[HTCondor-users] Submitting and refreshing X509_USER_PROXY

["Koschmieder, Lukas" <Lukas.Koschmieder@xxxxxxxxxxxxxxxxxxx>]

Hi,

My scheduler and execute nodes are located in different networks. Therefore there is neither a shared filesystem nor a common UID domain available. All jobs have to run as nobody user.

I've enable GSI auth in Condor and set up two file servers that provide GSI auth support (Globus-GridFTP and XRootD). Now I'd like to enable Condor jobs to use the job owner's GSI credentials to access the GSI file servers. (The final goal is to dynamically auto-mount a user's XRootD working directory (input/output folder) on the execute nodes when a job starts - preferably inside the scratch directory.) I could use TRANSFER_INPUT_FILES to manually copy a user's local X509_USER_PROXY to the execute nodes and then use USER_JOB_WRAPPER to refresh that X509_USER_PROXY. I was wondering if there is a better / less hacky way to do that.

Best regards,
Lukas

--
Lukas Koschmieder
Steel Institute IEHK
RWTH Aachen University
Intzestraße 1
52072 Aachen
Germany