Re: [HTCondor-users] Execute nodes failing to authenticate to condor-ce collector

[John M Knoeller <johnkn@xxxxxxxxxxx>]

Ok,  so 23.0 will use the same security configuration as 24.0,  so updating your execute node from 23.0 to 24.0 is not the problem. 

Have a look at the CollectorLog  of the Condor CE collector, it should have messages indicating why it is refusing to allow the execute nodes to send ads.

You may need to change the logging level of the CE collector first.   Add this line to your CE collector config

COLLECTOR_DEBUG = $(COLLECTOR_DEBUG) D_SECURITY

and then run condor_reconfig to restart the CE collector,  then when you get

required authentication of <IP address> failed: AUTHENTICATE:1003:Failed to authenticate with any method... 

on the execution point,  look at the timestamp on the message and then look in the CE CollectorLog at that same timestamp to see why the collector is refusing.  

-tj

---

From: Eraldo Jr <eusoueraldo@xxxxxxxxx>
Sent: Friday, May 30, 2025 9:24 AM
To: HTCondor-Users Mail List <htcondor-users@xxxxxxxxxxx>
Cc: John M Knoeller <johnkn@xxxxxxxxxxx>
Subject: Re: [HTCondor-users] Execute nodes failing to authenticate to condor-ce collector

Hi John,

thanks for jumping on this to help.

I came from this version 

$CondorVersion: 23.0.14 2024-08-07 BuildID: 748154 PackageID: 23.0.14-1 $

$CondorPlatform: x86_64_AlmaLinux9 $

On Thu, May 29, 2025 at 1:59âPM John M Knoeller via HTCondor-users <htcondor-users@xxxxxxxxxxx> wrote:

What was your previous version?   Did you update from a much older version like 9.x? or is this an update from 24.0.6 ?

-tj

---

From: HTCondor-users <htcondor-users-bounces@xxxxxxxxxxx> on behalf of Eraldo Jr <eusoueraldo@xxxxxxxxx>
Sent: Thursday, May 29, 2025 11:03 AM
To: HTCondor-Users Mail List <htcondor-users@xxxxxxxxxxx>
Subject: [HTCondor-users] Execute nodes failing to authenticate to condor-ce collector

 

Hello all,

I'm noticing that all my execute nodes are failing to authenticate with my condor-ce collector.

Example error:

required authentication of <IP address> failed: AUTHENTICATE:1003:Failed to authenticate with any method|AUTHENTICATE:1004:Failed to authenticate using IDTOKENS

In the previous versions I''ve never needed to worry about that. How should I proceed?

$CondorVersion: 24.0.7 2025-04-22 BuildID: 803687 PackageID: 24.0.7-1 GitSHA: 51b71b5c $
$CondorPlatform: x86_64_AlmaLinux9 $

Thanks in advance,

Eraldo

_______________________________________________
HTCondor-users mailing list
To unsubscribe, send a message to htcondor-users-request@xxxxxxxxxxx with a
subject: Unsubscribe

Join us in June at Throughput Computing 25: https://osg-htc.org/htc25

The archives can be found at: https://www-auth.cs.wisc.edu/lists/htcondor-users/