[HTCondor-users] Condor crashed due to security setting

[钱晓明 <mailtoantares@xxxxxxx>]

Hi, I am using condor 8.2.7 on CentOS 6.6 x86_64. I find that all condor processes crashed because of my security setting:

SEC_DEFAULT_NEGOTIATION = NEVER
SEC_DEFAULT_AUTHENTICATION = NEVER

This is Sched process log:

......

04/15/15 15:09:28 (pid:29537) TransferQueueManager stats: active up=0/10 down=0/10; waiting up=0 down=0; wait time up=0s down=0s
04/15/15 15:09:28 (pid:29537) TransferQueueManager upload 1m I/O load: 0 bytes/s  0.000 disk load  0.000 net load
04/15/15 15:09:28 (pid:29537) TransferQueueManager download 1m I/O load: 0 bytes/s  0.000 disk load  0.000 net load
04/15/15 15:09:28 (pid:29537) Sent ad to central manager for nobody@local
04/15/15 15:09:28 (pid:29537) Sent ad to 1 collectors for nobody@local
04/15/15 15:09:33 (pid:29537) authenticate_self_gss: acquiring self credentials failed. Please check your Condor configuration file if this is a server process. Or the user environment variable if this is a user process.

GSS Major Status: General failure
GSS Minor Status Error Chain:
globus_gsi_gssapi: Error with GSI credential
globus_gsi_gssapi: Error with gss credential handle
globus_credential: Valid credentials could not be found in any of the possible locations specified by the credential search order.
Valid credentials could not be found in any of the possible locations specified by the credential search order.
Attempt 1
globus_credential: Error reading host credential
globus_sysconfig: Could not find a valid certificate file: The host cert could not be found in:
1) env. var. X509_USER_CERT
2) /etc/grid-security/hostcert.pem
3) $GLOBUS_LOCATION/etc/hostcert.pem
4) $HOME/.globus/hostcert.pem

The host key could not be found in:
1) env. var. X509_USER_KEY
2) /etc/grid-security/hostkey.pem
3) $GLOBUS_LOCATION/etc/hostkey.pem
4) $HOME/.globus/hostkey.pem

Attempt 2
globus_credential: Error reading proxy credential
globus_sysconfig: Could not find a valid proxy certificate file location
globus_sysconfig: Error with key filename
globus_sysconfig: File does not exist: /tmp/x509up_u0 is not a valid file
Attempt 3
globus_credential: Error reading user credential
globus_sysconfig: Error with certificate filename: The user cert could not be found in:
1) env. var. X509_USER_CERT
2) $HOME/.globus/usercert.pem
3) $HOME/.globus/usercred.p12

04/15/15 15:09:33 (pid:29537) DC_AUTHENTICATE: Our security policy is invalid!
04/15/15 15:09:33 (pid:29537) authenticate_self_gss: acquiring self credentials failed. Please check your Condor configuration file if this is a server process. Or the user environment variable if this is a user process.

GSS Major Status: General failure
GSS Minor Status Error Chain:
globus_gsi_gssapi: Error with GSI credential
globus_gsi_gssapi: Error with gss credential handle
globus_credential: Valid credentials could not be found in any of the possible locations specified by the credential search order.
Valid credentials could not be found in any of the possible locations specified by the credential search order.
Attempt 104/15/15 15:09:46 (pid:29601) ******************************************************
04/15/15 15:09:46 (pid:29601) ** condor_schedd (CONDOR_SCHEDD) STARTING UP
04/15/15 15:09:46 (pid:29601) ** /usr/sbin/condor_schedd
04/15/15 15:09:46 (pid:29601) ** SubsystemInfo: name=SCHEDD type=SCHEDD(5) class=DAEMON(1)
04/15/15 15:09:46 (pid:29601) ** Configuration: subsystem:SCHEDD local:<NONE> class:DAEMON
04/15/15 15:09:46 (pid:29601) ** $CondorVersion: 8.0.7 May 29 2014 BuildID: 250355 $
04/15/15 15:09:46 (pid:29601) ** $CondorPlatform: x86_64_RedHat6 $
04/15/15 15:09:46 (pid:29601) ** PID = 29601
04/15/15 15:09:46 (pid:29601) ** Log last touched 4/15 15:09:33
04/15/15 15:09:46 (pid:29601) ******************************************************

I think the red line is the point of crash. Hope this will be helpful.