[Condor-users] IN_HIGHPORT/IN_LOWPORT being ignored

[Michael Jinks <mjinks@xxxxxxxxxxxx>]

We have a Linux head node which also acts as the border/NAT gateway for
a non-routable subnet.  We know (now...) that this isn't necessarily the
best way to set up a Condor cluster, but I'm trying to cope with what I
have for the time being, and one thing we need to do is to force Condor
to listen on a predictable range of ports so that we can allow those
connections in the firewall rules.

So, I've configured iptables on that machine to allow inbound
connnections for tcp and udp ports 9614-9700.  In the machine's
condor_config.local, I've set IN_HIGHPORT to 9700 and IN_LOWPORT to
9614.

But when I restart condor it doesn't seem to honor those settings.  I
don't find any reference to them in the logs, and the all the daemons
which listen on dynamic ports are choosing something over 32000.

I do see in the MasterLog that we are using that local config file, as
expected, and other settings from that file (like the DAEMON_LIST) are
being honored.

We're using Condor version 6.7.13, and the docs seem to say that this
should work for anything later than version 6.7.5, but could this be a
bug?

I'll attach a copy of my condor_config.local in case I've botched some
syntax or something.

Thanks,
--Michael

#COLLECTOR_NAME = 
#SUSPEND = 
#START = 
#PREEMPT = 
#VACATE = 

FILESYSTEM_DOMAIN = tasc-nfs.uchicago.edu
LOCK = /tmp/condor-lock.$(HOSTNAME)0.610737383206473
CONDOR_ADMIN = root@xxxxxxxxxxxxxxxxxx
RELEASE_DIR = /opt/condor
DAEMON_LIST = MASTER,COLLECTOR,NEGOTIATOR,STARTD,SCHEDD
COLLECTOR = $(SBIN)/condor_collector
ALLOW_WRITE = $(CONDOR_HOST),$(HOSTNAME)
# UID_DOMAIN = uchicago.edu
NEGOTIATOR = $(SBIN)/condor_negotiator
CONDOR_HOST = seoul.uchicago.edu
CONDOR_IDS = 1000.100
LOCAL_DIR = /home/condor/hosts/$(HOSTNAME)

# we run on a border router with two interfaces, so:
BIND_ALL_INTERFACES = True
# we also run iptables NAT, so keep Condor ports segregated from random
# ports used for outbound traffic:
IN_LOWPORT = 9614
IN_HIGHPORT = 9700