[HTCondor-users] CREDMON errors and SEC_CREDENTIAL_DIRECTORY

[Carles Acosta <cacosta@xxxxxx>]

Dear all,

I'm testing HTcondor-CE with HTcondor (8.5.5-1). Users submit jobs with 
their proxy, they are mapped to a local user and routed by htcondor-CE 
to the condor schedd. Everything is working fine. However, in the 
SchedLogs for condor-ce and condor, I see several warnings, for instance:

ZKM: creating mark file for user dteam004
CREDMON: ERROR: got mark_creds_for_sweeping but SEC_CREDENTIAL_DIRECTORY 
not defined!

But, as I've said, everything is working.

I've been searching in htcondor manual and htcondor-ce wikis and it's 
not clear for me what the SEC_CREDENTIAL_DIRECTORY is. I found somewhere 
that it's related with kerberos usage, but I don't use kerberos (the 
HTcondor pool is based in PASSWORD authentication).

So, I added in htcondor and htcondor-ce configurations a path to 
SEC_CREDENTIAL_DIRECTORY and reloaded the daemons. Marks were created in 
credential directory:

# ls -lrth /var/lib/condor/credential/
total 0
-rw------- 1 root root 0 Sep  6 17:35 dteam004.mark

But then, after restarting the condor and condor-ce schedds, they 
started to fail:

[...]
09/07/16 09:11:25 SCHEDD: User credentials not up-to-date.  Start-up 
delayed.  Waiting 10 seconds and trying 60 more times.
09/07/16 09:11:55 CREDMON: FAILURE: credmon never created 
/var/lib/condor-ce/credentials/CREDMON_COMPLETE after 20 seconds!
[...]

Thus, my question is what is the SEC_CREDENTIAL_DIRECTORY? Do I really 
need it?

Cheers,

Carles

--
Carles Acosta i Silva
PIC (Port d'Informacià CientÃfica)
Campus UAB, Edifici D
E-08193 Bellaterra, Barcelona
Tel: +34 93 581 33 22
Fax: +34 93 581 41 10
http://www.pic.es  
AvÃs - Aviso - Legal Notice:http://www.ifae.es/legal.html