[HTCondor-users] [Fwd: Re: Condor_ssh_to_job fails]

[Valerio Bellizzomi <valerio@xxxxxxxxxx>]

Dear Sirs, what do you think of this error (errno 13 Permission Denied)
Can we debug this please?

Kind Regards
VB

-------- Forwarded Message --------
From: Valerio Bellizzomi <valerio@xxxxxxxxxx>
Reply-To: HTCondor-Users Mail List <htcondor-users@xxxxxxxxxxx>
To: htcondor-users@xxxxxxxxxxx
Subject: Re: [HTCondor-users] Condor_ssh_to_job fails
Date: Mon, 23 Sep 2024 17:09:21 +0200
Mailer: Evolution 3.28.5 (3.28.5-18.el8) 

> However condor_ssh_to_job -debug 203.0
> 
> 09/23/24 17:06:47 Reading condor configuration from
> '/etc/condor/condor_config'
> 09/23/24 17:06:47 SharedPortClient: sent connection request to local
> schedd for shared port id schedd_507095_91f3
> 09/23/24 17:06:47 Can't open directory "/etc/condor/passwords.d" as
> PRIV_ROOT, errno: 13 (Permission denied)
> 09/23/24 17:06:47 Can't open directory "/etc/condor/passwords.d" as
> PRIV_ROOT, errno: 13 (Permission denied)
> 09/23/24 17:06:47 Directory::Rewind(): path
> "/home/sel/.condor/tokens.d" does not exist (yet)
> 09/23/24 17:06:47 SharedPortClient: sent connection request to local
> schedd for shared port id schedd_507095_91f3
> 09/23/24 17:06:47 Can't open directory "/etc/condor/passwords.d" as
> PRIV_ROOT, errno: 13 (Permission denied)
> 09/23/24 17:06:47 Can't open directory "/etc/condor/passwords.d" as
> PRIV_ROOT, errno: 13 (Permission denied)
> 09/23/24 17:06:47 Directory::Rewind(): path
> "/home/sel/.condor/tokens.d" does not exist (yet)
> 09/23/24 17:06:47 Response for GET_JOB_CONNECT_INFO:
> CondorVersion = "$CondorVersion: 23.9.6 2024-08-08 BuildID: 748275
> PackageID: 23.9.6-1.1 GitSHA: dfdd9eaa $"
> RemoteHost = "slot2_1@xxxxxxxxxxxx"
> Result = true
> StarterIpAddr = "<10.10.0.40:9618?addrs=10.10.0.40-
> 9618&alias=master11.sel&noUDP&sock=slot2_1_1191_eaca_3>"
> 
> 09/23/24 17:06:47 Can't open directory "/etc/condor/passwords.d" as
> PRIV_ROOT, errno: 13 (Permission denied)
> 09/23/24 17:06:47 Can't open directory "/etc/condor/passwords.d" as
> PRIV_ROOT, errno: 13 (Permission denied)
> 09/23/24 17:06:47 Can't open directory "/etc/condor/passwords.d" as
> PRIV_ROOT, errno: 13 (Permission denied)
> 09/23/24 17:06:47 Got connect info for starter
> <10.10.0.40:9618?addrs=10.10.0.40-
> 9618&alias=master11.sel&noUDP&sock=slot2_1_1191_eaca_3>
> 09/23/24 17:06:47 SharedPortClient: sent connection request to
> starter
> at <10.10.0.40:9618> for shared port id slot2_1_1191_eaca_3
> 09/23/24 17:06:49 Executing ssh command: ssh -oUser=nobody
> -oIdentityFile=/tmp/sel.condor_ssh_to_job_d9b21be9/ssh_key
> -oStrictHostKeyChecking=yes
> -oUserKnownHostsFile=/tmp/sel.condor_ssh_to_job_d9b21be9/known_hosts
> -oGlobalKnownHostsFile=/tmp/sel.condor_ssh_to_job_d9b21be9/known_host
> s
> -oProxyCommand="condor_ssh_to_job"' '"-debug"' '"-proxy"'
> '"/tmp/sel.condor_ssh_to_job_d9b21be9/fdpass" condor-job.master11.sel
> -S none
> 09/23/24 17:06:49 Reading condor configuration from
> '/etc/condor/condor_config'
> 09/23/24 17:06:49 Setting up ssh proxy on file descriptor 4
> 09/23/24 17:06:49 Passed ssh connection to ssh proxy.
> nobody@xxxxxxxxxxxxxxxxxxxxxxx's password: 
> 
> 
> 
> 
> On Mon, 2024-09-23 at 08:23 -0500, Greg Thain via HTCondor-users
> wrote:
> > On 9/21/24 7:34 AM, Valerio Bellizzomi wrote:
> > > I am trying to do condor_ssh_to_job 203.0 but it fails after
> > > password
> > > request as it tries to login as user nobody which is a non-
> > > existent
> > > user on the EP machine.
> > > 
> > > How do I specify another user to login with?
> > 
> > The sshd that condor_ssh_to_job talks to is spawned by the starter
> > as 
> > the user who runs the job, and there is no way to change that. 
> > However, 
> > condor_ssh_to_job sets up an ssh keypair to use, so it should never
> > fall 
> > back to requested an interactive password.  What does
> > condor_ssh_to_job 
> > -v 203.0 report?
> > 
> > 
> > -greg
> > 
> > _______________________________________________
> > HTCondor-users mailing list
> > To unsubscribe, send a message to 
> > htcondor-users-request@xxxxxxxxxxx
> > with a
> > subject: Unsubscribe
> > You can also unsubscribe by visiting
> > https://lists.cs.wisc.edu/mailman/listinfo/htcondor-users
> > 
> > The archives can be found at:
> > https://lists.cs.wisc.edu/archive/htcondor-users/
> 
> _______________________________________________
> HTCondor-users mailing list
> To unsubscribe, send a message to htcondor-users-request@xxxxxxxxxxx
> with a
> subject: Unsubscribe
> You can also unsubscribe by visiting
> https://lists.cs.wisc.edu/mailman/listinfo/htcondor-users
> 
> The archives can be found at:
> https://lists.cs.wisc.edu/archive/htcondor-users/