[HTCondor-users] Submitting jobs from Windows machine

[jcalitz <j.calitz@xxxxxxxxxxxx>]

Hi all

We have Linux, OSX and Windows machines in our condor pool.   So far, 
job submissions were done from a some OSX and Linux machines only, which 
worked fine.

Trying to submit a job from  a Windows machine(123.123.123.123) resulted 
in this error message:
ERROR: Failed to connect to local queue manager

and in the schedd log file:
"authorization of 123.123.123.123 did not result in a valid mapped user 
name, which is required for this command"

I presumed this points to our security mapfile mapping "condor" and 
"admin" users only.  We have the following security config entries

SEC_DEFAULT_AUTHENTICATION = OPTIONAL
SEC_ADMINISTRATOR_AUTHENTICATION = OPTIONAL
SEC_ADMINISTRATOR_AUTHENTICATION_METHODS = ssl
SEC_CONFIG_AUTHENTICATION = OPTIONAL
SEC_CONFIG_AUTHENTICATION_METHODS = ssl
SEC_DAEMON_AUTHENTICATION = REQUIRED
SEC_DAEMON_INTEGRITY = REQUIRED
SEC_DAEMON_AUTHENTICATION_METHODS = ssl
SEC_CLIENT_AUTHENTICATION_METHODS = fs, ssl, password
ALLOW_WRITE = *
ALLOW_READ = *
and working SSL entries for
GSI_DAEMON_DIRECTORY=$(LOCAL_DIR)/security
AUTH_SSL_SERVER_CERTFILE = $(GSI_DAEMON_DIRECTORY)/somefile.crt
AUTH_SSL_CLIENT_CERTFILE = $(GSI_DAEMON_DIRECTORY)/somefile.crt
AUTH_SSL_SERVER_KEYFILE = $(GSI_DAEMON_DIRECTORY)/somefile.key
AUTH_SSL_CLIENT_KEYFILE = $(GSI_DAEMON_DIRECTORY)/somefile.key
AUTH_SSL_SERVER_CAFILE = $(GSI_DAEMON_DIRECTORY)/somecondorca.crt
AUTH_SSL_CLIENT_CAFILE = $(GSI_DAEMON_DIRECTORY)/somecondorca.crt

CERTIFICATE_MAPFILE = $(GSI_DAEMON_DIRECTORY)/mapfile

and mapfile

SSL "CN=CondorAdmin/email"   admin
SSL   .*.massey.ac.nz          condor

Any suggestions please?

Hannes Calitz