Re: [HTCondor-users] CondorCE: recipe to react(?) on payload audit events

[Jason Patton <jpatton@xxxxxxxxxxx>]

Hi Thomas,

There's nothing natively-supported that comes to mind. The best idea I can come up with is a custom script that monitors the payload audit log for undesired attributes, though I'm not sure then how you make the connection from the payload event to the pilot that should be removed (but I'm also not familiar with this audit log).

Flipping this around a bit, if you had the ability to modify pilots' job requirements (i.e. start _expression_) to reject jobs with undesired attributes/values, would that help with what you're trying to do?

Jason Patton

On Thu, Mar 30, 2023 at 10:35âAM Thomas Hartmann <thomas.hartmann@xxxxxxx> wrote:

Hi all,

is there a way in CondorCED to react(?) on payload audit events?
Like for example to remove a pilot job, where a payload job under DN
`/DC=ch/DC=cern/CN=Irma Malicious` comes in and is in principle logged
in the CE collector's payload audit (or similar for token subjects or
groups).

Cheers,
 Thomas
_______________________________________________
HTCondor-users mailing list
To unsubscribe, send a message to htcondor-users-request@xxxxxxxxxxx with a
subject: Unsubscribe
You can also unsubscribe by visiting
https://lists.cs.wisc.edu/mailman/listinfo/htcondor-users

The archives can be found at:
https://lists.cs.wisc.edu/archive/htcondor-users/