[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Condor-users] how to secify SSL user credentials



Does anyone know how to specify the SSL credentials for an
individual condor user ? I believe that in GSI it looks
in ~/.globus by default or you can use the proxy location
(X509_..something ?).

I tried in desparation running 'strings' on condor_status which
reveals SSL_CERT_FILE and SSL_CERT_DIR. If I set SSL_CERT_FILE as
an environment variable then truss (more desparation) shows that it
opens this file OK but then goes onto also open the file specified
in condor_config (AUTH_SSL_CLIENT_CERTFILE). It then uses the subject
of AUTH_SSL_CLIENT_CERTFILE as the key in the mapfile. Hence it is
not possible to map different users creds onto different usernames.

I also noticed that the clients such as condor_status only seem
to work with SSL when the -debug option is used. Otherwise they give a
memory
fault when - apparently - writing to /dev/null - very strange !

Using condor 6.8.4 under solaris 9.

regards,

-ian.

------------------------------
Dr Ian C. Smith
e-Science Team,
University of Liverpool,
Computing Services Department