Re: [HTCondor-users] QUEUE_SUPER_USERS does not work in Condor version 23.4.0 on Windows

[John M Knoeller <johnkn@xxxxxxxxxxx>]

I see the failure, but not what lead up to it.   What command is being attempted? 

03/12/24 15:20:05 QMGT command failed: anonymous user not permitted

please add this to your config and restart the schedd then try again.

SCHEDD_DEBUG = $(SCHEDD_DEBUG) D_CAT D_FULLDEBUG D_SECURITY:1

It's possible that the problem is that HTCondor is treating Administrator as different from administrator, since usernames on Linux are case sensitive.   It's also possible that the command is being refused because Administrator has never submitted any jobs.   

you could try submitting a job, and see if that changes things. 

-tj

---

From: HTCondor-users <htcondor-users-bounces@xxxxxxxxxxx> on behalf of Morin Brisebois, Francis via HTCondor-users <htcondor-users@xxxxxxxxxxx>
Sent: Tuesday, March 12, 2024 3:12 PM
To: HTCondor-Users Mail List <htcondor-users@xxxxxxxxxxx>
Cc: Morin Brisebois, Francis <MorinBrisebois.Francis@xxxxxxxxxxxxxxx>
Subject: [HTCondor-users] QUEUE_SUPER_USERS does not work in Condor version 23.4.0 on Windows

 

Public

Hi everyone,

 

Do someone know why QUEUE_SUPER_USERS does not work in condor version 23.4.0 on Windows ?

 

I have a lab environment with a single machine that has all the roles, config file has all the roles obviously (MASTER COLLECTOR NEGOTIATOR CREDD SCHEDD STARTD)

 

I am not able to kill jobs as administrator, only the user that has created the job can kill it.

 

condor_pool password has been added.

Administrator password has been added.

a test user password has been added too.

 

QUEUE_SUPER_USERS = condor, SYSTEM, administrator@*, administrator@mydomain, administrator@xxxxxxxxxxxx

 

CREDD.SEC_DEFAULT_AUTHENTICATION_METHODS = NTSSPI, PASSWORD

 

 

I have the following result in SchedLog file when trying to killing a job with the administrator user:

 

03/12/24 15:20:05 SharedPort PipeListenerHelper got messages from Listener thread:

15:20:05.782 SharedPortEndpoint: Pipe connected and pid 1352 sent

03/12/24 15:20:05 SharedPortEndpoint: Entered DoListenerAccept Win32 path.

03/12/24 15:20:05 sspi_server_auth() entered

03/12/24 15:20:05 sspi_server_auth() looping

03/12/24 15:20:05 sspi_server_auth(): user name is: "Administrator"

03/12/24 15:20:05 sspi_server_auth(): domain name is: "MYDOMAIN"

03/12/24 15:20:05 sspi_server_auth() exiting

03/12/24 15:20:05 QMGT command failed: anonymous user not permitted

 

I can post the whole config file in a future reply if needed.

 

 

Thank You.

 

Francis MB