Re: [HTCondor-users] Windows Password Authentication - add works, query fails

["Hitchen, Greg (IM&T, Kensington WA)" <Greg.Hitchen@xxxxxxxx>]

Same result for version 9.0.6

>c:\progra~1\condor\bin\condor_store_cred -c query -d
10/18/21 16:03:08 STORE_CRED: In mode 102 'query', user is "condor_pool@xxxxxxxx"
Account: condor_pool@xxxxxxxx
CredType: password
Operation failed.
    Make sure your ALLOW_WRITE setting includes this host.
10/18/21 16:03:08 STORE_CRED: (old) In mode 102 'query', user is "condor_pool@xxxxxxxx"
10/18/21 16:03:08 Can't find address for schedd WORLAND-KF.xxx.yyy.zz
10/18/21 16:03:08 STORE_CRED: Failed to start command.
10/18/21 16:03:08 STORE_CRED: Unable to contact the REMOTE schedd.

Cheers

Greg


-----Original Message-----
From: HTCondor-users <htcondor-users-bounces@xxxxxxxxxxx> On Behalf Of Hitchen, Greg (IM&T, Kensington WA)
Sent: Monday, 18 October 2021 1:51 PM
To: HTCondor-Users Mail List <htcondor-users@xxxxxxxxxxx>
Subject: [ExternalEmail] Re: [HTCondor-users] Windows Password Authentication - add works, query fails

Sorry, meant to add that the HTCondor version is 8.8.12

-----Original Message-----
From: Hitchen, Greg (IM&T, Kensington WA) 
Sent: Monday, 18 October 2021 1:50 PM
To: HTCondor-Users Mail List <htcondor-users@xxxxxxxxxxx>
Subject: Windows Password Authentication - add works, query fails

Hi

I have been testing password authentication on windows as a prelude to enabling run_as_owner using a credd server.

I can seemingly "add" the pool password OK, but not "query" it.

>condor_store_cred -c add -p thepoolpassword -d
10/18/21 08:23:32 STORE_CRED: In mode 'add'
Account: condor_pool@xxxxxxxx
Operation succeeded.

>condor_store_cred -c query -d
10/18/21 08:28:44 STORE_CRED: In mode 'query'
Account: condor_pool@xxxxxxxx
Operation failed.
    Make sure your ALLOW_WRITE setting includes this host.
10/18/21 08:28:44 Can't find address for schedd WORLAND-KF.xxx.yyy.zz
10/18/21 08:28:44 STORE_CRED: Failed to start command.
10/18/21 08:28:44 STORE_CRED: Unable to contact the REMOTE schedd.

Setting ALL_DEBUG = D_ALL doesn't offer any additional clues. In fact there are no log file entries anywhere
for the failed "query" command.

What I find strange is that adding the pool password also creates corresponding entries in the MasterLog,
as expected, because the condor_master actions this command.

Why is the query option failing and looking for a schedd on an execute node?

Thanks for any help/pointers.

Cheers

Greg

_______________________________________________
HTCondor-users mailing list
To unsubscribe, send a message to htcondor-users-request@xxxxxxxxxxx with a
subject: Unsubscribe
You can also unsubscribe by visiting
https://lists.cs.wisc.edu/mailman/listinfo/htcondor-users

The archives can be found at:
https://lists.cs.wisc.edu/archive/htcondor-users/