Re: [Condor-users] EXECUTE_LOGIN_IS_DEDICATED kills off wrong processes?

[Dan Bradley <dan@xxxxxxxxxxxx>]

I should mention that the "fix" to the semantics of 
EXECUTE_LOGIN_IS_DEDICATED was to deprecate it.  In 6.9.3, the new 
configuration options that provide safe control over whether Condor runs 
a job as a dedicated batch slot account are: SLOTx_USER, 
STARTER_ALLOW_RUNAS_OWNER, and DEDICATED_EXECUTE_ACCOUNT_REGEXP.

--Dan

Dan Bradley wrote:

> The semantics of EXECUTE_LOGIN_IS_DEDICATED are dangerous in the 6.8 
> series.  This is fixed in the 6.9.3 release.  The problem is that it 
> doesn't distinguish between jobs that ran with the dedicated batch-slot 
> account vs. ones that ran as some other user id that is not necessarily 
> dedicated to one batch slot.  In 6.8, Condor on unix will only use the 
> VMx_USER accounts if the UidDomains of the submit and execute machine 
> are different, so you have to be careful never to specify 
> EXECUTE_LOGIN_IS_DEDICATED=True if the UidDomains are the same.
>
> --Dan
>
> Matt Hope wrote:
>
>  
>
> > On 8/30/07, Antonio Garcia Dominguez <antonio.garcia.dominguez@xxxxxxx> wrote:
> >
> >
> >    
> >
> > > Hello all,
> > >
> > > I wanted to test EXECUTE_LOGIN_IS_DEDICATED, so I created two system accounts under my Ubuntu Feisty system:
> > >
> > > sudo useradd -r nobody1
> > > sudo useradd -r nobody2
> > >
> > > Then I added the following lines to my condor_config.local file:
> > >
> > > VM1_USER = nobody1
> > > VM2_USER = nobody2
> > > EXECUTE_LOGIN_IS_DEDICATED = TRUE
> > >
> > > Submission works, and jobs are completed, but the wrong processes keep getting killed off: in particular, all X and shell sessions are killed. Why would this be?
> > >   
> > >
> > >      
> > 1) check who your jobs are *actually* running as. (pslist -e when it's
> > running, but before it kills your shell :)
> >
> > Guess: your test jobs run as you, not as the VMX_USER thus - on
> > killing all that users jobs it kills your logins.
> >
> > To test I suggest submitting some jobs as a different user - at least
> > then you can debug it without having to restart everything each
> > time...
> >
> > Matt
> > _______________________________________________
> > Condor-users mailing list
> > To unsubscribe, send a message to condor-users-request@xxxxxxxxxxx with a
> > subject: Unsubscribe
> > You can also unsubscribe by visiting
> > https://lists.cs.wisc.edu/mailman/listinfo/condor-users
> >
> > The archives can be found at: 
> > https://lists.cs.wisc.edu/archive/condor-users/
> >
> >
> >    
> _______________________________________________
> Condor-users mailing list
> To unsubscribe, send a message to condor-users-request@xxxxxxxxxxx with a
> subject: Unsubscribe
> You can also unsubscribe by visiting
> https://lists.cs.wisc.edu/mailman/listinfo/condor-users
>
> The archives can be found at: 
> https://lists.cs.wisc.edu/archive/condor-users/
>