Re: [condor-users] condor-g puts jobs on hold when using proxy-draftcompliance proxy

[Gaurang Mehta <gmehta@xxxxxxx>]

Another side effect of having the older gsi/openssl in condor is that with 
NPACI SDSC hostcerts the clients interepret the host dn differently.

Globus-2.4+3.0.2 (old openssl) interprests the OID string in the host cert 
as 

USERID=<hostname>

whereas Globus-3.2 (new openssl) interprets the OID string as 

UID=<hostname>

This requires the CA sigining policy to be changed on the user end. but if 
normally a user uses globus-3.2 everything works fine but using condor 
will cause authentication failure as it wont be able to verify the host 
cert cause job submission failure.

Is there a chance this can be fixed in condor within the next month or so.

Regards
Gaurang

On Fri, 23 Apr 2004, Jaime Frey wrote:

> On Wed, 21 Apr 2004, Gaurang Mehta wrote:
> 
> > If the proxy generated is not a full-legacy globus proxy (in newer globus
> > generated by -old) condor-g puts all the jobs on hold with the
> > authentication failed error. Is this a bug/a known incompatibilty ??
> 
> This is a known problem and will hopefully be fixed in a release in the
> near future.
> 
> +------------------------------------+-------------------------------+
> |             Jaime Frey             |There are 10 types of people in|
> |         jfrey@xxxxxxxxxxx          |the world: Those who understand|
> |   http://www.cs.wisc.edu/~jfrey/   |  binary, and those who don't  |
> +------------------------------------+-------------------------------+
> Condor Support Information:
> http://www.cs.wisc.edu/condor/condor-support/
> To Unsubscribe, send mail to majordomo@xxxxxxxxxxx with
> unsubscribe condor-users <your_email_address>
> 

-- 
---------------------------------------------------------------------
| Gaurang P Mehta     	         |  4676 Admiralty Way,             |
| Programmer Analyst III         |  Suite 1001, Marina del Rey,     |
| Center For Grid Technologies,  |  CA 90292-6695, USA              |
| Information Sciences Institute |  Tel : (310) 448-9101            |
| USC Viterbi School Of Engg.    |  Email gmehta <at> isi <dot> edu |
---------------------------------------------------------------------

Condor Support Information:
http://www.cs.wisc.edu/condor/condor-support/
To Unsubscribe, send mail to majordomo@xxxxxxxxxxx with
unsubscribe condor-users <your_email_address>