Re: [HTCondor-users] Windows Password Authentication - add works, query fails

[John M Knoeller <johnkn@xxxxxxxxxxx>]

>From that pattern of log messages,  it looks like it does not think it's storing a pool password.  

Could you please up the logging level an try again.

configure

TOOL_DEBUG = $(TOOL_DEBUG) D_ALWAYS:2 

and then run the command again?

you could also try adding the -n argument to specify the master name. it goes through a slightly different code path in that case.

thanks,

-tj

---

From: HTCondor-users <htcondor-users-bounces@xxxxxxxxxxx> on behalf of Hitchen, Greg (IM&T, Kensington WA) <Greg.Hitchen@xxxxxxxx>
Sent: Monday, October 18, 2021 3:19 AM
To: HTCondor-Users Mail List <htcondor-users@xxxxxxxxxxx>
Subject: Re: [HTCondor-users] Windows Password Authentication - add works, query fails

 

Sorry for the continued spamming but now the "add" command fails as well in version 9.0.6

>c:\progra~1\condor\bin\condor_store_cred -c add -p thepoolpassword -d
10/18/21 16:12:51 STORE_CRED: In mode 100 'add', user is "condor_pool@xxxxxxxx"
10/18/21 16:12:51 STORE_CRED: (old) In mode 100 'add', user is "condor_pool@xxxxxxxx"
10/18/21 16:12:53 attempt to connect to <aaa.bbb.ccc.ddd:9703> failed: connect errno = 10061 connection refused.
Account: condor_pool@xxxxxxxx
CredType: password
Operation failed.
    Make sure you have CONFIG access to the target Master.
10/18/21 16:12:53 STORE_CRED: Failed to start command.
10/18/21 16:12:53 STORE_CRED: Unable to contact the REMOTE schedd.

The IP specified above aaa.bbb.ccc.ddd is WORLAND-KF.xxx.yyy.zz

The "add" command now also seems to be trying to contact a schedd on this execute node. It correctly contacted the
master in version 8.8.12. It was only the "query" command in 8.8.12 that tried to contact a schedd.

Cheers

Greg

-----Original Message-----
From: HTCondor-users <htcondor-users-bounces@xxxxxxxxxxx> On Behalf Of Hitchen, Greg (IM&T, Kensington WA)
Sent: Monday, 18 October 2021 4:07 PM
To: HTCondor-Users Mail List <htcondor-users@xxxxxxxxxxx>
Subject: [ExternalEmail] Re: [HTCondor-users] Windows Password Authentication - add works, query fails

Same result for version 9.0.6

>c:\progra~1\condor\bin\condor_store_cred -c query -d
10/18/21 16:03:08 STORE_CRED: In mode 102 'query', user is "condor_pool@xxxxxxxx"
Account: condor_pool@xxxxxxxx
CredType: password
Operation failed.
    Make sure your ALLOW_WRITE setting includes this host.
10/18/21 16:03:08 STORE_CRED: (old) In mode 102 'query', user is "condor_pool@xxxxxxxx"
10/18/21 16:03:08 Can't find address for schedd WORLAND-KF.xxx.yyy.zz
10/18/21 16:03:08 STORE_CRED: Failed to start command.
10/18/21 16:03:08 STORE_CRED: Unable to contact the REMOTE schedd.

Cheers

Greg


-----Original Message-----
From: HTCondor-users <htcondor-users-bounces@xxxxxxxxxxx> On Behalf Of Hitchen, Greg (IM&T, Kensington WA)
Sent: Monday, 18 October 2021 1:51 PM
To: HTCondor-Users Mail List <htcondor-users@xxxxxxxxxxx>
Subject: [ExternalEmail] Re: [HTCondor-users] Windows Password Authentication - add works, query fails

Sorry, meant to add that the HTCondor version is 8.8.12

-----Original Message-----
From: Hitchen, Greg (IM&T, Kensington WA)
Sent: Monday, 18 October 2021 1:50 PM
To: HTCondor-Users Mail List <htcondor-users@xxxxxxxxxxx>
Subject: Windows Password Authentication - add works, query fails

Hi

I have been testing password authentication on windows as a prelude to enabling run_as_owner using a credd server.

I can seemingly "add" the pool password OK, but not "query" it.

>condor_store_cred -c add -p thepoolpassword -d
10/18/21 08:23:32 STORE_CRED: In mode 'add'
Account: condor_pool@xxxxxxxx
Operation succeeded.

>condor_store_cred -c query -d
10/18/21 08:28:44 STORE_CRED: In mode 'query'
Account: condor_pool@xxxxxxxx
Operation failed.
    Make sure your ALLOW_WRITE setting includes this host.
10/18/21 08:28:44 Can't find address for schedd WORLAND-KF.xxx.yyy.zz
10/18/21 08:28:44 STORE_CRED: Failed to start command.
10/18/21 08:28:44 STORE_CRED: Unable to contact the REMOTE schedd.

Setting ALL_DEBUG = D_ALL doesn't offer any additional clues. In fact there are no log file entries anywhere
for the failed "query" command.

What I find strange is that adding the pool password also creates corresponding entries in the MasterLog,
as expected, because the condor_master actions this command.

Why is the query option failing and looking for a schedd on an execute node?

Thanks for any help/pointers.

Cheers

Greg

_______________________________________________
HTCondor-users mailing list
To unsubscribe, send a message to htcondor-users-request@xxxxxxxxxxx with a
subject: Unsubscribe
You can also unsubscribe by visiting
https://lists.cs.wisc.edu/mailman/listinfo/htcondor-users

The archives can be found at:
https://lists.cs.wisc.edu/archive/htcondor-users/

_______________________________________________
HTCondor-users mailing list
To unsubscribe, send a message to htcondor-users-request@xxxxxxxxxxx with a
subject: Unsubscribe
You can also unsubscribe by visiting
https://lists.cs.wisc.edu/mailman/listinfo/htcondor-users

The archives can be found at:
https://lists.cs.wisc.edu/archive/htcondor-users/

_______________________________________________
HTCondor-users mailing list
To unsubscribe, send a message to htcondor-users-request@xxxxxxxxxxx with a
subject: Unsubscribe
You can also unsubscribe by visiting
https://lists.cs.wisc.edu/mailman/listinfo/htcondor-users

The archives can be found at:
https://lists.cs.wisc.edu/archive/htcondor-users/