Re: [Condor-users] how can a condor job connect on a Map networkdrive for windows platform?

["Todd Tannenbaum" <tannenba@xxxxxxxxxxx>]

<ramzi.khaskhoussi@xxxxxxxxx> wrote:
>__________
>>Hi Matt and all,
>>Is it possible to add a new user named condor-reuse-vm-xx in the
>>machine where the ressources are shared, In order to avoid adding this
>>line in my .bat executable.
>
You can acheive what you want, but not the way you suggest above.  :).  In order to use the network drive, both the account login name -and the password- must be the same on the machine running the job and on the machine sharing the files.  With the condor-reuse accounts, the password is randomly changed every time a job runs.

So to do what you want, just choose or create a new account that exists on both your execute machnes and file server (with the same login and password), and then tell Condor to use this account to run jobs  instead of a dynnamic nobody/reuse account.  To do this, just change some settings in the config file.  Instructions to do this are in the manual here:

www.cs.wisc.edu/condor/manual/v6.6/3_7Security_In.html#SECTION00471200000000000000

hope this helps,
Todd

>
>-+-+-+-+-+-+-+-+-+-+-+-+-+-
>Todd Tannenbaum, Condor Project
>Department of Computer Science, Univ of Wisconsin-Madison
>
>
>
>>By that , I will avoid some security problems that can occur.
>>
>>Thanks,
>>--Ramzi
>>
>>On Mon, 21 Feb 2005 12:20:40 +0000, Matt Hope <matthew.hope@xxxxxxxxx> wrote:
>>> On Mon, 21 Feb 2005 13:08:05 +0100, ramzi khaskhoussi
>>> <ramzi.khaskhoussi@xxxxxxxxx> wrote:
>>> > Hi Oliver and all,
>>> >
>>> > I did not understand what you mean by password and username ,
>>> > is it the password and the user name of a current user of the computer
>>> > where X mapped drive is shared OR the 'condor-reuse-xxx 'user: in that
>>> > case what do you mean by 'password'?.
>>> 
>>> The user and password is for the user you wish to pretend to be to
>>> connect to the network resource...it has nothing to do with the reuse
>>> account on the executing machine not the submitting user.
>>> 
>>> Since the users created by condor are not automatically members of a
>>> domain you typically need to use the credentials of some user in the
>>> domain you want. I strongly suggest a single user with access rights
>>> for only what you absolutely need but the person could embed their own
>>> username and password if they wanted at which point you may as well
>>> just give up on any sort of security since you are sending passwords
>>> for real users in the clear...
>>> 
>>> Matt
>>> _______________________________________________
>>> Condor-users mailing list
>>> Condor-users@xxxxxxxxxxx
>>> https://lists.cs.wisc.edu/mailman/listinfo/condor-users
>>>
>>_______________________________________________
>>Condor-users mailing list
>>Condor-users@xxxxxxxxxxx
>>https://lists.cs.wisc.edu/mailman/listinfo/condor-users
>>
>>--- message truncated ---