[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [HTCondor-users] not starting jobs in condor ver 8.3.6
- Date: Thu, 09 Jul 2015 14:27:40 -0500 (CDT)
- From: Todd L Miller <tlmiller@xxxxxxxxxxx>
- Subject: Re: [HTCondor-users] not starting jobs in condor ver 8.3.6
I hope you can figure out what I need to change to my my condor jobs to
start Thanks for looking in to my issue
From the negotiator log:
07/02/15 10:45:37 Phase 4.1: Negotiating with schedds ...
07/02/15 10:45:37 Negotiating with cosy11@xxxxxxxxxxx at
07/02/15 10:45:37 0 seconds so far
07/02/15 10:45:37 SECMAN: FAILED: Received "DENIED" from server for user
unauthenticated@unmapped using method (no authentication).
07/02/15 10:45:37 ERROR: SECMAN:2010:Received "DENIED" from server for
user unauthenticated@unmapped using method (no authentication).
07/02/15 10:45:37 Failed to send NEGOTIATE command to
07/02/15 10:45:37 Error: Ignoring submitter for this cycle
The schedd says:
07/02/15 10:45:37 (pid:1818) PERMISSION DENIED to unauthenticated@unmapped
from host 10.200.60.19 for command 416 (NEGOTIATE), access level
NEGOTIATOR: reason: NEGOTIATOR authorization policy contains no matching
ALLOW entry for this request; identifiers used for this host:
hostname size = 1, original ip address = 10.200.60.19 07/02/15 10:45:37
(pid:1818) DC_AUTHENTICATE: Command not authorized, done!
Which is what I was trying to fix with my earlier suggestion (B);
sorry that I asked you to turn the wrong knobs. Try adding
ALLOW_NEGOTIATOR and ALLOW_NEGOTIATOR_SCHEDD to your config, setting each
to 10.200.60.*, or the specific machine hosting the negotiator
Note that HTCondor thinks that 10.200.60.19 is
oswrk121.lns.mit.edu. This makes sense, because (at least for me)
oswrk121.lns.mit.edu looks up as 184.108.40.206.
I'm pretty sure what's going on is a disagreement between
different parts of HTCondor about how to handle TCP_FORWARDING_HOST.
If you look at the string the negotiator said it was trying to connect to,
you can see that the first and second IP addresses are not the same; the
first is the TCP_FORWARDING_HOST and the second is the IP address that
HTCondor found on the machine.