Re: [HTCondor-users] ClassAd injected by prepare-job-hook not reflected in condor

Mailing List Archives Public Access	UW Madison Computer Sciences Department Computer Systems Lab

Hi,

I see:

06/14/16 14:39:26 ERROR: read_secure_file(/etc/condor/pool_password): open() failed: Permission denied (errno: 13)
06/14/16 14:39:26 getStoredCredential(): read_secure_file(/etc/condor/pool_password) failed!
06/14/16 14:39:26 ERROR: read_secure_file(/etc/condor/pool_password): open() failed: Permission denied (errno: 13)
06/14/16 14:39:26 getStoredCredential(): read_secure_file(/etc/condor/pool_password) failed!
06/14/16 14:39:26 init_user: pre mcreds->client is 'chbeyer@xxxxxxx'
06/14/16 14:39:26 init_user: pre mcreds->server is 'host/bm-test.desy.de@xxxxxxx'
06/14/16 14:39:26 init_user: pre creds_ is NULL
06/14/16 14:39:26 init_user: post mcreds->client is 'chbeyer@xxxxxxx'
06/14/16 14:39:26 init_user: post mcreds->server is 'host/bm-test.desy.de@xxxxxxx'
06/14/16 14:39:26 init_user: post creds_->client is 'chbeyer@xxxxxxx'
06/14/16 14:39:26 init_user: post creds_->server is 'host/bm-test.desy.de@xxxxxxx'
06/14/16 14:39:26 KERBEROS: creds_->client is 'chbeyer@xxxxxxx'
06/14/16 14:39:26 KERBEROS: creds_->server is 'host/bm-test.desy.de@xxxxxxx'
06/14/16 14:39:26 KERBEROS: input.enctype (18) and session.enctype (18)
06/14/16 14:39:26 CREDMON: invoking /var/lib/condor/util/get_submit_token
06/14/16 14:39:36 CREDMON: b64: 1736 1736
06/14/16 14:39:36 CREDMON: b64:
06/14/16 14:39:36 CREDMON: storing cred for user chbeyer@(null)
06/14/16 14:39:36 STORE_CRED: In mode 'add'
06/14/16 14:39:36 Starting a command on a REMOTE schedd
06/14/16 14:39:36 SharedPortClient: sent connection request to local credd for shared port id 1005424_fcd6
06/14/16 14:39:36 ERROR: read_secure_file(/etc/condor/pool_password): open() failed: Permission denied (errno: 13)
06/14/16 14:39:36 getStoredCredential(): read_secure_file(/etc/condor/pool_password) failed!
06/14/16 14:39:36 ERROR: read_secure_file(/etc/condor/pool_password): open() failed: Permission denied (errno: 13)
06/14/16 14:39:36 getStoredCredential(): read_secure_file(/etc/condor/pool_password) failed!
06/14/16 14:39:36 init_user: pre mcreds->client is 'chbeyer@xxxxxxx'
06/14/16 14:39:36 init_user: pre mcreds->server is 'host/bm-test.desy.de@xxxxxxx'
06/14/16 14:39:36 init_user: pre creds_ is NULL
06/14/16 14:39:36 init_user: post mcreds->client is 'chbeyer@xxxxxxx'
06/14/16 14:39:36 init_user: post mcreds->server is 'host/bm-test.desy.de@xxxxxxx'
06/14/16 14:39:36 init_user: post creds_->client is 'chbeyer@xxxxxxx'
06/14/16 14:39:36 init_user: post creds_->server is 'host/bm-test.desy.de@xxxxxxx'
06/14/16 14:39:36 KERBEROS: creds_->client is 'chbeyer@xxxxxxx'
06/14/16 14:39:36 KERBEROS: creds_->server is 'host/bm-test.desy.de@xxxxxxx'
06/14/16 14:39:36 KERBEROS: input.enctype (18) and session.enctype (18)
06/14/16 14:39:36 STORE_CRED: blocking attempt to update over insecure channel

I created a new pool passwort using 'condor_store_cred -f /etc/condor/pool_password' :

[root@bm-test ~]# ls -l /etc/condor/pool_password
-rw------- 1 root root 7 Jun 14 14:35 /etc/condor/pool_password

As you can see above condor is not happy with the ACLs when I change ownership to uid 'condor' the error stops but in return SCHEDD is unhappy:

06/14/16 13:26:22 (pid:975142) ERROR: read_secure_file(/etc/condor/pool_password): file must be owned by uid 0, was uid 25411
06/14/16 13:26:22 (pid:975142) getStoredCredential(): read_secure_file(/etc/condor/pool_password) failed!
06/14/16 13:26:22 (pid:975142) ERROR: read_secure_file(/etc/condor/pool_password): file must be owned by uid 0, was uid 25411
06/14/16 13:26:22 (pid:975142) getStoredCredential(): read_secure_file(/etc/condor/pool_password) failed!
06/14/16 13:26:37 (pid:975142) Evaluated periodic expressions in 0.000s, scheduling next run in 300s
06/14/16 13:26:42 (pid:975142) condor_read(): Socket closed when trying to read 5 bytes from <131.169.71.96:43966> in non-blocking mode
06/14/16 13:26:42 (pid:975142) IO: EOF reading packet header

What should the ACLs be ?

best regards
~christoph

--
/* Christoph Beyer | Office: Building 2b / 23 *\
* DESY | Phone: 040-8998-2317 *
* - IT - | Fax: 040-8994-2317 *
\* 22603 Hamburg | http://www.desy.de */

Von: "Iain Bradford Steers" <iain.steers@xxxxxxx>
An: "htcondor-users" <htcondor-users@xxxxxxxxxxx>
Gesendet: Dienstag, 14. Juni 2016 12:18:40
Betreff: Re: [HTCondor-users] ClassAd injected by prepare-job-hook not reflected in condor_q -long

How soon are you querying the ad after?

If it's the same mechanism as memory and other attributes then it could be up to 15 minutes before it appears in the schedd copy of the job ad.

Cheers, Iain

Sent from Nine

From: Jason Liu <jason.liu@xxxxxxxxxxxxx>
Sent: 14 Jun 2016 12:10 p.m.
To: htcondor-users@xxxxxxxxxxx
Subject: [HTCondor-users] ClassAd injected by prepare-job-hook not reflected in condor_q -long

Hi,

I wrote a simple prepare-job-hook which basically just

echo MyVariable = \âfoobar\â

In the Starter log I can see MyVariable has been injected into the ClassAd.

However, when I query the running job via condor_q âlong, MyVariable is not there.

Is this a bug?

Thanks

Jason

PRIVACY AND CONFIDENTIALITY NOTICE
The information contained in this message is intended for the named recipients only. It may contain confidential information and if you are not the intended recipient, you must not copy, distribute or take any action in reliance on it. If you have received this message in error please destroy it and reply to the sender immediately or contact us at the above telephone number.
VIRUS DISCLAIMER
While we take every precaution against presence of computer viruses on our system, we accept no responsibility for loss or damage arising from the transmission of viruses to e-mail recipients.

_______________________________________________
HTCondor-users mailing list
To unsubscribe, send a message to htcondor-users-request@xxxxxxxxxxx with a
subject: Unsubscribe
You can also unsubscribe by visiting
https://lists.cs.wisc.edu/mailman/listinfo/htcondor-users

The archives can be found at:
https://lists.cs.wisc.edu/archive/htcondor-users/