[HTCondor-users] [condor 23.x] PERMISSION DENIED after 23.10.x upgrade

[Francesco Di Nucci <francesco.dinucci@xxxxxxxxxx>]

Hello,

I've upgraded HTCondor from 23.10.2 to 23.10.21 on some EL9 pool 
execution points/computational nodes and condor stops working, even if 
the configuration has not been changed.

Before the upgrade these are the installed packages:

condor-23.10.2-1.el9.x86_64
condor-upgrade-checks-23.10.19-1.el9.x86_64
python3-condor-23.10.2-1.el9.x86_64

and for example it works with

$ sudo condor_reconfig
Sent "Reconfig" command to local master

After upgrading and rebooting, these are the installed packages:

condor-23.10.21-1.el9.x86_64
condor-upgrade-checks-23.10.21-1.el9.x86_64
python3-condor-23.10.21-1.el9.x86_64

and condor stops working, for example:

$ sudo condor_reconfig
ERROR
SECMAN:2010:Received "DENIED" from server for user condor@password using 
method IDTOKENS.
Can't send Reconfig command to local master

Relevant log entry seems to be in MasterLog:

PERMISSION DENIED to condor@password from host 10.137.2.44 for command 
60012 (DC_RECONFIG_FULL), access level ADMINISTRATOR: reason: 
ADMINISTRATOR authorization policy contains no matching ALLOW entry for 
this request; identifiers used for this host: 
10.137.2.44,xc-wn001.na.infn.it, hostname size = 1, original ip address 
= 10.137.2.44

Has it happened to someone else? Have there been any changes to the auth 
settings?

Thanks in advance

--
Francesco Di Nucci
System Administrator
Compute & Networking Service, INFN Naples

Email: francesco.dinucci@xxxxxxxxxx