[HTCondor-users] host based authentication for condor_submit -remote

[Alexei Dvoretskii <advoretskii@xxxxxxxxxxxxxxxxxx>]

Hi.

 

Is there an easy way to configure HTCondor to allow user.mycompany.com to submit jobs to the schedd running on submit.mycompany.com?

When I run:

 

[user] $ condor_submit -pool master.mycompany.com -remote submit.mycompany.com job.submit

 

I get something like:

ERROR: Failed to connect to queue manager submit.companyname.com AUTHENTICATE:1003:Failed to authenticate with any method AUTHENTICATE:1004:Failed to authenticate using GSI GSI:5003:Failed to authenticate.  Globus is reporting error (851968:50).  There is probably a problem with your credentials. (Did you run grid-proxy-init?) AUTHENTICATE:1004:Failed to authenticate using KERBEROS AUTHENTICATE:1004:Failed to authenticate using FS

 

/etc/condor/condor_config on submit.mycompany.com has:

 

ALLOW_READ = *.mycompany.com

ALLOW_WRITE = *.mycompany.com

 

is there some other kind of ALLOW_ parameter that needs to be set? Or is it that host-based security must always go with some kind of certificate based authentication scheme?

 

Thank you.

 

Alexei.