[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [HTCondor-users] x509* job ClassAds not defined when SUBMIT_REQUIREMENT is evaluated? [8.6]

Hi Todd, Jaime,

ok, this explains.
IMHO it would be nice to have these classAds available again at SUBMIT_REQUIREMENT, but, of course, only if this does not imply security problems (as I said, we can easily work this around by defining custom classAds)



Hi Andrea,

Thank you for reporting the above.  I am not the security expert, but I don't believe this is the expected behavior.  I suspect perhaps a regression occurred implementing this ticket for HTCondor v8.5.8 -


We will investigate.

Things changed in HTCondor 8.5.8 so that the X509 attributes in the job ad are set by the condor_schedd daemon to reflect the user’s proxy file. Previously, condor_submit set these attributes. But the attributes are set by the schedd after SUBMIT_REQUIREMENT evaluation. We should probably change it to occur before SUBMIT_REQUIREMENT.

Thanks and regards,
Jaime Frey
UW-Madison HTCondor Project

HTCondor-users mailing list
To unsubscribe, send a message to htcondor-users-request@xxxxxxxxxxx with a
subject: Unsubscribe
You can also unsubscribe by visiting

The archives can be found at: