Re: [HTCondor-users] CondorCE token subject mapping not working anymore

[Thomas Hartmann <thomas.hartmann@xxxxxxx>]

Hi all,

our situation got somewhat more troublesome as a large user (ATLAS) 
switched their submission infrastructure to Condor 10.
Since their jobs do not get authzed properly anymore as token validation 
from the CE at the IAM timeouts after 4s and there is no proxy fallback 
anymore :-/

So far I have not made any progress identifying the cause for the 
validation running into this 4s timeout.

Cheers,
  Thomas

On 18/04/2023 17.29, Thomas Hartmann wrote:
> short update - DNS lookup delays are not the cause AFAIS (hard-wiring 
> the IAM IP in hosts)
>
> I see a few packages between timeout starts/ends in dumps, but have yet 
> to try to decrypt the TLS handshake & the packages...
>
> _______________________________________________
> HTCondor-users mailing list
> To unsubscribe, send a message to htcondor-users-request@xxxxxxxxxxx with a
> subject: Unsubscribe
> You can also unsubscribe by visiting
> https://lists.cs.wisc.edu/mailman/listinfo/htcondor-users
>
> The archives can be found at:
> https://lists.cs.wisc.edu/archive/htcondor-users/

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature