[HTCondor-users] Authentication on Windows without a domain

[BADAWI Marwan <marwan.badawi@xxxxxxxxxxx>]

Hello all,

 

We are running a trial setup between individual Windows machines that each only have local users and no domain authentication. (If it helps, they have the same username account with the same password).

 

I cannot seem to find a way to allow condor to correctly authenticate and run jobs. Ikeep getting a security error in the SchedLog: “Seteffectiveowner security violation setting user to de-authorized user <username@submittingmachine>”

 

I activated HOST_BASED security and used ALLOW_* variables to only allow hosts in the same subnet like this (as taken from the Host Based Security web page):

ALLOW_READ = 192.168.1.*

ALLOW_WRITE = 192.168.1.*

ALLOW_NEGOTIATOR = 192.168.1.*

ALLOW_NEGOTIATOR_SCHEDD = 192.168.1.*

ALLOW_WRITE_COLLECTOR = 192.168.1.*

ALLOW_WRITE_STARTD    = 192.168.1.*

ALLOW_READ_COLLECTOR  = 192.168.1.*

ALLOW_READ_STARTD     = 192.168.1.*

ALLOW_CLIENT = 192.168.1.*

 

But it doesn’t seem to suffice.

 

RUN_AS_USER is deactivated in both the condor and job configurations.

 

Can anyone help with this issue?

 

Thank you!

 

Marwan Badawi