Re: [HTCondor-users] file open error on AP side from DELEGATE_GSI_CRED_SCHEDD

[Stefano Belforte <stefano.belforte@xxxxxxx>]

another data point.

I have changed permissions of the proxy file in the AP to be readable by 
everybody:
chmod 644Â (yeah, not ideal). After that the error message in SchedLog 
changes to


04/09/26 16:26:20 Remote entity presented valid token with payload 
{"iat":1642519166,"iss":"\"cmsgwms-global.cern.ch\"","jti":"01be75a9f9845eebe786f9a17d2461f7","sub":"crabtw@cms"}.
04/09/26 16:26:20 (cid:198458) Command=DELEGATE_GSI_CRED_SCHEDD, 
peer=<137.138.159.63:38291>
04/09/26 16:26:20 (cid:198458) AuthMethod=IDTOKENS, AuthId=(null), 
CondorId=crabtw@cms
04/09/26 16:26:20 ReliSock::get_x509_delegation_finish(): delegation 
failed to complete: Failed to open proxy file
04/09/26 16:26:20 (cid:198458) Refresh GSI cred for job 10414862.0 failed

which somehow suggests that the previous fopen(...,r) failure is now 
resolved.

Maybe schedd was using a different identity that crabtw (condor ?) to 
open the flle ?

Much to my surprise the message stays the same "Failed to open proxy file"
even if I changed the proxy file to chmod 666 i.e. everybody can write

-rw-rw-rw- 1 crabtw zh 15495 Apr 9 16:19 
/etc/condor/condor_local/spool/4862/0/cluster10414862.proc0.subproc0/c6ea75e904ebb26531217d954bd562c96db20c11

Shall we simply assume that DELEGATE_GSI_CRED_SCHEDD is broken forever ?


Thanks again

Stefano