Re: [HTCondor-users] startd doesn't start

[Alessandra Forti <Alessandra.Forti@xxxxxxx>]

In the 8.4.11 version has errors too looking at it, but somehow it still works

03/18/17 20:41:54 ERROR: Attempt to initialize user_priv with root privileges rejected
03/18/17 20:41:54 set_user_egid() called when UserIds not inited!
03/18/17 20:41:54 set_user_euid() called when UserIds not inited!
03/18/17 20:41:54 Create_Process(/usr/libexec/condor/condor_kflops): child failed because PRIV_USER_FINAL process was still root before exec()

On 18/03/2017 20:29, Alessandra Forti wrote:

Hi Greg,

thanks for your reply. We don't have LDAP/NIS the users are local to the grid cluster. Puppet creates a condor user as well. CONDOR_IDS is set to 0.0. in both the 8.4.11 and 8.6.1 installation. I did enable D_FULLDEBUG but I cannot find any information about whatever user is used other than

03/18/17 20:23:47 Running as root.  Enabling specialized core dump routines
03/18/17 20:23:47 Daemon Log is logging: D_FULLDEBUG D_ALWAYS D_ERROR D_COMMAND

and then eventually the error reported.

cheers
alessandra

On 18/03/2017 16:11, Greg Thain wrote:

On 03/17/2017 04:28 AM, Alessandra Forti wrote:

In the StartLog files I have this error

03/17/17 08:20:35 ERROR: Attempt to initialize user_priv with root privileges rejected
03/17/17 08:20:35 ERROR "Programmer Error: attempted switch to user privilege, but user ids are not initialized" at line 1500 in file

When started as root, the startd spends most of it's runtime as a non-root user, for security reasons.  In those places where it needs root, it will setuid back to root temporarily, but then switch back to a non-root uid.

This error says that the startd is trying to switch effective user id to some non-root user, but the numeric id (or gid) of that non-root user is zero, which is clearly an error, and rather than run with improperly elevated privileges, the startd aborts.

So, it would be useful to know which user it is trying to run as, which a bit more of the log above this, especially running the startd with D_FULLDEBUG will show.  Also, the values of the config setting CONDOR_IDS may be involved.  This error can be caused if you are getting your passwd file entries from NIS or LDAP, and somehow the startd didn't load that library or configuration.

-greg

_______________________________________________
HTCondor-users mailing list
To unsubscribe, send a message to htcondor-users-request@xxxxxxxxxxx with a
subject: Unsubscribe
You can also unsubscribe by visiting
https://lists.cs.wisc.edu/mailman/listinfo/htcondor-users

The archives can be found at:
https://lists.cs.wisc.edu/archive/htcondor-users/

-- 
Respect is a rational process. \\//
Fatti non foste a viver come bruti, ma per seguir virtute e canoscenza(Dante)
For Ur-Fascism, disagreement is treason. (U. Eco)
But but but her emails... (Anonymous)

_______________________________________________
HTCondor-users mailing list
To unsubscribe, send a message to htcondor-users-request@xxxxxxxxxxx with a
subject: Unsubscribe
You can also unsubscribe by visiting
https://lists.cs.wisc.edu/mailman/listinfo/htcondor-users

The archives can be found at:
https://lists.cs.wisc.edu/archive/htcondor-users/

-- 
Respect is a rational process. \\//
Fatti non foste a viver come bruti, ma per seguir virtute e canoscenza(Dante)
For Ur-Fascism, disagreement is treason. (U. Eco)
But but but her emails... (Anonymous)