Re: [HTCondor-users] Windows, Credential setup issues

[Mathieu PeyrÃga <mathieu.peyrega@xxxxxxxxx>]

Hello,

I've been using the config files provided in PM by Sean Milligan

It's configured with a central manager which is not used as a
computation node, so I also set-up a second machine.

condor_store_cred returns operation suceed, but the check command line
shows no LocalCred

C:\Users\Mathieu>condor_status -f "%s\t" Name -f "%s\n"
ifThenElse(isUndefined(LocalCredd),\"UNDEF\",LocalCredd)
slot10@LUGDUNUM UNDEF
slot11@LUGDUNUM UNDEF
slot12@LUGDUNUM UNDEF
slot13@LUGDUNUM UNDEF
slot14@LUGDUNUM UNDEF
slot15@LUGDUNUM UNDEF
slot16@LUGDUNUM UNDEF
slot1@LUGDUNUM  UNDEF
slot2@LUGDUNUM  UNDEF
slot3@LUGDUNUM  UNDEF
slot4@LUGDUNUM  UNDEF
slot5@LUGDUNUM  UNDEF
slot6@LUGDUNUM  UNDEF
slot7@LUGDUNUM  UNDEF
slot8@LUGDUNUM  UNDEF
slot9@LUGDUNUM  UNDEF

I attached the condor CreddLog in case it helps to spot whats going on.

There are some strange lines such as :

01/19/16 11:55:33 DC_AUTHENTICATE: required authentication of
192.168.1.167 failed: AUTHENTICATE:1006:exceeded 1453200933 deadline
during authentication|AUTHENTICATE:1004:Failed to authenticate using
PASSWORD


Regards,

Mathieu






Le 18/01/2016 19:04, Sean Milligan a écrit :
> Looking at your condor_config.local.credd and comparing it to mine this is the only difference I see:
> 
> Mine
> # Only honor password fetch requests to the trusted "condor_pool" user
> CREDD.ALLOW_DAEMON = condor_pool@$(UID_DOMAIN)
> 
> Yours
> # Only honor password fetch requests to the trusted "condor_pool" user
> CREDD.ALLOW_DAEMON = *@$(UID_DOMAIN),*@LUTECE, *
> 
> But I don't know if this has anything to do with your issue.
> 

