Re: [HTCondor-users] [Fwd: Re: Condor_ssh_to_job fails]

[Valerio Bellizzomi <valerio@xxxxxxxxxx>]

Thank you for the info Matthew.

Kind Regards
VB

On Tue, 2024-09-24 at 20:19 +0100, Matthew T West via HTCondor-users
wrote:
> Hi Valerio,
> 
> A number of CHTC staff / developers are currently in Amsterdam at
> the 
> European HTCondor workshop this week, so are a bit busy at the
> moment. 
> So your *request* for assistance may be as quickly picked up.
> 
> Cheers,
> Matt
> 
> Matthew T. West
> DevOps & HPC SysAdmin
> University of Exeter, Research IT
> 57 Laver Building, North Park Road, Exeter, EX4 4QE, United Kingdom
> 
> On 24/09/2024 19:39, Valerio Bellizzomi wrote:
> > CAUTION: This email originated from outside of the organisation. Do
> > not click links or open attachments unless you recognise the sender
> > and know the content is safe.
> > 
> > 
> > Dear Sirs, what do you think of this error (errno 13 Permission
> > Denied)
> > Can we debug this please?
> > 
> > Kind Regards
> > VB
> > 
> > -------- Forwarded Message --------
> > From: Valerio Bellizzomi <valerio@xxxxxxxxxx>
> > Reply-To: HTCondor-Users Mail List <htcondor-users@xxxxxxxxxxx>
> > To: htcondor-users@xxxxxxxxxxx
> > Subject: Re: [HTCondor-users] Condor_ssh_to_job fails
> > Date: Mon, 23 Sep 2024 17:09:21 +0200
> > Mailer: Evolution 3.28.5 (3.28.5-18.el8)
> > 
> > > However condor_ssh_to_job -debug 203.0
> > > 
> > > 09/23/24 17:06:47 Reading condor configuration from
> > > '/etc/condor/condor_config'
> > > 09/23/24 17:06:47 SharedPortClient: sent connection request to
> > > local
> > > schedd for shared port id schedd_507095_91f3
> > > 09/23/24 17:06:47 Can't open directory "/etc/condor/passwords.d"
> > > as
> > > PRIV_ROOT, errno: 13 (Permission denied)
> > > 09/23/24 17:06:47 Can't open directory "/etc/condor/passwords.d"
> > > as
> > > PRIV_ROOT, errno: 13 (Permission denied)
> > > 09/23/24 17:06:47 Directory::Rewind(): path
> > > "/home/sel/.condor/tokens.d" does not exist (yet)
> > > 09/23/24 17:06:47 SharedPortClient: sent connection request to
> > > local
> > > schedd for shared port id schedd_507095_91f3
> > > 09/23/24 17:06:47 Can't open directory "/etc/condor/passwords.d"
> > > as
> > > PRIV_ROOT, errno: 13 (Permission denied)
> > > 09/23/24 17:06:47 Can't open directory "/etc/condor/passwords.d"
> > > as
> > > PRIV_ROOT, errno: 13 (Permission denied)
> > > 09/23/24 17:06:47 Directory::Rewind(): path
> > > "/home/sel/.condor/tokens.d" does not exist (yet)
> > > 09/23/24 17:06:47 Response for GET_JOB_CONNECT_INFO:
> > > CondorVersion = "$CondorVersion: 23.9.6 2024-08-08 BuildID:
> > > 748275
> > > PackageID: 23.9.6-1.1 GitSHA: dfdd9eaa $"
> > > RemoteHost = "slot2_1@xxxxxxxxxxxx"
> > > Result = true
> > > StarterIpAddr = "<10.10.0.40:9618?addrs=10.10.0.40-
> > > 9618&alias=master11.sel&noUDP&sock=slot2_1_1191_eaca_3>"
> > > 
> > > 09/23/24 17:06:47 Can't open directory "/etc/condor/passwords.d"
> > > as
> > > PRIV_ROOT, errno: 13 (Permission denied)
> > > 09/23/24 17:06:47 Can't open directory "/etc/condor/passwords.d"
> > > as
> > > PRIV_ROOT, errno: 13 (Permission denied)
> > > 09/23/24 17:06:47 Can't open directory "/etc/condor/passwords.d"
> > > as
> > > PRIV_ROOT, errno: 13 (Permission denied)
> > > 09/23/24 17:06:47 Got connect info for starter
> > > <10.10.0.40:9618?addrs=10.10.0.40-
> > > 9618&alias=master11.sel&noUDP&sock=slot2_1_1191_eaca_3>
