[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Condor-users] Permissioned denied error accessing NFS volume.



Try out TRUST_UID_DOMAIN=TRUE in your configuration.

Best,


matt

Peter Doherty wrote:
> It's using automount, and the condor binaries are on the same NFS  
> share as the files it's complaining about.
> The volume is mounted.
> 
> Okay, I did a little more playing around, and I'm thinking the problem  
> is in the UID_DOMAIN variable.  This is from the condor manual:
> 
> Some gritty details for folks who want to know: If the submitting  
> machine and the remote machine about to execute the job both have the  
> same login name in the passwd file for a given UID, and the UID_DOMAIN  
> claimed by the submit machine is indeed found to be a subset of what  
> an inverse lookup to a DNS (domain name server) reports as the fully  
> qualified domain name for the submit machine's IP address (this  
> security measure safeguards against the submit machine from simply  
> lying), THEN the job will run with the same UID as the user who  
> submitted the job. Otherwise it will run as user ``nobody''.
> 
> The submit machine's DNS domain name matches the UID_DOMAIN, but the  
> nodes don't.  And I don't really want to change this.  The submit node  
> has a public IP, and everything else is on private IP space.  I don't  
> know how it worked before though, since the linux nodes never matched  
> the submit node...so maybe I'm way off base here.
> 
> I tried changing the output file to /tmp/job.out and now I get this  
> error:
> 
> Hold reason: Error from starter on slot4@xxxxxxxxxxxxxxxxxx: Failed to  
> execute '/opt/osg-shared/se/app/site/bin/ 
> condor_nfslite_job_wrapper.sh' with arguments 123845555: Permission  
> denied
> 
> so it still can't access the NFS share.  This file has perms that make  
> it world readable, and the output file that it was complaining about I  
> chmoded 777, and it still complained.  Perhaps OSX handles the nobody  
> account differently...
> 
> --Peter
> 
> 
> On Apr 9, 2009, at 9:58 PM, Ian Chesal wrote:
> 
>>> Any thoughts?
>> I'm guess here but: does OS X do per-user fstabs? Maybe your NFS share
>> isn't mounted for the user running the job?
>>
>> - Ian
>>
>> Confidentiality Notice.
>> This message may contain information that is confidential or  
>> otherwise protected from disclosure. If you are not the intended  
>> recipient, you are hereby notified that any use, disclosure,  
>> dissemination, distribution,  or copying  of this message, or any  
>> attachments, is strictly prohibited.  If you have received this  
>> message in error, please advise the sender by reply e-mail, and  
>> delete the message and any attachments.  Thank you.
>>
>> _______________________________________________
>> Condor-users mailing list
>> To unsubscribe, send a message to condor-users-request@xxxxxxxxxxx  
>> with a
>> subject: Unsubscribe
>> You can also unsubscribe by visiting
>> https://lists.cs.wisc.edu/mailman/listinfo/condor-users
>>
>> The archives can be found at:
>> https://lists.cs.wisc.edu/archive/condor-users/
> 
> _______________________________________________
> Condor-users mailing list
> To unsubscribe, send a message to condor-users-request@xxxxxxxxxxx with a
> subject: Unsubscribe
> You can also unsubscribe by visiting
> https://lists.cs.wisc.edu/mailman/listinfo/condor-users
> 
> The archives can be found at: 
> https://lists.cs.wisc.edu/archive/condor-users/