[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Condor-users] Restrict submission from only one submission node, how ?




The problem is, I don't want my students to submit programs to the pool. I
want to restrict the submission from only the Central Manager or only from my
PC.  And I hope that only I can submit jobs. May I know how can I configure ?

You can only submit jobs from a machine if you are running the condor_schedd program. Edit DAEMON_LIST on a computer so it does not list SCHEDD, and the condor_schedd will not be run. This will do exactly what you want.

To learn more about the different Condor daemons, read section 3.1 of the Condor 6.7 manual:
http://www.cs.wisc.edu/condor/manual/v6.7/3_1Introduction.html

To learn more about the DAEMON_LIST, see section 3.3.8 of the Condor 6.7 manual:
http://www.cs.wisc.edu/condor/manual/v6.7/3_3Configuration.html#SECTION00438000000000000000

   Attempting to achieve this, I had modified the START expression in the
execution host. However, it was not successful. My job doesn't start:
START = ( (ClientMachine == "condor.hku.hk") || \
(RemoteUser  == "cmwoo@xxxxxxxxxxxxx") ||  \
(RemoteOwner == "cmwoo@xxxxxxxxxxxxx") )

ClientMachine isn't in the job ClassAd, and I'm pretty sure that there is no attribute with that information at the time the START expression is evaluated.

If you want to restrict jobs to only come from you, you need to do something like:

START = TARGET.User == "cmwoo@xxxxxxxxxxxxx"

Note that it's not RemoteUser or RemoteOwner.

If you're worried about students maliciously trying to use your Condor pool, you should read the portion of the manual that is on security. It's Section 3.7 in the Conodr 6.7 manual.

http://www.cs.wisc.edu/condor/manual/v6.7/3_7Security.html

-alain