Re: [HTCondor-users] Shadow error while transferring proxy certificates

[Jaime Frey <jfrey@xxxxxxxxxxx>]

I can reproduce this failure in my own test setup. Working on a fix for the next release.

 - Jaime

On Aug 24, 2021, at 10:11 AM, Jaime Frey <jfrey@xxxxxxxxxxx> wrote:

As Brian said, this sounds related to the new non-GSI proxy handling code introduced in HTCondor 9.1.3.

Iâm rerunning our interoperability tests with older, GSI-based versions.

If those succeed, Iâll want to investigate whatâs different between our test proxies and your proxies.

Can you send me the output of grid-proxy-info (or voms-proxy-info if you have VOMS extensions)?

 - Jaime

On Aug 24, 2021, at 9:01 AM, Kenyi Hurtado Anampa <khurtado@xxxxxx> wrote:

Hi Brian, Saqib,

Thanks for the help! I downgraded to 9.1.2 in the schedd and things are working normally again.

Best regards,

Kenyi

On Tue, Aug 24, 2021 at 7:45 AM Saqib Haleem <Saqib.Haleem@xxxxxxx> wrote:

Hi,

In CMS pool, we are currently running condor version 8.8.12 on startd side . But, even switching startd to condor  9.0.1 and 9.0.5 results in same error. We did not test  Startd from development release yet.

Best Regards

Saqib

---

From: Bockelman, Brian [BBockelman@xxxxxxxxxxxxx]
Sent: 24 August 2021 04:17
To: HTCondor-Users Mail List
Cc: cms-htcondor-admins (A group HTCondor experts to debug related issues)
Subject: Re: [HTCondor-users] Shadow error while transferring proxy certificates

Hi Kenyi,

The delegation code was rewritten from scratch in 9.1.3 to drop the Globus dependency.

Do you happen to know the version of condor on the starter side?  I suppose there could be an incompatibility between the two.

Thanks,

Brian

On Aug 23, 2021, at 7:03 PM, Kenyi Hurtado Anampa <khurtado@xxxxxx> wrote:

Hello,

I'm using condor 9.1.3 with a glidein-based pool (the CMS Condor pool). 

We send jobs with a proxy certificate via x509userproxy. 

However, the shadow fails while transferring the proxy with a delegation error. Any ideas of what is wrong?

Here is the ShadowLog info on one of the jobs:

08/23/21 18:58:01 Initializing a VANILLA shadow for job 9612559.0 08/23/21 18:58:01 (9612559.0) (2485243): LIMIT_DIRECTORY_ACCESS = <unset> 08/23/21 18:58:01 (9612559.0) (2485243): Request to run on slot1_5@glidein_40633_603955277@g33n05.hep.wisc.edu <128.104.227.105:15975?CCBID=128.142.194.25:9618%3faddrs%3d128.142.194.25-9618%26alias%3dvocms0813.cern.ch%26noUDP%26sock%3dcollector9695#1398181%20131.225.189.210:9618%3faddrs%3d131.225.189.210-9618%26alias%3dcmssrvz03.fnal.gov%26noUDP%26sock%3dcollector9681_259953_27a4#549336&PrivNet=g33n05.hep.wisc.edu&addrs=128.104.227.105-15975+[2607-f388-101c-1000--54]-15975&noUDP> was ACCEPTED 08/23/21 18:58:02 (9612559.0) (2485243): Delegation error: 139689747117712:error:0D0C50A1:lib(13):func(197):reason(161):a_verify.c:213: 08/23/21 18:58:02 (9612559.0) (2485243): Delegation error: 08/23/21 18:58:02 (9612559.0) (2485243): ReliSock::put_x509_delegation(): delegation failed: X509Credential::Delegate() failed 08/23/21 18:58:03 (9612559.0) (2485243): DoUpload: SHADOW at 192.170.227.182 failed to send file(s) to <128.104.227.105:10155>: error sending /tmp/x509up_u24239; STARTER at 128.104.227.105 failed to receive file /var/condor/.execute-links/slot01/dir_40630/glide_HHQkYW/execute/dir_38393/x509up_u24239 08/23/21 18:58:03 (9612559.0) (2485243): ERROR "Error from slot1_5@glidein_40633_603955277@g33n05.hep.wisc.edu: Failed to transfer files" at line 560 in file /var/lib/condor/execute/slot1/dir_78994/userdir/.tmpoEcKZl/BUILD/condor-9.1.3/src/condor_shadow.V6.1/pseudo_ops.cpp

Best regards,

Kenyi

_______________________________________________
HTCondor-users mailing list
To unsubscribe, send a message to htcondor-users-request@xxxxxxxxxxx with a
subject: Unsubscribe
You can also unsubscribe by visiting
https://lists.cs.wisc.edu/mailman/listinfo/htcondor-users

The archives can be found at:
https://lists.cs.wisc.edu/archive/htcondor-users/

_______________________________________________
HTCondor-users mailing list
To unsubscribe, send a message to htcondor-users-request@xxxxxxxxxxx with a
subject: Unsubscribe
You can also unsubscribe by visiting
https://lists.cs.wisc.edu/mailman/listinfo/htcondor-users

The archives can be found at:
https://lists.cs.wisc.edu/archive/htcondor-users/

_______________________________________________
HTCondor-users mailing list
To unsubscribe, send a message to htcondor-users-request@xxxxxxxxxxx with a
subject: Unsubscribe
You can also unsubscribe by visiting
https://lists.cs.wisc.edu/mailman/listinfo/htcondor-users

The archives can be found at:
https://lists.cs.wisc.edu/archive/htcondor-users/