We are running a cluster with the “condor” account being named “ltscondor” with uid = 29000.
CONDOR_IDS=29000.29000 is in our configuration.
The central manager setting is
condor_config_val ALLOW_ADMINISTRATOR
condor@*,condor@password,root@*,ltscondor@xxxxxxxxxx/*
trying to do a drain job as root on an execute node is generating this error in the /var/log/condor/StartLog:
04/15/25 11:25:22 PERMISSION DENIED to ltscondor@xxxxxxxxxx from host 155.37.253.155 for command 512 (DRAIN_JOBS), access level ADMINISTRATOR: reason: ADMINISTRATOR authorization policy contains no matching ALLOW entry
for this request; identifiers used for this host: 155.37.253.155,zirconium.nmrbox.org, hostname size = 1, original ip address = 155.37.253.155
How do I make this work?