[HTCondor-users] HTCondor-CE: mapping rule for local submission?

[Thomas Hartmann <thomas.hartmann@xxxxxxx>]

Hi all,

I am trying to check locally the status of a CondorCE and ideally submit
test jobs. However, my local user seem not to see the CE -
condor_ce_status as well as condor_ce_trace seem not to see the CE [1].

My suspicion is, that the authorization somehow fails - while I see
authz errors in the CE's MasterLog and SchedLog like [2], they are not
in sync with my tries.

I have been hoping, that the authorization through the filesystem would
work [3], but tbh I am not sure, if I understood the authz correctly.

i.e., is there anything to consider to grid submit locally on a CondorCE?

Cheers,
  Thomas



[1]
desyusr000@grid-vm08: [~] condor_ce_status -debug
desyusr000@grid-vm08: [~] echo $?
0


desyusr000@grid-vm08: [~] condor_ce_trace --debug grid-vm08.desy.de
06/25/20 14:12:38 Result of reading /etc/issue:  \S

06/25/20 14:12:38 Result of reading /etc/redhat-release:  CentOS Linux
release 7.8.2003 (Core)

06/25/20 14:12:38 Using processor count: 1 processors, 1 CPUs, 0 HTs
06/25/20 14:12:38 Enumerating interfaces: lo 127.0.0.1 up
06/25/20 14:12:38 Enumerating interfaces: eth0 131.169.223.234 up
06/25/20 14:12:38 Enumerating interfaces: lo ::1 up
06/25/20 14:12:38 Enumerating interfaces: eth0 2001:638:700:10df::1:ea up
06/25/20 14:12:38 Enumerating interfaces: eth0 fe80::11:69ff:fe22:3234 up
06/25/20 14:12:38 Will use TCP to update collector grid-vm08.desy.de
<131.169.223.234:9619>
06/25/20 14:12:38 Trying to query collector <131.169.223.234:9619>
06/25/20 14:12:38 Trying to query collector <131.169.223.234:9619>
********************************************************************************
2020-06-25 14:12:38 ERROR: Could not find CE schedd at grid-vm08.desy.de.
Verify that the schedd daemon is up with `condor_ce_status`.
********************************************************************************


[2]
06/25/20 14:11:10 SECMAN: FAILED: Received "DENIED" from server for user
/CN=grid-vm08.desy.de@xxxxxxxxxxxxxxxxxxxxx using method GSI.
06/25/20 14:11:10 ERROR: SECMAN:2010:Received "DENIED" from server for
user /CN=grid-vm08.desy.de@xxxxxxxxxxxxxxxxxxxxx using method GSI.
06/25/20 14:11:10 Failed to start non-blocking update to
<131.169.223.234:9619>.


[3]
> cat /etc/condor-ce/condor_mapfile
...
GSI ".*,\/ops" opsusr003

##########################################################################################

GSI "(/CN=[-.A-Za-z0-9/= ]+)" \1@xxxxxxxxxxxxxxxxxxxxx
CLAIMTOBE .* anonymous@claimtobe
FS (.*) \1

Attachment: 0x4C44535B5D7ADD74.asc
Description: application/pgp-keys

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature