Hello,
I think what you want is to check out "QUEUE_SUPER_USERS" unless I'm missing something about your setup:
http://research.cs.wisc.edu/htcondor/manual/v8.9/ConfigurationMacros.html#dx33-196135
QUEUE_SUPER_USERS can manipulate any job in the queue. By default "condor" is already a queue super user so if you use the map file to map a specific GSI cert DN to "condor" that should do what you want.
Or, if you want to map your GSI cert to some other specific unix user (e.g. "colsuper") and add that specific user to the QUEUE_SUPER_USERS and I think you'll be all set:
QUEUE_SUPER_USERS = root, condor, colsuper
Cheers,
-zach
ïOn 4/5/19, 11:18 AM, "HTCondor-users on behalf of Colson Driemel" <htcondor-users-bounces@xxxxxxxxxxx on behalf of colsond@xxxxxxx> wrote:
Hi all,
I'm trying to set up a super user of sorts that will be able to remotely
perform actions like holding or editing the classad of jobs.
I've been sifting through the condor configuration options listed in the
security section
(https://research.cs.wisc.edu/htcondor/manual/v8.4/3_6Security.html) but
nothing I've tried seems to get the results I'm after.
Is anyone familiar with a configuration that would work for this use
case? As another note I'm using GSI authentication via certificate proxies.
-Colson
_______________________________________________
HTCondor-users mailing list
To unsubscribe, send a message to htcondor-users-request@xxxxxxxxxxx with a
subject: Unsubscribe
You can also unsubscribe by visiting
https://lists.cs.wisc.edu/mailman/listinfo/htcondor-users
The archives can be found at:
https://lists.cs.wisc.edu/archive/htcondor-users/
_______________________________________________
HTCondor-users mailing list
To unsubscribe, send a message to htcondor-users-request@xxxxxxxxxxx with a
subject: Unsubscribe
You can also unsubscribe by visiting
https://lists.cs.wisc.edu/mailman/listinfo/htcondor-users
The archives can be found at:
https://lists.cs.wisc.edu/archive/htcondor-users/