Re: [HTCondor-users] CREDMON errors and SEC_CREDENTIAL_DIRECTORY

[Iain Bradford Steers <iain.steers@xxxxxxx>]

Hi Carles,

The SEC_CREDENTIAL stuff is for secure storage and forwarding of kerberos credentials for users.

Just ignore it for now, remove the extra settings you've put in. I suspect the part of the schedd checking and logging those isn't 
checking whether they are being used or not.

Cheers, Iain

________________________________________
From: HTCondor-users [htcondor-users-bounces@xxxxxxxxxxx] on behalf of Carles Acosta [cacosta@xxxxxx]
Sent: 07 September 2016 10:12
To: htcondor-users@xxxxxxxxxxx
Subject: [HTCondor-users] CREDMON errors and SEC_CREDENTIAL_DIRECTORY

Dear all,

I'm testing HTcondor-CE with HTcondor (8.5.5-1). Users submit jobs with
their proxy, they are mapped to a local user and routed by htcondor-CE
to the condor schedd. Everything is working fine. However, in the
SchedLogs for condor-ce and condor, I see several warnings, for instance:

ZKM: creating mark file for user dteam004
CREDMON: ERROR: got mark_creds_for_sweeping but SEC_CREDENTIAL_DIRECTORY
not defined!

But, as I've said, everything is working.

I've been searching in htcondor manual and htcondor-ce wikis and it's
not clear for me what the SEC_CREDENTIAL_DIRECTORY is. I found somewhere
that it's related with kerberos usage, but I don't use kerberos (the
HTcondor pool is based in PASSWORD authentication).

So, I added in htcondor and htcondor-ce configurations a path to
SEC_CREDENTIAL_DIRECTORY and reloaded the daemons. Marks were created in
credential directory:

# ls -lrth /var/lib/condor/credential/
total 0
-rw------- 1 root root 0 Sep  6 17:35 dteam004.mark

But then, after restarting the condor and condor-ce schedds, they
started to fail:

[...]
09/07/16 09:11:25 SCHEDD: User credentials not up-to-date.  Start-up
delayed.  Waiting 10 seconds and trying 60 more times.
09/07/16 09:11:55 CREDMON: FAILURE: credmon never created
/var/lib/condor-ce/credentials/CREDMON_COMPLETE after 20 seconds!
[...]

Thus, my question is what is the SEC_CREDENTIAL_DIRECTORY? Do I really
need it?

Cheers,

Carles

--
Carles Acosta i Silva
PIC (Port d'Informació Científica)
Campus UAB, Edifici D
E-08193 Bellaterra, Barcelona
Tel: +34 93 581 33 22
Fax: +34 93 581 41 10
http://www.pic.es
Avís - Aviso - Legal Notice:http://www.ifae.es/legal.html

_______________________________________________
HTCondor-users mailing list
To unsubscribe, send a message to htcondor-users-request@xxxxxxxxxxx with a
subject: Unsubscribe
You can also unsubscribe by visiting
https://lists.cs.wisc.edu/mailman/listinfo/htcondor-users

The archives can be found at:
https://lists.cs.wisc.edu/archive/htcondor-users/