[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [HTCondor-users] ERROR: HTCondor cannot run under unlocked non-system account 'condor'



Hello,

gagan tiwari
<gagan.tiwari@xxxxxxxxxxxxxxxxxx> writes:

> getcondor script automatically creates a local condor user at the time
> of installation. You don't need to create it locally on the server.Â
> So, it looks likeÂthis error is because a condor user already exists
> in AD.  So, just remove the locally created condor and also unbind the
> server from AD so that the installationÂscript doesn't detect the
> condor user in AD and start fresh installation. It should succeed
> then.

IT told me we cannot unbind the server from AD, at least not as a first
option, since all administration accounts depend on it.

I tried:

+ to block the condor AD account (by entering the password incorrectly three times,
we have that policy here),
+ and disabling the AD condor account temporarily

But in both cases I got the same problem. Is it critical for security
that condor account is locked? Is there no way to tell the get_condor
script that I'm OK with an unlocked condor account?

Thanks
-- 
Ãngel de Vicente                 -- (GPG: 0x64D9FDAE7CD5E939)
 Research Software Engineer (Supercomputing and BigData)
 Instituto de AstrofÃsica de Canarias (https://www.iac.es/en)