Re: [HTCondor-users] SECMAN:2010:Received "DENIED" from server for user unauthenticated@unmapped using no authentication method

[Cole Bollig <cabollig@xxxxxxxx>]

Hi Geaton,

This is an issue occurring because the condor_install script does not set ALLOW permissions for any users to be authorized to connect to condor systems. For a better explanation if you want here is a link to the authorization information in our manual. 

https://htcondor.readthedocs.io/en/latest/admin-manual/security.html?highlight=ALLOW_DAEMON#authorization

An easy solution to this is to add ALLOW_WRITE=* to your config file. I only recommend that since you are messing around personally with a minicondor. In any true deployment of htcondor I would expect ALLOW_WRITE to be set to specific users and not just everyone. Do know that after adding ALLOW_WRITE you need to run condor_reconfig.

Best,

Cole Bollig

---

From: HTCondor-users <htcondor-users-bounces@xxxxxxxxxxx> on behalf of Gaetan Geffroy <gage@xxxxxxxxx>
Sent: Thursday, September 22, 2022 10:24 AM
To: HTCondor-Users Mail List <htcondor-users@xxxxxxxxxxx>
Subject: [HTCondor-users] SECMAN:2010:Received "DENIED" from server for user unauthenticated@unmapped using no authentication method

 

Hi,

 

I ma trying to run HTCondor locally to play with it. Following a guide I found, I executed this script:

# Download and extract

wget https://research.cs.wisc.edu/htcondor/tarball/9.0/9.0.16/release/condor-9.0.16-x86_64_CentOS7-stripped.tar.gz

tar xvfz condor-9.0.16-x86_64_CentOS7-stripped.tar.gz

 

# Install HTCondor and run script to set environment variables

./condor-9.0.16-1-x86_64_CentOS7-stripped/condor_install --local-dir `pwd`/local --make-personal-condor

.  ./condor.sh

condor_master

But when I try to run condor_status or condor_queue, I end up with this message:

 

Error: communication error

SECMAN:2010:Received "DENIED" from server for user unauthenticated@unmapped using no authentication method, which may imply host-based security.  Our address was '127.0.0.1', and server's address was '127.0.0.1'.  Check your ALLOW settings and IP protocols.

 

Why am I unauthenticated ? How to fix it ? I tried adding SEC_DEFAULT_AUTHENTICATION = NEVER to the config, but it did not change anything.

It’s the first time I try to run condor by myself (usually I use the minicondor Docker image).

 

Thanks,

Gaëtan

Gaetan Geffroy
Junior Software Engineer, Space

Terma GmbH
Europaarkaden II, Bratustraße 7, 64293 Darmstadt, Germany
T +49 6151 86005 43 (direct)  •  T +49 6151 86005-0
Terma GmbH - Sitz Darmstadt  •  Handelsregister Nr.: HRB 7411, Darmstadt
Geschäftsführer: Poul Vigh / Steen Vejby Sørensen
www.terma.com • Linkedin • Twitter • Instagram • Youtube

---

Attention:
This e-mail (and attachment(s), if any) - intended for the addressee(s) only - may contain confidential, copyright, or legally privileged information or material, and no one else is authorized to read, print, store, copy, forward, or otherwise use or disclose any part of its contents or attachment(s) in any form. If you have received this e-mail in error, please notify me by telephone or return e-mail, and delete this e-mail and attachment(s). Thank you.