Re: [HTCondor-users] [Fwd: Re: Condor_ssh_to_job fails]

[Matthew T West <m.t.west@xxxxxxxxxxxx>]

Hi Valerio,

A number of CHTC staff / developers are currently in Amsterdam at the 
European HTCondor workshop this week, so are a bit busy at the moment. 
So your *request* for assistance may be as quickly picked up.

Cheers,
Matt

Matthew T. West
DevOps & HPC SysAdmin
University of Exeter, Research IT
57 Laver Building, North Park Road, Exeter, EX4 4QE, United Kingdom

On 24/09/2024 19:39, Valerio Bellizzomi wrote:
> CAUTION: This email originated from outside of the organisation. Do not click links or open attachments unless you recognise the sender and know the content is safe.
>
>
> Dear Sirs, what do you think of this error (errno 13 Permission Denied)
> Can we debug this please?
>
> Kind Regards
> VB
>
> -------- Forwarded Message --------
> From: Valerio Bellizzomi <valerio@xxxxxxxxxx>
> Reply-To: HTCondor-Users Mail List <htcondor-users@xxxxxxxxxxx>
> To: htcondor-users@xxxxxxxxxxx
> Subject: Re: [HTCondor-users] Condor_ssh_to_job fails
> Date: Mon, 23 Sep 2024 17:09:21 +0200
> Mailer: Evolution 3.28.5 (3.28.5-18.el8)
>
> > However condor_ssh_to_job -debug 203.0
> >
> > 09/23/24 17:06:47 Reading condor configuration from
> > '/etc/condor/condor_config'
> > 09/23/24 17:06:47 SharedPortClient: sent connection request to local
> > schedd for shared port id schedd_507095_91f3
> > 09/23/24 17:06:47 Can't open directory "/etc/condor/passwords.d" as
> > PRIV_ROOT, errno: 13 (Permission denied)
> > 09/23/24 17:06:47 Can't open directory "/etc/condor/passwords.d" as
> > PRIV_ROOT, errno: 13 (Permission denied)
> > 09/23/24 17:06:47 Directory::Rewind(): path
> > "/home/sel/.condor/tokens.d" does not exist (yet)
> > 09/23/24 17:06:47 SharedPortClient: sent connection request to local
> > schedd for shared port id schedd_507095_91f3
> > 09/23/24 17:06:47 Can't open directory "/etc/condor/passwords.d" as
> > PRIV_ROOT, errno: 13 (Permission denied)
> > 09/23/24 17:06:47 Can't open directory "/etc/condor/passwords.d" as
> > PRIV_ROOT, errno: 13 (Permission denied)
> > 09/23/24 17:06:47 Directory::Rewind(): path
> > "/home/sel/.condor/tokens.d" does not exist (yet)
> > 09/23/24 17:06:47 Response for GET_JOB_CONNECT_INFO:
> > CondorVersion = "$CondorVersion: 23.9.6 2024-08-08 BuildID: 748275
> > PackageID: 23.9.6-1.1 GitSHA: dfdd9eaa $"
> > RemoteHost = "slot2_1@xxxxxxxxxxxx"
> > Result = true
> > StarterIpAddr = "<10.10.0.40:9618?addrs=10.10.0.40-
> > 9618&alias=master11.sel&noUDP&sock=slot2_1_1191_eaca_3>"
> >
> > 09/23/24 17:06:47 Can't open directory "/etc/condor/passwords.d" as
> > PRIV_ROOT, errno: 13 (Permission denied)
> > 09/23/24 17:06:47 Can't open directory "/etc/condor/passwords.d" as
> > PRIV_ROOT, errno: 13 (Permission denied)
> > 09/23/24 17:06:47 Can't open directory "/etc/condor/passwords.d" as
> > PRIV_ROOT, errno: 13 (Permission denied)
> > 09/23/24 17:06:47 Got connect info for starter
> > <10.10.0.40:9618?addrs=10.10.0.40-
> > 9618&alias=master11.sel&noUDP&sock=slot2_1_1191_eaca_3>
> > 09/23/24 17:06:47 SharedPortClient: sent connection request to
> > starter
> > at <10.10.0.40:9618> for shared port id slot2_1_1191_eaca_3
> > 09/23/24 17:06:49 Executing ssh command: ssh -oUser=nobody
> > -oIdentityFile=/tmp/sel.condor_ssh_to_job_d9b21be9/ssh_key
> > -oStrictHostKeyChecking=yes
> > -oUserKnownHostsFile=/tmp/sel.condor_ssh_to_job_d9b21be9/known_hosts
> > -oGlobalKnownHostsFile=/tmp/sel.condor_ssh_to_job_d9b21be9/known_host
> > s
> > -oProxyCommand="condor_ssh_to_job"' '"-debug"' '"-proxy"'
> > '"/tmp/sel.condor_ssh_to_job_d9b21be9/fdpass" condor-job.master11.sel
> > -S none
> > 09/23/24 17:06:49 Reading condor configuration from
> > '/etc/condor/condor_config'
> > 09/23/24 17:06:49 Setting up ssh proxy on file descriptor 4
> > 09/23/24 17:06:49 Passed ssh connection to ssh proxy.
> > nobody@xxxxxxxxxxxxxxxxxxxxxxx's password:
> >
> >
> >
> >
> > On Mon, 2024-09-23 at 08:23 -0500, Greg Thain via HTCondor-users
> > wrote:
> > > On 9/21/24 7:34 AM, Valerio Bellizzomi wrote:
> > > > I am trying to do condor_ssh_to_job 203.0 but it fails after
> > > > password
> > > > request as it tries to login as user nobody which is a non-
> > > > existent
> > > > user on the EP machine.
> > > >
> > > > How do I specify another user to login with?
> > > The sshd that condor_ssh_to_job talks to is spawned by the starter
> > > as
> > > the user who runs the job, and there is no way to change that.
> > > However,
> > > condor_ssh_to_job sets up an ssh keypair to use, so it should never
> > > fall
> > > back to requested an interactive password.  What does
> > > condor_ssh_to_job
> > > -v 203.0 report?
> > >
> > >
> > > -greg
> > >
> > > _______________________________________________
> > > HTCondor-users mailing list
> > > To unsubscribe, send a message to
> > > htcondor-users-request@xxxxxxxxxxx
> > > with a
> > > subject: Unsubscribe
> > > You can also unsubscribe by visiting
> > > https://lists.cs.wisc.edu/mailman/listinfo/htcondor-users
> > >
> > > The archives can be found at:
> > > https://lists.cs.wisc.edu/archive/htcondor-users/
> > _______________________________________________
> > HTCondor-users mailing list
> > To unsubscribe, send a message to htcondor-users-request@xxxxxxxxxxx
> > with a
> > subject: Unsubscribe
> > You can also unsubscribe by visiting
> > https://lists.cs.wisc.edu/mailman/listinfo/htcondor-users
> >
> > The archives can be found at:
> > https://lists.cs.wisc.edu/archive/htcondor-users/
> _______________________________________________
> HTCondor-users mailing list
> To unsubscribe, send a message to htcondor-users-request@xxxxxxxxxxx with a
> subject: Unsubscribe
> You can also unsubscribe by visiting
> https://lists.cs.wisc.edu/mailman/listinfo/htcondor-users
>
> The archives can be found at:
> https://lists.cs.wisc.edu/archive/htcondor-users/