Re: [HTCondor-users] file open error on AP side from DELEGATE_GSI_CRED_SCHEDD

[Jaime Frey <jfrey@xxxxxxxxxxx>]

Thanks for detailed report.

It looks like this broke in HTCondor 24.7.3.

Iâve opened a ticket and will make a fix: https://opensciencegrid.atlassian.net/browse/HTCONDOR-3660

You can work around the bug by re-adding this to your configuration:

DELEGATE_JOB_GSI_CREDENTIALS=False

 - Jaime

On Apr 9, 2026, at 10:05âAM, Stefano Belforte via HTCondor-users <htcondor-users@xxxxxxxxxxx> wrote:

and this is after setting SCHEDD_DEBUG=D_PRIV,D_SECURITY to
track internal username switching

.
04/09/26 17:02:44 IPVERIFY: for crab-dev-tw01.cern.ch matched 137.138.159.63 to 137.138.159.63
04/09/26 17:02:44 PERMISSION GRANTED to crabtw@cms from host 137.138.159.63 for command 499 (DELEGATE_GSI_CRED_SCHEDD), access level WRITE: reason: WRITE authorization policy allows IP address 137.138.159.63; identifiers used for this remote host: 137.138.159.63,crab-dev-tw01.cern.ch
04/09/26 17:02:44 SESSION: server duplicated AES to BLOWFISH key for UDP.
04/09/26 17:02:44 DC_AUTHENTICATE: added incoming session id vocms059:2923830:1775746964:28 to cache for 80 seconds (lease is 3620s, return address is ).
04/09/26 17:02:44 PRIV_CONDOR --> PRIV_ROOT at /var/lib/condor/execute/slot1/dir_3041422/scratch/userdir/build-b0FsGA/BUILD/condor-25.0.8/src/condor_utils/uids.cpp:1244
04/09/26 17:02:44 PRIV_ROOT --> PRIV_CONDOR at /var/lib/condor/execute/slot1/dir_3041422/scratch/userdir/build-b0FsGA/BUILD/condor-25.0.8/src/condor_utils/uids.cpp:1246
04/09/26 17:02:44 PRIV_CONDOR --> PRIV_USER at /var/lib/condor/execute/slot1/dir_3041422/scratch/userdir/build-b0FsGA/BUILD/condor-25.0.8/src/condor_schedd.V6/schedd.cpp:6766
04/09/26 17:02:44 PRIV_USER --> PRIV_CONDOR at /var/lib/condor/execute/slot1/dir_3041422/scratch/userdir/build-b0FsGA/BUILD/condor-25.0.8/src/condor_schedd.V6/schedd.cpp:6814
04/09/26 17:02:44 ReliSock::get_x509_delegation_finish(): delegation failed to complete: Failed to open proxy file


_______________________________________________
HTCondor-users mailing list
To unsubscribe, send a message to htcondor-users-request@xxxxxxxxxxx with a
subject: Unsubscribe

The archives can be found at: https://www-auth.cs.wisc.edu/lists/htcondor-users/