Re: [HTCondor-users] Condor_ssh_to_job fails

[Valerio Bellizzomi <valerio@xxxxxxxxxx>]

However condor_ssh_to_job -debug 203.0

09/23/24 17:06:47 Reading condor configuration from
'/etc/condor/condor_config'
09/23/24 17:06:47 SharedPortClient: sent connection request to local
schedd for shared port id schedd_507095_91f3
09/23/24 17:06:47 Can't open directory "/etc/condor/passwords.d" as
PRIV_ROOT, errno: 13 (Permission denied)
09/23/24 17:06:47 Can't open directory "/etc/condor/passwords.d" as
PRIV_ROOT, errno: 13 (Permission denied)
09/23/24 17:06:47 Directory::Rewind(): path
"/home/sel/.condor/tokens.d" does not exist (yet)
09/23/24 17:06:47 SharedPortClient: sent connection request to local
schedd for shared port id schedd_507095_91f3
09/23/24 17:06:47 Can't open directory "/etc/condor/passwords.d" as
PRIV_ROOT, errno: 13 (Permission denied)
09/23/24 17:06:47 Can't open directory "/etc/condor/passwords.d" as
PRIV_ROOT, errno: 13 (Permission denied)
09/23/24 17:06:47 Directory::Rewind(): path
"/home/sel/.condor/tokens.d" does not exist (yet)
09/23/24 17:06:47 Response for GET_JOB_CONNECT_INFO:
CondorVersion = "$CondorVersion: 23.9.6 2024-08-08 BuildID: 748275
PackageID: 23.9.6-1.1 GitSHA: dfdd9eaa $"
RemoteHost = "slot2_1@xxxxxxxxxxxx"
Result = true
StarterIpAddr = "<10.10.0.40:9618?addrs=10.10.0.40-
9618&alias=master11.sel&noUDP&sock=slot2_1_1191_eaca_3>"

09/23/24 17:06:47 Can't open directory "/etc/condor/passwords.d" as
PRIV_ROOT, errno: 13 (Permission denied)
09/23/24 17:06:47 Can't open directory "/etc/condor/passwords.d" as
PRIV_ROOT, errno: 13 (Permission denied)
09/23/24 17:06:47 Can't open directory "/etc/condor/passwords.d" as
PRIV_ROOT, errno: 13 (Permission denied)
09/23/24 17:06:47 Got connect info for starter
<10.10.0.40:9618?addrs=10.10.0.40-
9618&alias=master11.sel&noUDP&sock=slot2_1_1191_eaca_3>
09/23/24 17:06:47 SharedPortClient: sent connection request to starter
at <10.10.0.40:9618> for shared port id slot2_1_1191_eaca_3
09/23/24 17:06:49 Executing ssh command: ssh -oUser=nobody
-oIdentityFile=/tmp/sel.condor_ssh_to_job_d9b21be9/ssh_key
-oStrictHostKeyChecking=yes
-oUserKnownHostsFile=/tmp/sel.condor_ssh_to_job_d9b21be9/known_hosts
-oGlobalKnownHostsFile=/tmp/sel.condor_ssh_to_job_d9b21be9/known_hosts
-oProxyCommand="condor_ssh_to_job"' '"-debug"' '"-proxy"'
'"/tmp/sel.condor_ssh_to_job_d9b21be9/fdpass" condor-job.master11.sel
-S none
09/23/24 17:06:49 Reading condor configuration from
'/etc/condor/condor_config'
09/23/24 17:06:49 Setting up ssh proxy on file descriptor 4
09/23/24 17:06:49 Passed ssh connection to ssh proxy.
nobody@xxxxxxxxxxxxxxxxxxxxxxx's password: 




On Mon, 2024-09-23 at 08:23 -0500, Greg Thain via HTCondor-users wrote:
> On 9/21/24 7:34 AM, Valerio Bellizzomi wrote:
> > I am trying to do condor_ssh_to_job 203.0 but it fails after
> > password
> > request as it tries to login as user nobody which is a non-existent
> > user on the EP machine.
> > 
> > How do I specify another user to login with?
> 
> The sshd that condor_ssh_to_job talks to is spawned by the starter
> as 
> the user who runs the job, and there is no way to change that. 
> However, 
> condor_ssh_to_job sets up an ssh keypair to use, so it should never
> fall 
> back to requested an interactive password.  What does
> condor_ssh_to_job 
> -v 203.0 report?
> 
> 
> -greg
> 
> _______________________________________________
> HTCondor-users mailing list
> To unsubscribe, send a message to htcondor-users-request@xxxxxxxxxxx
> with a
> subject: Unsubscribe
> You can also unsubscribe by visiting
> https://lists.cs.wisc.edu/mailman/listinfo/htcondor-users
> 
> The archives can be found at:
> https://lists.cs.wisc.edu/archive/htcondor-users/