[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Condor-users] Help with error Failed to get expiration time ofproxy



Yes, that causes problems for Condor-G. The grid security code requires
that the proxy file be owned and readable only by the uid of the process
trying to use the proxy. With the Condor daemons running as uid condor
with no root privileges, there's currently no way to meet that
requirement. If you run the Condor daemons under your own uid, this
problem will go away.

-- Jaime

On Tue, 16 Nov 2004, lobo wrote:

> Hi
> i dont have root privilideges. the condor daemons (master, scheduler,
> etc) already started run  as user condor. I have a different uid.
>
> is there a problem because of this?
>
> Thanks
> Lobo.
>
>
>
> On Mon, 15 Nov 2004 15:33:59 -0600 (CST), Jaime Frey <jfrey@xxxxxxxxxxx> wrote:
> > On Fri, 12 Nov 2004, lobo wrote:
> >
> > > yes
> > > /tmp/x509up_u1273 is the correct file. get it when i do
> > > grid-proxy-init -old
> > >
> > > I am running condor. i also tried changing permissions for all to
> > > access it still gives the same error.
> >
> > When you you're running condor, does that mean your condor daemons are
> > running as user condor? If so, are they started as user condor, or are
> > they started as root and switch uid to condor?
> >
> > Adding group/world permissions will cause the GSI security code to fail.
> > The proxy file should be readable by you only.
> >
> > +----------------------------------+---------------------------------+
> >
> >
> > |            Jaime Frey            |  Public Split on Whether        |
> > |        jfrey@xxxxxxxxxxx         |  Bush Is a Divider              |
> > |  http://www.cs.wisc.edu/~jfrey/  |         -- CNN Scrolling Banner |
> > +----------------------------------+---------------------------------+
> >
>

+----------------------------------+---------------------------------+
|            Jaime Frey            |  Public Split on Whether        |
|        jfrey@xxxxxxxxxxx         |  Bush Is a Divider              |
|  http://www.cs.wisc.edu/~jfrey/  |         -- CNN Scrolling Banner |
+----------------------------------+---------------------------------+