Re: [HTCondor-users] Accounting Groups

[christoph.beyer@xxxxxxx]

Hi,

you can use the map file to check if the user that submitted the job is in the group he claims to be in. If it turns out that the user did choose a group he is not a member of (according to your map file) you can send the job to hold with an according hold-reason like "wrong accounting group" or something similiar.

Of course you can omitt that if you trust your users or if you set the groups yourself on the sched.

Best

christoph

--
Christoph Beyer
DESY Hamburg
IT-Department

Notkestr. 85
Building 02b, Room 009
22607 Hamburg

phone:+49-(0)40-8998-2317
mail: christoph.beyer@xxxxxxx

---

Von: rmorgan466@xxxxxxxxx
An: "htcondor-users" <htcondor-users@xxxxxxxxxxx>
Gesendet: Donnerstag, 23. April 2020 23:34:41
Betreff: Re: [HTCondor-users] Accounting Groups

I was able to get further.  Thanks to this, https://indico.cern.ch/event/817927/contributions/3570542/attachments/1913668/3162964/ScheddTransforms.pdf

SCHEDD_CLASSAD_USER_MAP_NAMES = $(SCHEDD_CLASSAD_USER_MAP_NAMES) Groups 

CLASSAD_USER_MAPFILE_Groups = /path/to/mapfile 

JOB_TRANSFORM_NAMES = AssignGroup 

JOB_TRANSFORM_AssignGroup @=end 

[ copy_Owner="AcctGroupUser"; copy_AcctGroup="RequestedAcctGroup"; eval_set_AcctGroup=usermap("AssignGroup",AcctGroupUser,AcctGroup); ] 

@end

On my CM, I now have

GROUP_NAMES = AcctGroupUser

GROUP_QUOTA_AcctGroupUser_userA = 100

That should set userA quota to 100.

is this correct? Also, what is the purpose of the mapfile? I know it must exist but not sure why we need it. 

On Thu, Apr 23, 2020 at 12:40 PM Rita <rmorgan466@xxxxxxxxx> wrote:

I set the following below

Restarted condor. Submitted a job. And now, I see in my condor_userprio my username and resource used. Is this a good way to validate the change? Now that user accounting groups are squared away, How can I enforce the quota?

JOB_TRANSFORM_NAMES = AssignGroup

JOB_TRANSFORM_AssignGroup = [ eval_set_AccountingGroup = userMap("Groups",Owner,AccountingGroup); ]

On Thu, Apr 23, 2020 at 12:19 PM Gregory Thain <gthain@xxxxxxxxxxx> wrote:

On 4/23/20 10:46 AM, rmorgan466@xxxxxxxxx wrote:
> Hi.
>
> I was wondering if there were any advancements on how to manage
> account groups. Each user will have an accounting group in my setup. I
> want to explicitly set the number of jobs a user can run. I don't want
> a user to use another accounting group. If a user runs without an
> accounting group, their jobs shouldn't run. Is this possible?


With schedd transforms, the schedd can now automatically assign an
accounting group to a user based on a mapping file the admin sets up. 
Some details are given here, though we hope to improve the documentation:

https://htcondor.readthedocs.io/en/latest/admin-manual/policy-configuration.html?highlight=usermap#job-transforms


-greg


_______________________________________________
HTCondor-users mailing list
To unsubscribe, send a message to htcondor-users-request@xxxxxxxxxxx with a
subject: Unsubscribe
You can also unsubscribe by visiting
https://lists.cs.wisc.edu/mailman/listinfo/htcondor-users

The archives can be found at:
https://lists.cs.wisc.edu/archive/htcondor-users/

--

--- Get your facts first, then you can distort them as you please.--

--

--- Get your facts first, then you can distort them as you please.--

_______________________________________________
HTCondor-users mailing list
To unsubscribe, send a message to htcondor-users-request@xxxxxxxxxxx with a
subject: Unsubscribe
You can also unsubscribe by visiting
https://lists.cs.wisc.edu/mailman/listinfo/htcondor-users

The archives can be found at:
https://lists.cs.wisc.edu/archive/htcondor-users/