Re: [HTCondor-users] token_key with remote accesspoint

["Weatherby,Gerard" <gweatherby@xxxxxxxx>]

Dâoh.
No, not intentional.

I used Python notation for the command, and it didnât complain so it did something other than what I expected. Itâs working now. Thanks for the assistance.

root@condorcentralmanager:/etc/condor/tokens.d# condor_token_create -identity cweatherby@xxxxxxxxxx --lifetime 15_780_000 -token notsixmonths

root@condorcentralmanager:/etc/condor/tokens.d# echo $?

0

 

From: HTCondor-users <htcondor-users-bounces@xxxxxxxxxxx> on behalf of Bockelman, Brian <BBockelman@xxxxxxxxxxxxx>
Date: Friday, July 21, 2023 at 9:18 PM
To: HTCondor-Users Mail List <htcondor-users@xxxxxxxxxxx>
Subject: Re: [HTCondor-users] token_key with remote accesspoint

*** Attention: This is an external email. Use caution responding, opening attachments or clicking on links. ***

Hi Gerard,

 

Looking at the issued at and expiration timestamp, the tokenâs lifetime was a total of 15 seconds long.  Is that intentional?

 

Brian

Sent from my iPhone

On Jul 21, 2023, at 1:12 PM, Weatherby,Gerard <gweatherby@xxxxxxxx> wrote:

ï

Accesspoint:

cweatherby@accesspoint:~$ condor_token_list

Header: {"alg":"HS256","kid":"POOL"} Payload: {"exp":1689718203,"iat":1689718188,"iss":"condorcentralmanager.nmrbox.org","jti":"57276a01b302a2fbb1ff9de71dedb0be","sub":cweatherby@xxxxxxxxxx} File: /home/nmrbox/cweatherby/.condor/tokens.d/sixmonths

Forwarding node:

cweatherby@test-condor1:~$ condor_token_list

Header: {"alg":"HS256","kid":"POOL"} Payload: {"exp":1689718203,"iat":1689718188,"iss":"condorcentralmanager.nmrbox.org","jti":"57276a01b302a2fbb1ff9de71dedb0be","sub":cweatherby@xxxxxxxxxx} File: /home/nmrbox/cweatherby/.condor/tokens.d/sixmonths

 

From: HTCondor-users <htcondor-users-bounces@xxxxxxxxxxx> on behalf of Todd L Miller via HTCondor-users <htcondor-users@xxxxxxxxxxx>
Date: Friday, July 21, 2023 at 12:10 PM
To: HTCondor-Users Mail List <htcondor-users@xxxxxxxxxxx>
Cc: Todd L Miller <tlmiller@xxxxxxxxxxx>
Subject: Re: [HTCondor-users] token_key with remote accesspoint

*** Attention: This is an external email. Use caution responding, opening attachments or clicking on links. ***

> 07/18/23 17:09:00 Looking for tokens in directory /home/nmrbox/cweatherby/.condor/tokens.d for issuer condorcentralmanager.nmrbox.org
> 07/18/23 17:09:00 TOKEN: No token found.

        SCHEDD_NAME works by querying the collector for the name of the
schedd.  Your collector is currently requiring authentication for lookup
(which is fine), but for some reason HTCondor can't find a token in
~/.condor/tokens.d for the collector.  Since you're submitting to the
local queue when you're submitting on the AP, it doesn't need to talk to
the collector first.  Run `condor_token_list` to get a list of the tokens
HTCondor can find; the entry for each token will include the issuer.  Make
sure that the token file(s) you have in your ~/.condor/tokens.d appear in
the list and have the expected issuer(s).

- ToddM
_______________________________________________
HTCondor-users mailing list
To unsubscribe, send a message to htcondor-users-request@xxxxxxxxxxx with a
subject: Unsubscribe
You can also unsubscribe by visiting
https://urldefense.com/v3/__https://lists.cs.wisc.edu/mailman/listinfo/htcondor-users__;!!Cn_UX_p3!jG5Xc_bWrAhd2w3dx5PXD0ZLguQ8amMTETB2jRvNYX-WfBk0DoQh0BtAURO6RvB9gi8EV-etfxHQUtxE2zGo5rRwgQVLu51k$

The archives can be found at:
https://urldefense.com/v3/__https://lists.cs.wisc.edu/archive/htcondor-users/__;!!Cn_UX_p3!jG5Xc_bWrAhd2w3dx5PXD0ZLguQ8amMTETB2jRvNYX-WfBk0DoQh0BtAURO6RvB9gi8EV-etfxHQUtxE2zGo5rRwgVQMv9EF$

_______________________________________________
HTCondor-users mailing list
To unsubscribe, send a message to htcondor-users-request@xxxxxxxxxxx with a
subject: Unsubscribe
You can also unsubscribe by visiting
https://lists.cs.wisc.edu/mailman/listinfo/htcondor-users

The archives can be found at:
https://lists.cs.wisc.edu/archive/htcondor-users/