Thanks Jason. I believe that was the final piece and things are working now.
So in the /etc/condor/condor_config file I added:
TRUST_UID_DOMAIN = true
Each ârole" file e.g. /etc/condor/config.d/01-execute.config has the same FQDN value for CONDOR_HOST.
Each hosts file has an entry for the CM.
Thanks for all the help.
JK
On Sep 24, 2025, at 1:11âPM, Jason Patton via HTCondor-users <htcondor-users@xxxxxxxxxxx> wrote:
External Email - Use Caution
Hi Justin,
Yes, it does matter if the domain isn't real unless you set TRUST_UID_DOMAIN:
"As an added security precaution when HTCondor is about to spawn a job, it ensures that the UID_DOMAIN of a given access point is a substring of that machineâs fully-qualified host name."
Note that if you set FILESYSTEM_DOMAIN to be the same on your APs and EPs, then condor assumes the same files exist at the same locations on both machines, and file transfer will not occur unless the job specifically asks for file transfer.
Jason
Thanks Benedikt.
I added/changed the configs on each machine so that condor_config_val UID_DOMAIN and FILESYSTEM_DOMAIN return the same thing:
timehole.org. Now the jobs canât even write the output and error files and are held immediately with HOLD_REASON Failed to open [output fle] as standard output: Permission denied (errno 13).
In the central manager (CM) and execution point (EP) /etc/condor/condor_config file I added:
UID_DOMAIN = timehole.og
The CM is also the access point/submit machine.
The nfs/autofs configuration seems correct to me - I can login to each machine and read/write the shared home directory.
Does it matter that the domain name,
timehole.org, isnât real? I manually edited the /etc/hosts file so the CM can resolve the fake FQDN of each EP.
JK
External Email - Use Caution
This may be an issue with your config, see
Hello. My blender rendering job cannot write the output to my home directory. Using whoami in the script shows the user is nobody and so the write fails with permission denied. The output and error files are written properly so I guess that is done under
my account. I have autofs configured to share the home directory. Iâm able to run a simple shell script job without issues so I think it is setup properly.
How can I specify/control the user that executes the script? How can the output and error files be written but not the render output?
Thanks,
JK
_______________________________________________
HTCondor-users mailing list
To unsubscribe, send a message to
htcondor-users-request@xxxxxxxxxxx with a
subject: Unsubscribe
The archives can be found at:
https://www-auth.cs.wisc.edu/lists/htcondor-users/
--
Benedikt Riedel
IceCube Neutrino Observatory
Accelerated AI Algorithms for Data-Driven Discovery
University of Wisconsin-Madison
_______________________________________________
HTCondor-users mailing list
To unsubscribe, send a message to
htcondor-users-request@xxxxxxxxxxx with a
subject: Unsubscribe
The archives can be found at:
https://www-auth.cs.wisc.edu/lists/htcondor-users/
_______________________________________________
HTCondor-users mailing list
To unsubscribe, send a message to htcondor-users-request@xxxxxxxxxxx with a
subject: Unsubscribe
The archives can be found at: https://www-auth.cs.wisc.edu/lists/htcondor-users/
|