Re: [HTCondor-users] Problems with submit node in version 8.6.0

[Greg.Hitchen@xxxxxxxx]

More issues with 8.6.0

I cannot submit/run jobs because "condor_store_cred add" fails, with the same errors in the log file:

>condor_store_cred add
Account: hit023@NEXUS

Enter password:

Operation failed.
    Make sure your ALLOW_WRITE setting includes this host.

02/02/17 14:52:01 SharedPortEndpoint: Entered DoListenerAccept Win32 path.
02/02/17 14:52:01 Calling Handler <DaemonCommandProtocol::WaitForSocketData> (4)
02/02/17 14:52:01 AUTHENTICATE: handshake failed!
02/02/17 14:52:01 DC_AUTHENTICATE: Our security policy is invalid!
02/02/17 14:52:01 Return from Handler <DaemonCommandProtocol::WaitForSocketData> 0.000192s

So I think this really is a bug and not a gotcha that needs a mention in the docs.

Is there any workaround for this problem?

Cheers

Greg


-----Original Message-----
From: HTCondor-users [mailto:htcondor-users-bounces@xxxxxxxxxxx] On Behalf Of Greg.Hitchen@xxxxxxxx
Sent: Thursday, 2 February 2017 10:26 AM
To: htcondor-users@xxxxxxxxxxx
Subject: [ExternalEmail] Re: [HTCondor-users] Problems with submit node in version 8.6.0

Just confirming that using "condor_q -allusers" works fine (or set CONDOR_Q_ONLY_MY_JOBS = False)
if you want the old behaviour of seeing everyone's jobs.

condor_q -nobatch if you want the old style condor_q listing (or set CONDOR_Q_DASH_BATCH_IS_DEFAULT = False)

This by itself still gives an error message so if you want everything the same as the old condor_q then

condor_q -nobatch -allusers

(or set both CONDOR_Q_ONLY_MY_JOBS and CONDOR_Q_DASH_BATCH_IS_DEFAULT to false)

I should also mention that specifying a username works just fine, e.g.

condor_q fred@machine

Cheers

Greg

-----Original Message-----
From: HTCondor-users [mailto:htcondor-users-bounces@xxxxxxxxxxx] On Behalf Of Zach Miller
Sent: Thursday, 2 February 2017 2:34 AM
To: HTCondor-Users Mail List <htcondor-users@xxxxxxxxxxx>
Subject: Re: [HTCondor-users] Problems with submit node in version 8.6.0

> -----Original Message-----
> From: HTCondor-users [mailto:htcondor-users-bounces@xxxxxxxxxxx] On Behalf
> Of Todd Tannenbaum
> Sent: Wednesday, February 01, 2017 11:35 AM
> To: HTCondor-Users Mail List <htcondor-users@xxxxxxxxxxx>
> Subject: Re: [HTCondor-users] Problems with submit node in version 8.6.0
> 
> So if you want, you can have condor_q do the "-allusers" flag behavior
> by default by placing the following into your condor_config file:
> 
>    CONDOR_Q_ONLY_MY_JOBS = False

This is indeed the correct fix.

When that is set to False (or you specify -allusers on the command line) condor_q actually uses the older wire-protocol which is perfectly compatible with setting SEC_DEFAULT_NEGOTIATION = NEVER.

We'll update the Release Notes to reflect this little gotcha for upgrading to 8.6.  Thanks for the report.


Cheers,
-zach

_______________________________________________
HTCondor-users mailing list
To unsubscribe, send a message to htcondor-users-request@xxxxxxxxxxx with a
subject: Unsubscribe
You can also unsubscribe by visiting
https://lists.cs.wisc.edu/mailman/listinfo/htcondor-users

The archives can be found at:
https://lists.cs.wisc.edu/archive/htcondor-users/
_______________________________________________
HTCondor-users mailing list
To unsubscribe, send a message to htcondor-users-request@xxxxxxxxxxx with a
subject: Unsubscribe
You can also unsubscribe by visiting
https://lists.cs.wisc.edu/mailman/listinfo/htcondor-users

The archives can be found at:
https://lists.cs.wisc.edu/archive/htcondor-users/