> > > 09/23/24 17:06:47 SharedPortClient: sent connection request to
> > > starter
> > > at <10.10.0.40:9618> for shared port id slot2_1_1191_eaca_3
> > > 09/23/24 17:06:49 Executing ssh command: ssh -oUser=nobody
> > > -oIdentityFile=/tmp/sel.condor_ssh_to_job_d9b21be9/ssh_key
> > > -oStrictHostKeyChecking=yes
> > > -oUserKnownHostsFile=/tmp/sel.condor_ssh_to_job_d9b21be9/known_ho
> > > sts
> > > -oGlobalKnownHostsFile=/tmp/sel.condor_ssh_to_job_d9b21be9/known_
> > > host
> > > s
> > > -oProxyCommand="condor_ssh_to_job"' '"-debug"' '"-proxy"'
> > > '"/tmp/sel.condor_ssh_to_job_d9b21be9/fdpass" condor-
> > > job.master11.sel
> > > -S none
> > > 09/23/24 17:06:49 Reading condor configuration from
> > > '/etc/condor/condor_config'
> > > 09/23/24 17:06:49 Setting up ssh proxy on file descriptor 4
> > > 09/23/24 17:06:49 Passed ssh connection to ssh proxy.
> > > nobody@xxxxxxxxxxxxxxxxxxxxxxx's password:
> > > 
> > > 
> > > 
> > > 
> > > On Mon, 2024-09-23 at 08:23 -0500, Greg Thain via HTCondor-users
> > > wrote:
> > > > On 9/21/24 7:34 AM, Valerio Bellizzomi wrote:
> > > > > I am trying to do condor_ssh_to_job 203.0 but it fails after
> > > > > password
> > > > > request as it tries to login as user nobody which is a non-
> > > > > existent
> > > > > user on the EP machine.
> > > > > 
> > > > > How do I specify another user to login with?
> > > > The sshd that condor_ssh_to_job talks to is spawned by the
> > > > starter
> > > > as
> > > > the user who runs the job, and there is no way to change that.
> > > > However,
> > > > condor_ssh_to_job sets up an ssh keypair to use, so it should
> > > > never
> > > > fall
> > > > back to requested an interactive password.  What does
> > > > condor_ssh_to_job
> > > > -v 203.0 report?
> > > > 
> > > > 
> > > > -greg
> > > > 
> > > > _______________________________________________
> > > > HTCondor-users mailing list
> > > > To unsubscribe, send a message to
> > > > htcondor-users-request@xxxxxxxxxxx
> > > > with a
> > > > subject: Unsubscribe
> > > > You can also unsubscribe by visiting
> > > > https://lists.cs.wisc.edu/mailman/listinfo/htcondor-users
> > > > 
> > > > The archives can be found at:
> > > > https://lists.cs.wisc.edu/archive/htcondor-users/
> > > _______________________________________________
> > > HTCondor-users mailing list
> > > To unsubscribe, send a message to 
> > > htcondor-users-request@xxxxxxxxxxx
> > > with a
> > > subject: Unsubscribe
> > > You can also unsubscribe by visiting
> > > https://lists.cs.wisc.edu/mailman/listinfo/htcondor-users
> > > 
> > > The archives can be found at:
> > > https://lists.cs.wisc.edu/archive/htcondor-users/
> > _______________________________________________
> > HTCondor-users mailing list
> > To unsubscribe, send a message to 
> > htcondor-users-request@xxxxxxxxxxx with a
> > subject: Unsubscribe
> > You can also unsubscribe by visiting
> > https://lists.cs.wisc.edu/mailman/listinfo/htcondor-users
> > 
> > The archives can be found at:
> > https://lists.cs.wisc.edu/archive/htcondor-users/
> _______________________________________________
> HTCondor-users mailing list
> To unsubscribe, send a message to htcondor-users-request@xxxxxxxxxxx
> with a
> subject: Unsubscribe
> You can also unsubscribe by visiting
> https://lists.cs.wisc.edu/mailman/listinfo/htcondor-users
> 
> The archives can be found at:
> https://lists.cs.wisc.edu/archive/htcondor-users/