[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Condor-users] Security instructions for basic condor cluster
- Date: Mon, 4 Apr 2011 23:20:44 -0400
- From: "Brian O'Meara" <omeara.brian@xxxxxxxxx>
- Subject: [Condor-users] Security instructions for basic condor cluster
Hi, all. I am trying a small Condor install in my lab group with the eventual goal of expanding it to our department. I've installed Condor version 7.5.6 on Mac OS 10.6.7 on both a desktop (manager, execute, submit) and a laptop (execute, submit) [I tried using the stable build, but had an issue with ssh access to my desktop stopping working, so decided to try the dev build instead]. Basically, I think I need a pointer to a good guide to setting up proper authentication (yes, I have RTFM and also Googled). My immediate problem (and this might just be an indicator of my broader issues) is that when I do condor_submit on the laptop (non-manager computer), I get:
ERROR: Failed to create cluster
And when looking at the Schedlog on the manager for this time, see
04/04/11 20:52:34 (pid:52253) IPVERIFY: unable to resolve IP address of omearalab6.local
Submitting jobs from the master computer works fine.
In the master computer's condor_config file, I have
ALLOW_WRITE = bomeara@*/127.0.0.1, 127.0.0.1, omearalab5.ee.utk.edu, omearalab6.local
And in the laptop's condor_config file, I have
ALLOW_WRITE = 127.0.0.1, omearalab5.ee.utk.edu, omearalab8.ee.utk.edu, omearalab3.dyndns.org, omearalab6.dyndns.org
condor_status on both machines shows just the nodes on the desktop machine.
I've written how I did the install/config at http://www.brianomeara.info/lab/condorinstall .
The first issue is that host-based authentication seems not to be working. However, the bigger issue is that it seems that I should be using password-based authentication (kerberos and certificates not really being an option). I've read the fine manual at http://www.cs.wisc.edu/condor/manual/v7.5/3_6Security.html#SECTION00463400000000000000 about this but have found it a bit opaque. I have tried to do section 2.1.1 of http://www.cs.wisc.edu/condor/osg_security_recommendations.html but that hasn't resolved the problem. Searching for other resources hasn't been fruitful. It would be wonderful if someone could point me towards something with a more basic outline of what to do, complete copies of configuration files with all the information needed for password authentication (of course, keeping the actual password secret), or something else similarly helpful. I'm happy to reinstall condor completely if that's the best approach, of course.
Dept. of Ecology & Evolutionary Biology
U. of Tennessee, Knoxville
Students wanted: Applications due Dec. 15, annually
Postdoc collaborators wanted: Check NIMBioS' website
Funding wanted: Want to collaborate on a grant?