Re: [HTCondor-users] Requests and HTCondor Python bindings seem to fight over certificate

[Todd Tannenbaum <tannenba@xxxxxxxxxxx>]

On 10/27/2015 8:04 AM, Todd Tannenbaum wrote:
> > Can anyone shed any light?
> >
> > Thanks,
>
> Just a guess, but is your Python script and attempting to communicate
> to both HTCondor (with GSI or SSL) and Puppet from different threads
> in the same process?  If so, perhaps there is thread safety problem,
> for instance perhaps the HTCondor client libraries that the Python
> interface uses are not thread safe with respect to OpenSSL and/or
> GSI.
>
> regards Todd

Followup to my own post above :), but some evidence that my guess is
correct -  see

  https://htcondor-wiki.cs.wisc.edu/index.cgi/tktview?tn=4464

(the implementation of ticket 4464 changed some in ticket 4483, but I
think the implication is the same).

Maybe you could try setting environment variable GLOBUS_THREAD_MODEL to 
"pthread", but it looks like the code purposefully overides that setting 
to prevent hard-to-diagnose problems if the Globus native packages are 
not installed or other such shared library problems--- a Linux-style 
spin on Windows DLL hell :)

So without doing any tests myself, I think at the current time 
htcondor's python bindings are not thread safe with respect to GSI or 
OpenSSL. Eventually, we should do something about this, but we could do 
something about it sooner rather than later if you cannot work-around 
this on your side..

regards,
Todd