[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [HTCondor-users] Forwarding Kerberos-Credentials

Hi Frank,

the feature was originally developed for usage at CERN and during the last year the HTCondor team was kind enough to develop it a bit further with our aid/input to make it usuable for other sites to. 

We are currently using it with full KRB/AFS integration on a pilot cluster that is upposed to be our main 'local' batch facility with > 6.000 cores by the mid of next year.

Though the implementation is now more or less vanilla getting it started involves a bit more than just editing config files. 

If you like I can give you more details and guide you through the process of getting it up and running as I opted for writing a recipe later anyway ....


Christoph Beyer
DESY Hamburg

Notkestr. 85
Building 02b, Room 009
22607 Hamburg

mail: christoph.beyer@xxxxxxx

----- UrsprÃngliche Mail -----
Von: "FB" <fbo2@xxxxxxx>
An: "htcondor-users" <htcondor-users@xxxxxxxxxxx>
Gesendet: Freitag, 20. Oktober 2017 09:09:21
Betreff: [HTCondor-users] Forwarding Kerberos-Credentials

Dear all,

for some months, condor is being used at my place of work to not
waste our workstation's CPU cycles. Since the data being processed
is a little bit sensitive, we're in the process of moving from NFSv3/sec=sys
to NFSv4/gssapi which requires Kerberos credentials present when accessing
data over the network. Google uncovered some slides mentioning credential
forwarding in HTCondor but I couldn't find anything in the manual about how to
use these SEC_CREDENTIAL_* -configuration options to make that work.

Does anyone know, how to set up credential forwarding? Is is really
possible to do "forwarding" or is it more like "magically creating"
arbitrary credentials on demand (which would be slightly less optimal
in a network of workstations)?

Best regards,

HTCondor-users mailing list
To unsubscribe, send a message to htcondor-users-request@xxxxxxxxxxx with a
subject: Unsubscribe
You can also unsubscribe by visiting

The archives can be found at: