Re: [Condor-users] Writing to HKEY_CURRENT_USER when running jobson Windows

[Ben Burnett <burnett@xxxxxxxxxxx>]

Hello again:

It looks as if we have the go ahead on this, so this will feature will be
added on a per-job basis in a future release of Condor.  

In the mean time, if you need write access to the user part of the registry,
you might also try forcing the profile to be loaded by first login in some
user using the runas.exe command's /profile flag (which is set by default).
The caveat to this, is that the runas.exe will require some interaction
(i.e. entering the selected user's password), but I believe this can be
overcome with an expect script (http://expect.nist.gov/#windows).  There
were some other ideas I had, but this is by far the least hack'ish of the
lot, and the simplest.  If this does not fit your needs, let me know and we
can explore some other avenues. 

Regards,
-B

-----Original Message-----
From: condor-users-bounces@xxxxxxxxxxx
[mailto:condor-users-bounces@xxxxxxxxxxx] On Behalf Of Ben Burnett
Sent: Tuesday, June 26, 2007 1:46 PM
To: 'Condor-Users Mail List'
Subject: Re: [Condor-users] Writing to HKEY_CURRENT_USER when running jobson
Windows

Hi Ian:

This question has come up in the past, but modifications have never been
made. That said, we do have a meeting tomorrow afternoon, so I'll ask the
team what they think about the addition and see what they think about it.
If the answer is no, I think I may have some other alternatives for you.

Regards,
-B

-----Original Message-----
From: condor-users-bounces@xxxxxxxxxxx
[mailto:condor-users-bounces@xxxxxxxxxxx] On Behalf Of Ian Chesal
Sent: Monday, June 25, 2007 11:06 AM
To: Condor-Users Mail List
Subject: Re: [Condor-users] Writing to HKEY_CURRENT_USER when running jobson
Windows

Ben, thanks for the response.

> You are correct in that Condor can run under specific accounts;
however,
> currently, Condor does not load profiles for these accounts.  What
this
> means is that the HKEY_CURRENT_USER is also not loaded, which is why
> you're writes have been failing.

Any chance this could be an optional decision? So if I wanted the
profile loaded by Condor I could ask for it? Could you wipe the profile
after the job completed as well so it always started clean for the next
job?

> As an alternative to granting full administrative permissions to the 
> Condor user, you might consider adding a new sub-key to the
> "HKEY_LOCAL_MACHINE\SOFTWARE\Condor" key (or a place of your choice).
> Then, using regedit (or regedt32 on Win2K/XP--MS seems to have finally
> integrated them into one in Vista) set the registry key's access
> permissions such that the Condor user can have the access to it you
> wanted (by right clicking on it and selecting "Permissions..."--this
> can also be done remotely and can also be automated, in case you have
> more machines that you care to do by hand).  Finally, you can use
> the scheduler to remove the data once it is not needed (via some
> expire date key, or the like).

Thanks for the idea. I'll see what I can do to this end. Part of the
problem is Cygwin is involved here -- a custom version of Cygwin that we
ship with our CAD tool that includes a modified gcc that can produce
code for our soft core IP. It's all terribly complicated. Cygwin really
wants to write mount points to both HKEY_LOCAL_MACHINE and
HKEY_CURRENT_USER. It's a shame it can't be told to use some file-based
registry mimic when it's running in a restricted account.

- Ian


_______________________________________________
Condor-users mailing list
To unsubscribe, send a message to condor-users-request@xxxxxxxxxxx with a
subject: Unsubscribe
You can also unsubscribe by visiting
https://lists.cs.wisc.edu/mailman/listinfo/condor-users

The archives can be found at: 
https://lists.cs.wisc.edu/archive/condor-users/

_______________________________________________
Condor-users mailing list
To unsubscribe, send a message to condor-users-request@xxxxxxxxxxx with a
subject: Unsubscribe
You can also unsubscribe by visiting
https://lists.cs.wisc.edu/mailman/listinfo/condor-users

The archives can be found at: 
https://lists.cs.wisc.edu/archive/condor-users/