Re: [Condor-users] Limiting submit nodes at central manager

[Todd Tannenbaum <tannenba@xxxxxxxxxxx>]

Mats Rynge wrote:
> Can somebody share a configuration which limits what nodes in a pool are
> allowed to act as submit nodes? We would like anybody within a subnet to
> join execution nodes, but not submit nodes. I think I understand how to
> limit the submit nodes on the execution nodes using
> HOSTALLOW_WRITE_STARTD, but I would like to control that list on the
> central manager, not on the execution nodes. Is there a simple
> HOSTALLOW_WRITE_* which can be used on the central manager controlling
> submit nodes?


I think you want
  HOSTALLOW_ADVERTISE_SCHEDD = ....

This config parameter is read by the condor_collector and determines 
what submit machines (i.e. schedd daemons) to allow into the pool.

Of course, you can also twiddle
  HOSTDENY_ADVERTISE_SCHEDD = ...

And if you are using credential-based security instead of host-based, 
you'd want to twiddle:
  ALLOW_ADVERTISE_SCHEDD = ...
and/or
  DENY_ADVERTISE_SCHEDD = ....


regards,
Todd