Re: [Condor-users] Linux scheduler authentication problem

[Ian Chesal <ichesal@xxxxxxxxxxxxxxxxxx>]

2010/10/22 Horvátth Szabolcs <szabolcs@xxxxxxxxxxxxx>

All your machines need to have CLAIMTOBE in their list of authentication methods for this to work.

I tried adding SEC_DEFAULT_AUTHENTICATION_METHODS = ClaimToBe to the submitter machine but nothing changed.
Could you elaborate a bit on the required settings?

Sure. You'll need to have these set on the client, the schedd and the collector/negotiator:

SEC_DEFAULT_AUTHENTICATION_METHODS = CLAIMTOBE

And then make sure none of the following are set:

SEC_READ_AUTHENTICATION_METHODS

SEC_WRITE_AUTHENTICATION_METHODS

SEC_ADMINISTRATOR_AUTHENTICATION_METHODS

SEC_CONFIG_AUTHENTICATION_METHODS

SEC_OWNER_AUTHENTICATION_METHODS

SEC_DAEMON_AUTHENTICATION_METHODS

SEC_NEGOTIATOR_AUTHENTICATION_METHODS

SEC_ADVERTISE_MASTER_AUTHENTICATION_METHODS

SEC_ADVERTISE_STARTD_AUTHENTICATION_METHODS

SEC_ADVERTISE_SCHEDD_AUTHENTICATION_METHODS 

I can't recall if these require a full restart of the daemons to take effect.

- Ian