[Condor-users] Condor 6.8.1 and SSL (condor_submit fails)

[Pascal Jermini <pascal+condor@xxxxxxxxxxxxxxxx>]

Hello all,

We have been waiting for Condor 6.8.1 very impatiently, especially for the
SSL fixes (see my previous posts about SSL)!
Now that it is here, we tried to enable SSL, but we got again some
problems with the job submission.

When we submit a job, the condor_submit fails with the following message:

Submitting job(s)
ERROR: Failed to set Owner="jermini" for job 589.0 (13)

ERROR: Failed to queue job.

And in the ScheddLog we have the following lines:

9/20 19:02:56 (fd:11) (pid:6961) Got request #10006
9/20 19:02:56 (fd:11) (pid:6961)        cluster_id = 588
9/20 19:02:56 (fd:11) (pid:6961)        proc_id = -1
9/20 19:02:56 (fd:11) (pid:6961)        attr_name = Owner
9/20 19:02:56 (fd:11) (pid:6961)        attr_value = "jermini"
9/20 19:02:56 (fd:11) (pid:6961) SetAttribute security violation: setting
owner to "jermini" when active owner is "ssl"
9/20 19:02:56 (fd:11) (pid:6961)        rval = -1, errno = 13
9/20 19:02:56 (fd:11) (pid:6961) condor_read(): nfds=11

Did we miss something in the configuration? The relevant parts of the
config files is as above:

SEC_DEFAULT_ENCRYPTION = PREFERRED
SEC_DEFAULT_INTEGRITY = PREFERRED
SEC_DEFAULT_NEGOTIATION = PREFERRED
SEC_DEFAULT_AUTHENTICATION = PREFERRED

SEC_DEFAULT_AUTHENTICATION_METHODS = SSL
SEC_DEFAULT_INTEGRITY_METHODS = MD5
SEC_DEFAULT_ENCRYPTION_METHODS = 3DES, BLOWFISH

plus the options to load the correct SSL keys for each host...

any idea/hint to solve this problem?

thank you in advance,

Pascal