Re: [HTCondor-users] condor_q -g not working for users

[Todd Tannenbaum <tannenba@xxxxxxxxxxx>]

    Hi Ram Ban,
    
    The problem is you are running condor_q to a remote Access Point,
    and the Access Point (specifically the schedd)  wants to know who is
    running condor_q on the remote host so it can return only the jobs
    for that user.
    
    One suggestion to make it work like you expected: 
    
    You could add the following config file to your HTCondor config.d
    folder:
    
      SEC_READ_AUTHENTICATION_METHODS =
    $(SEC_DEFAULT_AUTHENTICATION_METHODS) CLAIMTOBE
      SEC_CLIENT_AUTHENTICATION_METHODS =
    $(SEC_DEFAULT_AUTHENTICATION_METHODS) CLAIMTOBE
    
    You will want to do this on both your Access Point host(s), and on
    the host(s) where you are running condor_q.  Do not forget to run
    condor_reconfig after any change to the config files.
    
    The above tells HTCondor daemons (e.g. the schedd) that for READ
    only access, it can trust the client (e.g. condor_q) to simply tell
    it who it is without any hard proof (such as tokens or passwords). 
    
    Disclaimer: Using CLAIMTOBE authentication is convenient because it
    does not require any setup with tokens etc ..... but.... be
    careful.  If you do not care about restricting who is allowed to
    have READ access to HTCondor (e.g. condor_q, condor_status), the
    above is safe... however you most definitely do NOT want to add
    "CLAIMTOBE" to any other authorization level other than READ !!!!!  
    
    Hope the above helps
    Todd

---

From: HTCondor-users <htcondor-users-bounces@xxxxxxxxxxx> on behalf of Ram Ban <ramban046@xxxxxxxxx>
Sent: Thursday, March 19, 2026 1:07 PM
To: HTCondor-Users Mail List <htcondor-users@xxxxxxxxxxx>
Subject: [HTCondor-users] condor_q -g not working for users

Hi,

I have updated my system from condor version 10 to latest condor version 25, 

I notice that condor_q -g commands fail with Authentication errors, But condor_q -all -g works fine, 

All other things run fine, and I have verified password file, UID domain as well, everything is fine.

It seems there is some behaviour change?

I have attached ss of error.

Thanks and Regards 

Raman

_______________________________________________
HTCondor-users mailing list
To unsubscribe, send a message to htcondor-users-request@xxxxxxxxxxx with a
subject: Unsubscribe

The archives can be found at: https://www-auth.cs.wisc.edu/lists/htcondor-users/ 

-- 
Todd Tannenbaum <tannenba@xxxxxxxxxxx>  University of Wisconsin-Madison
Center for High Throughput Computing    Department of Computer Sciences
Calendar: https://tinyurl.com/yd55mtgd  1205 University Ave.
Phone: (608) 263-7132                   Madison, WI 53706
Personal Zoom Room: https://uwmadison.zoom.us/my/tannenba