Re: [HTCondor-users] jobs getting run as nobody

[Francisco Pereira <francisco.pereira@xxxxxxxxx>]

Hi Marco,

Looks like indeed it is an issue with DNS and the content of the /etc/hosts files.

Thank you (and everyone else) for helping me check all other options, as we now know where to look : ).

cheers,

Francisco

On Wed, Feb 10, 2016 at 1:02 PM, Marco Mambelli <marcom@xxxxxxxx> wrote:

Hi Francisco,

reverse DNS (or /etc/hosts entries) are required for UID_DOMAIN to be honored.

You said that /etc/hosts is OK

Try anyway to set:

NO_DNS to True and

DEFAULT_DOMAIN_NAME to the same value in submit and worker

As they said

STARTER_ALLOW_RUNAS_OWNER = True Â(in the startd config - should be the default on linux)

and

RunAsOwner = True (in the job ClassAdÂ

both affect running as owner instead of nobody.

Best,

Marco

On Feb 10, 2016, at 11:11 AM, Francisco Pereira <francisco.pereira@xxxxxxxxx> wrote:

Hi John,

Yes, STARTER_ALLOW_RUNAS_OWNER = TRUE on both submitter (head node) and executer sides (sorry for omitting this). I also checked that /etc/nsswitch.conf is giving priority to /etc/hosts in determining the domain name, just in case, although from the manual I thought specifying FILESYSTEM_DOMAIN would obviate the need for this.

thank you!

Francisco

On Wed, Feb 10, 2016 at 10:40 AM, John M Knoeller <johnkn@xxxxxxxxxxx> wrote:

Did You have

STARTER_ALLOW_RUNAS_OWNER = TRUE

On the execute side?

Â

From: HTCondor-users [mailto:htcondor-users-bounces@xxxxxxxxxxx] On Behalf Of Francisco Pereira
Sent: Tuesday, February 9, 2016 7:31 PM
To: Condor-Users Mail List <condor-users@xxxxxxxxxxx>
Subject: [HTCondor-users] jobs getting run as nobody

Â

hi,

Â

I am trying to understand the circumstances in which a job will run as user "nobody", rather than the user that submitted the job, which we would prefer.

Â

We have home directories mounted via NFS to all the machines in a small cluster, and the UIDs for users are the same across them. As suggested in the manual, I set

Â

FILESYSTEM_DOMAIN = <our domain>

UID_DOMAIN = <our domain>

TRUST_UID_DOMAIN = TRUE

SOFT_UID_DOMAIN = TRUE

Â

in the configuration files of both the submitting and executing machine. I then submit a job with a test script that has

Â

run_as_owner = True

Â

and gives us the output of `pwd`, `hostname` and `whoami`, which confirms that it runs as "nobody" in the correct machine.

Â

What am I overlooking here?

Â

thank you very much for any help!

Francisco

_______________________________________________
HTCondor-users mailing list
To unsubscribe, send a message to htcondor-users-request@xxxxxxxxxxx with a
subject: Unsubscribe
You can also unsubscribe by visiting
https://lists.cs.wisc.edu/mailman/listinfo/htcondor-users

The archives can be found at:
https://lists.cs.wisc.edu/archive/htcondor-users/

_______________________________________________
HTCondor-users mailing list
To unsubscribe, send a message to htcondor-users-request@xxxxxxxxxxx with a
subject: Unsubscribe
You can also unsubscribe by visiting
https://lists.cs.wisc.edu/mailman/listinfo/htcondor-users

The archives can be found at:
https://lists.cs.wisc.edu/archive/htcondor-users/

_______________________________________________
HTCondor-users mailing list
To unsubscribe, send a message to htcondor-users-request@xxxxxxxxxxx with a
subject: Unsubscribe
You can also unsubscribe by visiting
https://lists.cs.wisc.edu/mailman/listinfo/htcondor-users

The archives can be found at:
https://lists.cs.wisc.edu/archive/htcondor-users/