Re: [HTCondor-users] GSI-related default settings vanished from htcce 5.1.5

[Brian Lin <blin@xxxxxxxxxxx>]

Hi Andreas,

Indeed, we removed those defaults from the HTCondor-CE configuration as 
they were polluting the job environment for Slurm clusters [1][2]. IIRC, 
we decided that this was safe to do, as the GSI libraries themselves 
should use those locations by default.

- Brian

[1] https://opensciencegrid.atlassian.net/browse/HTCONDOR-1085
[2] https://github.com/htcondor/htcondor-ce/pull/539

On 7/25/22 07:00, Andreas Haupt wrote:
> Dear list,
>
> htcondor-ce 5.1.5 seems to drop some GSI-related default settings compared
> to 5.1.3:
>
>  From our prod instance on 5.1.3:
>
> [grid-htcondorce2] /root # rpm -q htcondor-ce
> htcondor-ce-5.1.3-1.el7.noarch
> [grid-htcondorce2] /root # grep GSI_ /usr/share/condor-ce/config.d/*
> /usr/share/condor-ce/config.d/01-ce-auth-defaults.conf:GSI_DAEMON_CERT = /etc/grid-security/hostcert.pem
> /usr/share/condor-ce/config.d/01-ce-auth-defaults.conf:GSI_DAEMON_KEY  = /etc/grid-security/hostkey.pem
> /usr/share/condor-ce/config.d/01-common-auth-defaults.conf:GSI_DAEMON_TRUSTED_CA_DIR=/etc/grid-security/certificates
> [grid-htcondorce2] /root #
>
>
> Test instance with 5.1.5:
>
> [gordo-vm36] /root # rpm -q htcondor-ce
> htcondor-ce-5.1.5-1.el7.noarch
> [gordo-vm36] /root # grep GSI_ /usr/share/condor-ce/config.d/*
> [gordo-vm36] /root #
>
>
> This caused some irritations on test updates here. I think these changes
> were on purpose, but I wonder how GSI-based stuff finds e.g. its host
> certificate now by default? In tests things still worked with
> condor_ce_trace and GSI-based voms authentication.
>
> Cheers,
> Andreas
>
> _______________________________________________
> HTCondor-users mailing list
> To unsubscribe, send a message to htcondor-users-request@xxxxxxxxxxx with a
> subject: Unsubscribe
> You can also unsubscribe by visiting
> https://lists.cs.wisc.edu/mailman/listinfo/htcondor-users
>
> The archives can be found at:
> https://lists.cs.wisc.edu/archive/htcondor-users/