Re: [HTCondor-users] Problems with submit node in version 8.6.0

[Greg.Hitchen@xxxxxxxx]

As I mentioned in my first email, if I do a clean install of 8.6.0 from the msi installer file and choose
host based security then condor_q (and condor_store_cred add) works fine.

I've finally tracked down the config file statement causing the issue.

If you are doing Host Based Security then DO NOT set:

SEC_DEFAULT_AUTHENTICATION = NEVER

or you will get an error using condor_q. You MUST set:

SEC_DEFAULT_AUTHENTICATION = OPTIONAL

or DO NOT SPECIFY IT AT ALL.

Cheers

Greg

-----Original Message-----
From: HTCondor-users [mailto:htcondor-users-bounces@xxxxxxxxxxx] On Behalf Of Greg.Hitchen@xxxxxxxx
Sent: Thursday, 2 February 2017 10:26 AM
To: htcondor-users@xxxxxxxxxxx
Subject: [ExternalEmail] Re: [HTCondor-users] Problems with submit node in version 8.6.0

Just confirming that using "condor_q -allusers" works fine (or set CONDOR_Q_ONLY_MY_JOBS = False)
if you want the old behaviour of seeing everyone's jobs.

condor_q -nobatch if you want the old style condor_q listing (or set CONDOR_Q_DASH_BATCH_IS_DEFAULT = False)

This by itself still gives an error message so if you want everything the same as the old condor_q then

condor_q -nobatch -allusers

(or set both CONDOR_Q_ONLY_MY_JOBS and CONDOR_Q_DASH_BATCH_IS_DEFAULT to false)

I should also mention that specifying a username works just fine, e.g.

condor_q fred@machine

Cheers

Greg

-----Original Message-----
From: HTCondor-users [mailto:htcondor-users-bounces@xxxxxxxxxxx] On Behalf Of Zach Miller
Sent: Thursday, 2 February 2017 2:34 AM
To: HTCondor-Users Mail List <htcondor-users@xxxxxxxxxxx>
Subject: Re: [HTCondor-users] Problems with submit node in version 8.6.0

> -----Original Message-----
> From: HTCondor-users [mailto:htcondor-users-bounces@xxxxxxxxxxx] On Behalf
> Of Todd Tannenbaum
> Sent: Wednesday, February 01, 2017 11:35 AM
> To: HTCondor-Users Mail List <htcondor-users@xxxxxxxxxxx>
> Subject: Re: [HTCondor-users] Problems with submit node in version 8.6.0
> 
> So if you want, you can have condor_q do the "-allusers" flag behavior
> by default by placing the following into your condor_config file:
> 
>    CONDOR_Q_ONLY_MY_JOBS = False

This is indeed the correct fix.

When that is set to False (or you specify -allusers on the command line) condor_q actually uses the older wire-protocol which is perfectly compatible with setting SEC_DEFAULT_NEGOTIATION = NEVER.

We'll update the Release Notes to reflect this little gotcha for upgrading to 8.6.  Thanks for the report.


Cheers,
-zach

_______________________________________________
HTCondor-users mailing list
To unsubscribe, send a message to htcondor-users-request@xxxxxxxxxxx with a
subject: Unsubscribe
You can also unsubscribe by visiting
https://lists.cs.wisc.edu/mailman/listinfo/htcondor-users

The archives can be found at:
https://lists.cs.wisc.edu/archive/htcondor-users/
_______________________________________________
HTCondor-users mailing list
To unsubscribe, send a message to htcondor-users-request@xxxxxxxxxxx with a
subject: Unsubscribe
You can also unsubscribe by visiting
https://lists.cs.wisc.edu/mailman/listinfo/htcondor-users

The archives can be found at:
https://lists.cs.wisc.edu/archive/htcondor-users/