01/19/16 11:36:05 Initializing Directory: curr_dir = C:\condor\config
01/19/16 11:36:05 ******************************************************
01/19/16 11:36:05 ** condor_credd.exe (CONDOR_CREDD) STARTING UP
01/19/16 11:36:05 ** C:\condor\bin\condor_credd.exe
01/19/16 11:36:05 ** SubsystemInfo: name=CREDD type=DAEMON(12) class=DAEMON(1)
01/19/16 11:36:05 ** Configuration: subsystem:CREDD local:<NONE> class:DAEMON
01/19/16 11:36:05 ** $CondorVersion: 8.4.3 Dec 15 2015 BuildID: 352143 $
01/19/16 11:36:05 ** $CondorPlatform: x86_64_Windows7 $
01/19/16 11:36:05 ** PID = 5408
01/19/16 11:36:05 ** Log last touched time unavailable (No such file or directory)
01/19/16 11:36:05 ******************************************************
01/19/16 11:36:05 Using config source: C:\condor\condor_config
01/19/16 11:36:05 Using local config sources: 
01/19/16 11:36:05    C:\condor\condor_config.local
01/19/16 11:36:05 config Macros = 68, Sorted = 68, StringBytes = 1764, TablesBytes = 1928
01/19/16 11:36:05 CLASSAD_CACHING is ENABLED
01/19/16 11:36:05 Daemon Log is logging: D_FULLDEBUG D_ALWAYS D_ERROR
01/19/16 11:36:05 Not using shared port because USE_SHARED_PORT=false
01/19/16 11:36:05 Daemoncore: Listening at <0.0.0.0:9620> on TCP (ReliSock) and UDP (SafeSock).
01/19/16 11:36:05 DaemonCore: command socket at <192.168.1.181:9620?addrs=192.168.1.181-9620>
01/19/16 11:36:05 DaemonCore: private command socket at <192.168.1.181:9620?addrs=192.168.1.181-9620>
01/19/16 11:36:05 Setting maximum accepts per cycle 8.
01/19/16 11:36:05 Will use TCP to update collector <192.168.1.181:9618>
01/19/16 11:36:05 Not using shared port because USE_SHARED_PORT=false
01/19/16 11:36:05 main_init() called
01/19/16 11:36:05 DaemonCore: in SendAliveToParent()
01/19/16 11:36:05 Completed DC_CHILDALIVE to daemon at <192.168.1.181:50832>
01/19/16 11:36:05 DaemonCore: Leaving SendAliveToParent() - success
01/19/16 11:36:05 Trying to update collector <192.168.1.181:9618>
01/19/16 11:36:05 Attempting to send update via TCP to collector <192.168.1.181:9618>
01/19/16 11:36:05 File descriptor limits: max 1024, safe 820
01/19/16 11:36:05 sspi_client_auth() entered
01/19/16 11:36:05 sspi_client_auth() looping
01/19/16 11:36:05 sspi_client_auth() exiting
01/19/16 11:41:05 Trying to update collector <192.168.1.181:9618>
01/19/16 11:41:05 Attempting to send update via TCP to collector <192.168.1.181:9618>
01/19/16 11:46:05 Trying to update collector <192.168.1.181:9618>
01/19/16 11:46:05 Attempting to send update via TCP to collector <192.168.1.181:9618>
01/19/16 11:51:05 Trying to update collector <192.168.1.181:9618>
01/19/16 11:51:05 Attempting to send update via TCP to collector <192.168.1.181:9618>
01/19/16 11:55:13 getStoredCredential(): Could not locate credential for user 'condor_pool@LUGDUNUM'
01/19/16 11:55:13 Found credential for user 'condor_pool@LUTECE'
01/19/16 11:55:33 condor_read(): Socket closed when trying to read 5 bytes from <192.168.1.167:49922> in non-blocking mode
01/19/16 11:55:33 IO: EOF reading packet header
01/19/16 11:55:33 condor_read(): Socket closed when trying to read 5 bytes from <192.168.1.167:49922>
01/19/16 11:55:33 IO: EOF reading packet header
01/19/16 11:55:33 DC_AUTHENTICATE: required authentication of 192.168.1.167 failed: AUTHENTICATE:1006:exceeded 1453200933 deadline during authentication|AUTHENTICATE:1004:Failed to authenticate using PASSWORD
01/19/16 11:55:33 condor_write(): Socket closed when trying to write 39 bytes to <192.168.1.167:49922>, fd is 568
01/19/16 11:55:33 Buf::write(): condor_write() failed
01/19/16 11:56:05 Trying to update collector <192.168.1.181:9618>
01/19/16 11:56:05 Attempting to send update via TCP to collector <192.168.1.181:9618>
01/19/16 11:56:27 DaemonCore: in SendAliveToParent()
01/19/16 11:56:27 Completed DC_CHILDALIVE to daemon at <192.168.1.181:50832>
01/19/16 11:56:27 DaemonCore: Leaving SendAliveToParent() - success
01/19/16 11:57:26 Got SIGHUP.  Re-reading config files.
01/19/16 11:57:26 Initializing Directory: curr_dir = C:\condor\config
01/19/16 11:57:26 Setting maximum accepts per cycle 8.
01/19/16 11:57:26 Will use TCP to update collector <192.168.1.181:9618>
01/19/16 11:57:26 Not using shared port because USE_SHARED_PORT=false
01/19/16 11:57:26 main_config() called
01/19/16 12:01:05 Trying to update collector <192.168.1.181:9618>
01/19/16 12:01:05 Attempting to send update via TCP to collector <192.168.1.181:9618>
01/19/16 12:01:05 File descriptor limits: max 1024, safe 820
01/19/16 12:06:05 Trying to update collector <192.168.1.181:9618>
01/19/16 12:06:05 Attempting to send update via TCP to collector <192.168.1.181:9618>