Hi All,
I spend a decent portion of my time these days managing Slurm accounts
with https://slurm.schedmd.com/sacctmgr.html, but realized today that I
can't think of the equivalent tool the HTCondor ecosystem.
How exactly do new users get permission to submit jobs to the queue,
beyond being allowed on an Access Point?
Hi Matt:
I really appreciate this question, because it is
something that is so fundamental to how HTCondor works today
that we forget to document it, and never really come out and say
it. It really helps us to have someone with new eyes report
these kinds of omissions to us. I've been on the other side of
this, and I know how annoying it can be to have documentation
answer all kinds of advanced questions, but skip over core
concepts because they are "obvious" to the authors.
The real answer is, out of the box, the assumption/convention is that every user with a Unix login to the Access Point, where the schedd runs, is allowed to submit jobs. And yes, there are knobs you can set up to prevent this for certain users, but the default assumption is that everyone with a Unix login can submit jobs.
I'll try to find an appropriate place to add this to the online manual.
And as others have said, we are re-evaluating this convention, and thinking about first class ways to handle this.
-greg