Re: [HTCondor-users] Change JobOwner in Python

[dario.rodriguez@xxxxxxxxxxxx]

Hi Folks, 

For security and to simplify the user management, we are using processing users in our condor pool, on which we map the user to a  proc-user. We are doing this using the condor_mapfile.

It means that the user that is working for several projects can configure the submit file with the corresponding proc-user by setting the "+Owner" in the submit file. This works for standard job submitsions

We would like to keep this possibility even when the user submits from the IPython (docker container) on which we have developed our own API to interact with Condor.

It is possible to add this possibility to the HTCondor module of Python? Or some working around to set the ownership of the job?

Note: we have external users accessing our platform using just the IPyhton notebook and they don't have the possibility to ssh to the Submit node.  Furthermore, the IPython container is configured as a remote submit node and it is not in the same host of the schedd. 

Message: 2
Date: Sun, 19 Apr 2020 20:17:16 +0000
From: "Bockelman, Brian" <BBockelman@xxxxxxxxxxxxx>
To: HTCondor-Users Mail List <htcondor-users@xxxxxxxxxxx>
Subject: Re: [HTCondor-users] Change JobOwner in Python
Message-ID: <AD90472D-3D7F-441C-A3F7-6979FDE1D7C5@xxxxxxxxxxxxx>
Content-Type: text/plain; charset="utf-8"

Hi Dario,

The job owner is an immutable attribute by default and cannot be changed after set. See  IMMUTABLE_JOB_ATTRS and SYSTEM_IMMUTABLE_JOB_ATTRS:

https://urldefense.com/v3/__https://htcondor.readthedocs.io/en/latest/admin-manual/configuration-macros.html__;!!DOxrgLBm!UKBa_nNj62FUA3tRrhmE6pF_VtzDXr4-GtXPOJvIIvhv6xyZ2kd3NshOJVTuZA2X5HDiP-RG$

You will need to change these at the admin level.  Note: haven?t tested this myself but it?s possible there are other internal safeguards to changing the attribute.

What?s the use case?  I?d worry about things like file ownership getting confused if the Owner attribute suddenly changes in the middle of a job.

Brian

Sent from my iPad