[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Condor-users] GSI authentication succeeds but authorization fails

> Next question: Do I have to also map the certificate that is
> being used by the daemons to a Condor user ID in order for the
> daemons to talk amongst themselves? 
> More specifically, do I have to map
> "/DC=org/DC=doegrids/OU=Services/CN=ldg-portal.phys.uwm.edu" condor@xxxxxxxxxxxx

yep, you got it.  the server will use this to map the client, even if the
client is another condor daemon.  (e.g. the collector authenticating a startd)

after you add that mapping, your pool should start working again.  check the
collector log before and after to verify that's the case.