[HTCondor-users] No other user than root can locate the Collector or the Negotiator through the Python bindings

[Gaetan Geffroy <gage@xxxxxxxxx>]

Hi,

 

I have a Python program which does three HTCondor operations: query the Collector (to get the list of worker nodes and their status), query the negotiator (to update some priorities) and submit jobs.

The program can query the two daemons just fine when launched using the root user, but of course the job submissions het rejected.

When ran with another user (eg submituser), I get an “htcondor.HTCondorLocateError: Unable to locate local daemon” from the negotiator and “htcondor.HTCondorIOError: Failed communication with collector.” From the collector.

 

I tried to change the security config file on the central manager, like ALLOW_ADMINSTRATOR = *, ALLOW_NEGOTIATOR=*, ALLOW_DAEMON=*, SEC_DEFAULT_AUTHENTICATION_METHODS=FS, CLAIMTOBE, SEC_NEGOTIATOR_AUTHENTICATION_METHODS=FS, CLAIMTOBE and SEC_DAEMON_AUTHENTICATION_METHDODS= FS, CLAIMTOBE, but nothing works.

 

I also don’t see in any other config file any mention  of the root user, so I don’t understand why he is authorized and not the others.

 

What other knobs am I missing that might resolve the issues ?

 

Thanks,

 

Gaëtan

 

 

PS: I know the beforementioned settings are bad security wise, they are not meant to be permanent or deployed anywhere other than my little test pool, I just want to find the correct macro to configure.

 

Gaetan Geffroy
Junior Software Engineer, Space

Terma GmbH
Europaarkaden II, Bratustraße 7, 64293 Darmstadt, Germany
T +49 6151 86005 43 (direct)  •  T +49 6151 86005-0
Terma GmbH - Sitz Darmstadt  •  Handelsregister Nr.: HRB 7411, Darmstadt
Geschäftsführer: Poul Vigh / Steen Vejby Sørensen
www.terma.com • Linkedin • Twitter • Instagram • Youtube

---

Attention:
This e-mail (and attachment(s), if any) - intended for the addressee(s) only - may contain confidential, copyright, or legally privileged information or material, and no one else is authorized to read, print, store, copy, forward, or otherwise use or disclose any part of its contents or attachment(s) in any form. If you have received this e-mail in error, please notify me by telephone or return e-mail, and delete this e-mail and attachment(s). Thank you.