[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [HTCondor-users] condor_ssh_to_job from one job to another




Upon further review, I don't think there is any inherent reason why I couldn't do this. My particular problem is an artifact of the Kerberos configuration and the local lack of a Globus alternative.

On 8/26/14, 12:43 PM, Gary Jackson wrote:

Is it possible to invoke condor_ssh_to_job inside of one job to connect
to another job? I am aware of the -name flag to specify a schedd, but it
seems I need additional credentials to talk to the schedd in the first
place:

bash$ condor_ssh_to_job -debug -name yyy.umd.edu 44
08/26/14 12:37:21 Will use UDP to update collector xxx.umd.edu
<z.z.z.z:9618>
08/26/14 12:37:21 Trying to query collector <z.z.z.z:9618>
08/26/14 12:37:21 Will use UDP to update collector xxx.umd.edu
<z.z.z.z:9618>
08/26/14 12:37:21 Trying to query collector <z.z.z.z:9618>
08/26/14 12:37:21 KERBEROS: No credentials cache found
08/26/14 12:37:21 authenticate_self_gss: acquiring self credentials
failed. Please check your Condor configuration file if this is a server
process. Or the user environment variable if this is a user process.

GSS Major Status: General failure
GSS Minor Status Error Chain:
globus_gsi_gssapi: Error with GSI credential
globus_gsi_gssapi: Error with gss credential handle
globus_credential: Valid credentials could not be found in any of the
possible locations specified by the credential search order.
Valid credentials could not be found in any of the possible locations
specified by the credential search order.
Attempt 1
globus_credential: Error reading host credential
globus_sysconfig: Could not find a valid certificate file: The host cert
could not be found in:
1) env. var. X509_USER_CERT
2) /etc/grid-security/hostcert.pem
3) $GLOBUS_LOCATION/etc/hostcert.pem
4) $HOME/.globus/hostcert.pem

The host key could not be found in:
1) env. var. X509_USER_KEY
2) /etc/grid-security/hostkey.pem
3) $GLOBUS_LOCATION/etc/hostkey.pem
4) $HOME/.globus/hostkey.pem


Attempt 2
globus_credential: Error reading proxy credential
globus_sysconfig: Could not find a valid proxy certificate file location
globus_sysconfig: Error with key filename
globus_sysconfig: File does not exist: /tmp/x509up_uWWWW is not a valid
file
Attempt 3
globus_credential: Error reading user credential
globus_credential: Key is password protected: GSI does not currently
support password protected private keys.
OpenSSL Error: pem_lib.c:458: in library: PEM routines, function
PEM_do_header: bad password read

08/26/14 12:37:21 SECMAN: required authentication with schedd
yyy.umd.edu failed, so aborting command GET_JOB_CONNECT_INFO.
08/26/14 12:37:21 Failed to send GET_JOB_CONNECT_INFO to schedd
Failed to send GET_JOB_CONNECT_INFO to schedd



--
Gary