that /etc/nsswitch.conf is giving priority to /etc/hosts in determining the domain name, just in case, although from the manual I thought specifying FILESYSTEM_DOMAIN would obviate the need for this.

thank you!

Francisco

On Wed, Feb 10, 2016 at 10:40 AM, John M Knoeller <johnkn@xxxxxxxxxxx> wrote:

Did You have

STARTER_ALLOW_RUNAS_OWNER = TRUE

On the execute side?

 

From: HTCondor-users [mailto:htcondor-users-bounces@xxxxxxxxxxx] On Behalf Of Francisco Pereira
Sent: Tuesday, February 9, 2016 7:31 PM
To: Condor-Users Mail List <condor-users@xxxxxxxxxxx>
Subject: [HTCondor-users] jobs getting run as nobody

 

hi,

 

I am trying to understand the circumstances in which a job will run as user "nobody", rather than the user that submitted the job, which we would prefer.

 

We have home directories mounted via NFS to all the machines in a small cluster, and the UIDs for users are the same across them. As suggested in the manual, I set

 

FILESYSTEM_DOMAIN = <our domain>

UID_DOMAIN = <our domain>

TRUST_UID_DOMAIN = TRUE

SOFT_UID_DOMAIN = TRUE

 

in the configuration files of both the submitting and executing machine. I then submit a job with a test script that has

 

run_as_owner = True

 

and gives us the output of `pwd`, `hostname` and `whoami`, which confirms that it runs as "nobody" in the correct machine.

 

What am I overlooking here?

 

thank you very much for any help!

Francisco

_______________________________________________
HTCondor-users mailing list
To unsubscribe, send a message to htcondor-users-request@xxxxxxxxxxx with a
subject: Unsubscribe
You can also unsubscribe by visiting
https://lists.cs.wisc.edu/mailman/listinfo/htcondor-users

The archives can be found at:
https://lists.cs.wisc.edu/archive/htcondor-users/

_______________________________________________
HTCondor-users mailing list
To unsubscribe, send a message to htcondor-users-request@xxxxxxxxxxx with a
subject: Unsubscribe
You can also unsubscribe by visiting
https://lists.cs.wisc.edu/mailman/listinfo/htcondor-users

The archives can be found at:
https://lists.cs.wisc.edu/archive/htcondor-users/