Re: [Condor-users] condor_userprio permissions

[Matthew Farrellee <matt@xxxxxxxxxx>]

On 01/02/2010 09:49 AM, Mag Gam wrote:
> If i have
> ALLOW_ADMINISTRATOR   = cadmin@xxxxxxxxxxxx
> HOSTALLOW_ADMINISTRATOR =
> HOSTALLOW_NEGOTIATOR =
> 
> I still get this when I do condor_userprio -setfactor user@xxxxxxxxx 1
> 
> PERMISSION DENIED to unauthenticated user from host 10.21.71.11 for
> command 459 (SetPriorityFactor), access level ADMINISTRATOR: reason:
> ADMINISTRATOR authorization policy contains no matching ALLOW entry
> for this request; identifiers used for this host:
> 
> 
> Basically, I want my cadmin account to be the administrator of the
> pool. I want cadmin to control the userprio command. The Negotiator is
> running on the central manager.
> 
> 
> 
> On Thu, Dec 31, 2009 at 6:18 AM, Mag Gam <magawake@xxxxxxxxx> wrote:
>> How do I let condor admin user (cadmin) have the only person changing
>> priority factors? It seems everyone can do it by default now.
>>
>> TIA

Make sure user authentication is happening. "unauthenticated user" suggests it isn't, which only gets you host based authentication.

http://condor-wiki.cs.wisc.edu/index.cgi/tktview?tn=1087

SEC_ADMINISTRATOR_AUTHENTICATION = REQUIRED

Best,


matt