Mailing List ArchivesAuthenticated access |
![[Computer Systems Lab]](http://www.cs.wisc.edu/pics/csl_logo.gif){kind=logo}
|
Mailing List ArchivesAuthenticated access |
|
|
Hi Thomas,
I can think of maybe one complication here:
How would you distribute each users' DN to the gridmap files at the various CEs you want to enable them to submit to? This is why the grid submission infrastructure exists. i.e., to abstract away this problem at the individual user-level
such that each CE only needs to know about and trust the grid infrastructure that submits jobs on behalf of the users.
From: HTCondor-users <htcondor-users-bounces@xxxxxxxxxxx> on behalf of Maarten Litmaath <Maarten.Litmaath@xxxxxxx>
Sent: Thursday, February 11, 2021 9:09 AM To: HTCondor-Users Mail List <htcondor-users@xxxxxxxxxxx> Subject: Re: [HTCondor-users] Remote Submit Scheds with grid submission to CondorCE Hi Thomas,
could it be as simple as using a JDL like this: cmd = ... output = ... error = ... log = ... +TransferOutput = "" periodic_hold = ... periodic_remove = ... universe = grid grid_resource = condor htc-ce.some.domain htc-ce.some.domain:9619 use_x509userproxy = true environment = ... queue 1 That is how ALICE let a local HTCondor service deal with all the intricacies of handling jobs for remote HTCondor CEs. Maybe I am missing something? ________________________________________ From: HTCondor-users [htcondor-users-bounces@xxxxxxxxxxx] on behalf of Thomas Hartmann [thomas.hartmann@xxxxxxx] Sent: 11 February 2021 17:46 To: HTCondor-Users Mail List Subject: [HTCondor-users] Remote Submit Scheds with grid submission to CondorCE Hi all, does somebody has maybe already experiences with combining remote submission with gridward submission to CondorCEs? Thing is, that we have a number of nodes for our users, that act as remote submitters to the actual schedulers. Now it would come handy, not only to submit to the local Condor but also allow our users to do submissions into the Grid targeting CondorCEs. Since the Schedd would have to do the authentication through the users' proxy X509, it would need to be passed forward like kerberos etc. tickets/tokens. And are there other caveats, that might need to be considered in such a setup? Maybe somebody has already a working similar setup? Cheers, Thomas _______________________________________________ HTCondor-users mailing list To unsubscribe, send a message to htcondor-users-request@xxxxxxxxxxx with a subject: Unsubscribe You can also unsubscribe by visiting https://urldefense.com/v3/__https://lists.cs.wisc.edu/mailman/listinfo/htcondor-users__;!!Mih3wA!WEnamopADI6O0BNvzxmSgzNvHSQTM6bwUtLUibkZt4sRTgHD6i1T688-FMiT3CI$ The archives can be found at: https://urldefense.com/v3/__https://lists.cs.wisc.edu/archive/htcondor-users/__;!!Mih3wA!WEnamopADI6O0BNvzxmSgzNvHSQTM6bwUtLUibkZt4sRTgHD6i1T688-Z7UZyIg$ |