Re: [HTCondor-users] Remapping users between SCHEDD and STARTD

[John M Knoeller <johnkn@xxxxxxxxxxx>]

No.  You cannot do arbitrary remapping of user between schedd and startd.  You can configure a startd to use what we call a ‘slot user’  when running a job.   

 

On Linux/Unix,  HTCondor will attempt to run the jobs on the startd as the submitting user.  It will do this when STARTD_ALLOW_RUN_AS_OWNER is configured to be true (it defaults to true on Linux/Unix).  And when the UID_DOMAIN of the startd is the same as the UID_DOMAIN of the schedd, or when the STARTD is configured to ignore the value of UID_DOMAIN.

 

When the startd is running the job as the submitting user, it will use the Owner attribute of the job as the name of the user to run as.  And this attribute *cannot be changed* after the job is submitted. 

 

However.   You *can* configure a startd to ignore the Owner attribute of the job and run all jobs as a user defined in the startd configuration.   It is up to you to create this user accounts, and then to configure the SLOT<n>_USER for each slot.

 

see

http://research.cs.wisc.edu/htcondor/manual/v8.6/3_8Security.html#sec:RunAsNobody

for more information.

 

From: HTCondor-users <htcondor-users-bounces@xxxxxxxxxxx> On Behalf Of Koschmieder, Lukas
Sent: Tuesday, October 2, 2018 7:08 AM
To: HTCondor-Users Mail List <htcondor-users@xxxxxxxxxxx>
Subject: [HTCondor-users] Remapping users between SCHEDD and STARTD

 

Hi,

Is it possible to remap users between SCHEDD and STARTD?

Example:
Bob submits a jobs to a local scheduler. An execute node runs Bob's job as a local user Alice.

On the one hand, this example seems like a common scenario. But on the other hand, the following manual excerpt implies that it's not possible to have that kind of setup...

"If the $(UID_DOMAIN) on the submitting machine is different than the $(UID_DOMAIN) on the machine that runs a job, then HTCondor runs the job as the user nobody. (...)
If the $(UID_DOMAIN) is the same on both the submit and execute machines, then HTCondor will run the job as the user that submitted the job."

Cheers,
Lukas

 

--
Lukas Koschmieder
Steel Institute IEHK
RWTH Aachen University
Intzestraße 1
52072 Aachen
Germany

Tel: +49 (0)241 80 95823
Fax: +49 (0)241 80 92253
lukas.koschmieder@xxxxxxxxxxxxxxxxxxx