Re: [Condor-users] Condor running as a predefined user

["Neil Woodhouse" <Neil.Woodhouse@xxxxxxxxx>]

Forum,

	I am starting to make some progress :) I have the age old
problem that my job is not matched and I think it is the localCredd. I
have looked on several threads on this page, and have tried a bunch of
things. The CreddLog looks like this:

9/28 18:01:36 DC_AUTHENTICATE: authenticate failed:
AUTHENTICATE:1002:Failure performing handshake|AUTHENTICATE:1004:Failed
to authenticate using PASSWORD
9/28 18:01:36 Return from Handler <DaemonCore::HandleReqSocketHandler>
9/28 18:02:34 Calling Handler <DaemonCore::HandleReqSocketHandler>
9/28 18:02:34 Received TCP command 479 (STORE_CRED) from
Administrator@apptesting <192.168.10.100:1360>, access level WRITE
9/28 18:02:34 Calling HandleReq <store_cred_handler> (0)
9/28 18:02:34 Return from HandleReq <store_cred_handler> (handler:
0.000s, sec: 0.000s)
9/28 18:02:34 Return from Handler <DaemonCore::HandleReqSocketHandler>
9/28 18:03:30 Calling Handler <DaemonCore::HandleReqSocketHandler>
9/28 18:03:30 Received TCP command 479 (STORE_CRED) from
Administrator@apptesting <192.168.10.100:1386>, access level WRITE
9/28 18:03:30 Calling HandleReq <store_cred_handler> (0)
9/28 18:03:30 Return from HandleReq <store_cred_handler> (handler:
0.000s, sec: 0.000s)
9/28 18:03:30 Return from Handler <DaemonCore::HandleReqSocketHandler>
9/28 18:05:43 Calling Handler <DaemonCore::HandleReqSocketHandler>
9/28 18:05:43 Received TCP command 479 (STORE_CRED) from
Tester1@apptesting <192.168.10.100:1410>, access level WRITE
9/28 18:05:43 Calling HandleReq <store_cred_handler> (0)
9/28 18:05:43 Return from HandleReq <store_cred_handler> (handler:
0.000s, sec: 0.015s)
9/28 18:05:43 Return from Handler <DaemonCore::HandleReqSocketHandler>
9/28 18:06:36 Calling Handler <DaemonCore::HandleReqSocketHandler>
9/28 18:06:36 getStoredCredential(): Could not locate credential for
user 'condor_pool@xxxxxxxxxxxxxxxxxxxxxxxxx'
9/28 18:06:56 condor_read(): timeout reading 5 bytes from
<192.168.10.102:1273>.
9/28 18:06:56 IO: Failed to read packet header
9/28 18:06:56 AUTHENTICATE: handshake failed!
9/28 18:06:56 DC_AUTHENTICATE: authenticate failed:
AUTHENTICATE:1002:Failure performing handshake|AUTHENTICATE:1004:Failed
to authenticate using PASSWORD
9/28 18:06:56 Return from Handler <DaemonCore::HandleReqSocketHandler>


Does anyone have any ideas? Administrator and Tester1 are the two
accounts that I have submitted under and the jobs remain idle. Condor-q
-analyze results in a message indicating a bad match for my pool
manager. 


Neil

-----Original Message-----
From: condor-users-bounces@xxxxxxxxxxx
[mailto:condor-users-bounces@xxxxxxxxxxx] On Behalf Of Neil Woodhouse
Sent: Sunday, September 27, 2009 8:36 PM
To: Condor-Users Mail List
Subject: Re: [Condor-users] Condor running as a predefined user

Forum,

	I have seemed to have come to a dead end :( I have searched high
and low for some resources to set up a system that will allow me to run
my software as a named user. The best I have gotten to is to set up my
system with a pool manager, two nodes and a submitter and the
credentials seem to fail to be recognized. Setting the run_as_owner as
false in the submission file allows me to do some basic windows calls
etc. I would guess I am missing something fundamental and of course very
obvious.

	From the perspective of documentation I have been following this
text ->
http://www.cs.wisc.edu/condor/manual/v7.2/6_2Microsoft_Windows.html#SECT
ION00724000000000000000. It seems to be straight forward. At what point
to I store the local credentials as the user I am going to run the
processes as? Should I install the software as Administrator or the
User? Note I am trying this on a series of Windows boxes.

	I tried also to follow Todd's suggestion
http://www.cs.wisc.edu/condor/manual/v7.2/3_6Security.html#SECTION004611
200000000000000. But got stuck where a node would have 16 CPUs. Why
should I have to create multiple accounts for each slot. Again I must be
missing something.

      I would note that using personal Condor was a snap and I wish the
above was as easy. Help! Ideally I would like a series of steps to run
through to get a system up an running.


Neil

-----Original Message-----
From: condor-users-bounces@xxxxxxxxxxx
[mailto:condor-users-bounces@xxxxxxxxxxx] On Behalf Of Todd Tannenbaum
Sent: Wednesday, September 23, 2009 2:04 PM
To: Condor-Users Mail List
Subject: Re: [Condor-users] Condor running as a predefined user

Neil Woodhouse wrote:
> 
> 
> Forum,
> 
>  
> 
>                 I am trying to set up a system, on windows, that is 
> using a server with a raid, pool manager and various nodes to process 
> the data. For personal condor the software works fine submitting and 
> processing the data. Now I am trying to set up the processing that 
> extends to multiple machines. The problem that I have is that the 
> processing software has a complex environment and I need to have the 
> process run on the node logged in as a predefined user. So far I have 
> not been able to do this.
> 
>  
> 
>                 Can someone tell me if a document exists on how to do 
> this? I have tried to follow the section on windows within the manual,

> but have not got to run the process as the user that I want.

You will want to take a look at section 3.6.11.2 of the Manual, at URL
 
http://www.cs.wisc.edu/condor/manual/v7.2/3_6Security.html#SECTION004611
200000000000000

I think this tells you exactly what you want to know...

best,
Todd

_______________________________________________
Condor-users mailing list
To unsubscribe, send a message to condor-users-request@xxxxxxxxxxx with
a
subject: Unsubscribe
You can also unsubscribe by visiting
https://lists.cs.wisc.edu/mailman/listinfo/condor-users

The archives can be found at: 
https://lists.cs.wisc.edu/archive/condor-users/
_______________________________________________
Condor-users mailing list
To unsubscribe, send a message to condor-users-request@xxxxxxxxxxx with
a
subject: Unsubscribe
You can also unsubscribe by visiting
https://lists.cs.wisc.edu/mailman/listinfo/condor-users

The archives can be found at: 
https://lists.cs.wisc.edu/archive/condor-users/