Re: [HTCondor-users] Condor mapfile

[ejunior@xxxxxxx]

Hi Brian,

Now it's working :)

My /etc/grid-security/vomsdir/ was empty. After fixing that,  
everything started to work.

thank you so much!

Eraldo Jr

Citando Brian Lin <blin@xxxxxxxxxxx>:

> Hi Eraldo,
>
> Try bumping the debug level of your SchedLog ("SCHEDD_DEBUG = D_CAT  
> D_ALWAYS:2 D_SECURITY:2") and seeing if there's any information on  
> the incoming credentials. Some random ideas for what may be the  
> culprit:
>
> 1. The incoming VOMS attrs have sub-VOs (e.g. /alice/usalice/...).  
> You could make your lines less strict:
>
> GSI ".*,\/alice\/.*" user_alice
> GSI ".*,\/lhcb\/.*" user_lhcb
> GSI ".*,\/dune\/.*" user_dune
> GSI (.*) user_others
>
> 2. You don't have the relevant VO data installed in  
> /etc/grid-security/vomsdir  
> (https://htcondor-ce.readthedocs.io/en/latest/installation/htcondor-ce/#before-starting)
>
> - Brian
>
>
> On 7/2/20 1:31 PM, ejunior@xxxxxxx wrote:
> > Hi Brian,
> >
> > sorry for the late reply, this message was stuck in to my SPAM box.
> >
> > Thanks for the job routing part, I'll set like you said.
> >
> > About what is not working, it's the map file.
> >
> > I believe I've set my regex correctly, but all jobs are been  
> > assigned to the user "user_others":
> >
> > > > GSI ".*,\/alice\/Role\=.*" user_alice
> > > > GSI ".*,\/lhcb\/Role\=.*" user_lhcb
> > > > GSI ".*,\/dune\/Role\=.*" user_dune
> > > > GSI (.*) user_others
> >
> > Did I made a mistake ?
> >
> > Regards,
> >
> > Eraldo
> >
> > Citando Brian Lin <blin@xxxxxxxxxxx>:
> >
> > > Hi Eraldo,
> > >
> > > It's not clear from your email what's not working but I think I  
> > > see a problem with how you're specifying multiple routes  
> > > (https://htcondor-ce.readthedocs.io/en/latest/batch-system-integration/#writing-multiple-routes). You should also be able to specify the route evaluation order and simplify the requirements statements for each route since you've got 1:1 VO to local user mappings  
> > > [1].
> > >
> > > - Brian
> > >
> > > [1]
> > >
> > > JOB_ROUTER_ENTRIES @=jre
> > > [
> > > Â TargetUniverse = 5;
> > > Â name = "ALICE_jobs";
> > > Â Requirements = (Owner == "user_alice");
> > > ]
> > > [
> > > Â TargetUniverse = 5;
> > > Â name = "LHCb_jobs";
> > > Â Requirements = (Owner == "user_lhcb");
> > > ]
> > > [
> > > Â TargetUniverse = 5;
> > > Â name = "DUNE_jobs";
> > > Â Requirements = (Owner == "user_dune");
> > > ]
> > > @jre
> > >
> > > JOB_ROUTER_ROUTE_NAMES = ALICE_jobs, LHCb_jobs, DUNE_jobs
> > >
> > > On 6/29/20 4:18 PM, ejunior@xxxxxxx wrote:
> > > > Hi all,
> > > >
> > > > first of all my condor installation:
> > > > $CondorVersion: 8.8.9 May 06 2020 BuildID: 503068 PackageID: 8.8.9-1 $
> > > > $CondorPlatform: x86_64_CentOS7 $
> > > >
> > > >
> > > > I'm trying to setup my mapfile without success.
> > > >
> > > > Here the FQANs that I want to map:
> > > >
> > > > x509UserProxyFQAN =  
> > > > "/DC=org/DC=incommon/C=US/ST=Illinois/L=Batavia/O=Fermi Research  
> > > > Alliance/OU=Fermilab/CN=blabla.bla.gov,/dune/Role=pilot/Capability=NULL,/dune/Role=NULL/Capability=NULL"
> > > > x509UserProxyFQAN = "/DC=ch/DC=cern/OU=Organic  
> > > > Units/OU=Users/CN=user/CN=0000/CN=Name Last  
> > > > name,/lhcb/Role=pilot/Capability=NULL,/lhcb/Role=NULL/Capability=NULL"
> > > > x509UserProxyFQAN = "/DC=ch/DC=cern/OU=Organic  
> > > > Units/OU=Users/CN=user/CN=0000/CN=Name Last  
> > > > name/alice/Role=NULL/Capability=NULL,/alice/alarm/Role=NULL/Capability=NULL,/alice/lcg1/Role=NULL/Capability=NULL,/alice/team/Role=NULL/Capability=NULL"
> > > >
> > > > Here my configuration files:
> > > >
> > > > *******************
> > > > Extract of condor_mapfile
> > > > *******************
> > > > GSI ".*,\/alice\/Role\=.*" user_alice
> > > > GSI ".*,\/lhcb\/Role\=.*" user_lhcb
> > > > GSI ".*,\/dune\/Role\=.*" user_dune
> > > > GSI (.*) user_others
> > > > CLAIMTOBE .* anonymous@claimtobe
> > > > FS (.*) \1
> > > >
> > > > **********EOF**************
> > > >
> > > > Extract of Job_router:
> > > > ************************
> > > > JOB_ROUTER_ENTRIES @=jre
> > > > [
> > > > Â TargetUniverse = 5;
> > > > ÂÂÂ name = "Filtering alice jobs";
> > > > Â Requirements = regexp("\/alice\/Role\=*",  
> > > > TARGET.x509UserProxyFirstFQAN);
> > > > ]
> > > > @jre
> > > >
> > > > JOB_ROUTER_ENTRIES @=jre
> > > > [
> > > > Â TargetUniverse = 5;
> > > > ÂÂÂ name = "Filtering LHCb jobs";
> > > > Â Requirements = regexp("\/lhcb\/Role\=*", TARGET.x509UserProxyFirstFQAN);
> > > > ]
> > > > @jre
> > > >
> > > >
> > > > JOB_ROUTER_ENTRIES @=jre
> > > > [
> > > > Â TargetUniverse = 5;
> > > > ÂÂÂ name = "Filtering Dune jobs";
> > > > Â Requirements = regexp("\/dune\/Role\=*", TARGET.x509UserProxyFirstFQAN);
> > > > ]
> > > > @jre
> > > >
> > > >
> > > > **********EOF**************
> > > >
> > > >
> > > > What I'm doing wrong ?
> > > >
> > > >
> > > > Best regards,
> > > >
> > > > Eraldo Jr
> > > > _______________________________________________
> > > > HTCondor-users mailing list
> > > > To unsubscribe, send a message to  
> > > > htcondor-users-request@xxxxxxxxxxx with a
> > > > subject: Unsubscribe
> > > > You can also unsubscribe by visiting
> > > > https://lists.cs.wisc.edu/mailman/listinfo/htcondor-users
> > > >
> > > > The archives can be found at:
> > > > https://lists.cs.wisc.edu/archive/htcondor-users/