Re: [HTCondor-users] Putting job in HOLD state if credential revoked during job processing

["Beyer, Christoph" <christoph.beyer@xxxxxxx>]

Hi Benoit,

just a wild idea here ;)

Maybe you can user condor_chirp inside your monitor to alter the job classadd accordingly to the state of the token - it would be easy to put a hold statement on that on the sched then ...

Best

christoph

--
Christoph Beyer
DESY Hamburg
IT-Department

Notkestr. 85
Building 02b, Room 009
22607 Hamburg

phone:+49-(0)40-8998-2317
mail: christoph.beyer@xxxxxxx

---

Von: "Benoit Roland" <benoit.roland@xxxxxxx>
An: "HTCondor-Users Mail List" <htcondor-users@xxxxxxxxxxx>
Gesendet: Donnerstag, 21. MÃrz 2024 08:48:23
Betreff: [HTCondor-users] Putting job in HOLD state if credential revoked        during job processing

Dear all,

I am producing, monitoring and refreshing access tokens provided by the Helmholtz AAI provider in [1].

I would like to introduce a "security" against the accidental revocation of the refresh token while the job is still processing.

This situation should not happen, a user should not revoke credentials when the job is running...

Still, I prefer to take the situation into account.

I would like to ask you; how should I proceed to put the job in the HOLD state, in case such situation is happening?

I can check if the refresh token has been revoked in my specific CredMon.

The question is more, how to transfer this information into a HOLD state for the job?

Thanks a lot in advance for your help!

Cheers,
Benoit

[1] https://github.com/benoitroland/C4P-HTCondor/tree/credmon_devel




















[1] https://github.com/benoitroland/C4P-HTCondor/tree/credmon_devel

_______________________________________________
HTCondor-users mailing list
To unsubscribe, send a message to htcondor-users-request@xxxxxxxxxxx with a
subject: Unsubscribe
You can also unsubscribe by visiting
https://lists.cs.wisc.edu/mailman/listinfo/htcondor-users

The archives can be found at:
https://lists.cs.wisc.edu/archive/htcondor-users/