[HTCondor-users] sudo condor_reconfig failing with error about condor@password

[Lee Damon <lvd@xxxxxx>]

In the past I was able to have puppet issue a 'condor_reconfig' command when I updated a config file. I'm now trying to do the same with ansible and notice that it no longer works for either method.Â

I tested it manually and yep, fail:

: || root@betty ~ [8] ; sudo condor_reconfig
ERROR
SECMAN:2010:Received "DENIED" from server for user condor@password using method IDTOKENS.
Can't send Reconfig command to local master

while a different host complains about a different condor@ user:

: || lvd@gertrude ~ [1050] ; sudo condor_reconfig
ERROR
SECMAN:2010:Received "DENIED" from server for user condor@mypool using method IDTOKENS.
Can't send Reconfig command to local master

I've verified that "root@*" and "condor@$(TRUST_DOMAIN)" are included in ALLOW_ADMINISTRATOR.

When I add condor@* to ALLOW_ADMIN it works but that seems ... off.

Is there some other way I should be dealing with this or should I just put "condor@*" in and call it good?

thanks,

nomadÂ

--

CHSCC work days are Mondays, Tuesdays, and every other Wednesday.

BITE work days are Thursdays, Fridays, and the other Wednesdays.