Re: [HTCondor-users] IE condor does not see FQuser from active directory logon and thus user can not submit foo != foo@xxxxxxxxxxxxxx

[Zach Miller <zmiller@xxxxxxxxxxx>]

The mapfile isn't sufficient.  HTCondor just isn't prepared for a username with multiple '@' signs in it.

I can put you in touch with someone here on campus that worked around it by reconfiguring how the node interacts with the Active Directory service.  I'm not sure of the details but I think they'd be willing to help.


Cheers,
-zach


> -----Original Message-----
> From: HTCondor-users <htcondor-users-bounces@xxxxxxxxxxx> On Behalf Of
> Willam Taylor
> Sent: Tuesday, April 24, 2018 1:18 PM
> To: HTCondor-Users Mail List <htcondor-users@xxxxxxxxxxx>
> Subject: Re: [HTCondor-users] IE condor does not see FQuser from active
> directory logon and thus user can not submit foo != foo@xxxxxxxxxxxxxx
> 
> Any fix projected for this yet. Submit node at the medical school still
> not usable.
> 
> I would think a map file change might work. However you guys know best.
> 
> bt
> 
> Bill Taylor  voip 608-261-1478 (cell 608-219-4430)
> Infrastructural Technologies
> Informatics System Specialist
> Biomedical Informatics Core
> UW ICTR
> 
> On 3/7/2018 11:16 AM, Zach Miller wrote:
> > Hi Bill,
> >
> > Let me guess... this is an Active Directory environment?
> >
> > When you type 'whoami' at the command line, do you get a simple username,
> or something containing an '@' sign?
> >
> > If it's the latter, this is a problem.  HTCondor doesn't currently handle
> usernames with an '@' in them because of some assumptions it makes.
> >
> > It's something I'm aware of and was actually going to spend some time on
> Thursday looking into for a possible hack/workaround.  I'll let you know if
> I have any success there.
> >
> >
> > Cheers,
> > -zach
> >
> >
> >> -----Original Message-----
> >> From: HTCondor-users [mailto:htcondor-users-bounces@xxxxxxxxxxx] On
> Behalf
> >> Of Willam Taylor
> >> Sent: Wednesday, March 07, 2018 9:24 AM
> >> To: htcondor-users@xxxxxxxxxxx
> >> Subject: [HTCondor-users] Making a fully qualified user gain submit
> access
> >> map to a non-fully qualified user as HTCondor sees them
> >>
> >> Logon and file permissions are xxxxxxxx@xxxxxxxxx but HTCondor fails
> >> because it wants the owner to be xxxxxxx which is not a valid user.
> >>
> >> I have set a GSI_DAEMON_DIRECTORY and have placed a grid-mapfile there
> >> but the suggested entry does not seem to work:
> >>
> >> /*/\0@xxxxxxxxxxxxxxxxxxx
> >>
> >> I am failing to find examples for a case like this.
> >>
> >> Thanks in advance
> >>
> >> --
> >>
> >> Bill Taylor  voip 608-261-1478 (cell 608-219-4430)
> >> Infrastructural Technologies
> >> Informatics System Specialist
> >> Biomedical Informatics Core
> >> UW ICTR
> >>
> >> _______________________________________________
> >> HTCondor-users mailing list
> >> To unsubscribe, send a message to htcondor-users-request@xxxxxxxxxxx
> with a
> >> subject: Unsubscribe
> >> You can also unsubscribe by visiting
> >> https://lists.cs.wisc.edu/mailman/listinfo/htcondor-users
> >>
> >> The archives can be found at:
> >> https://lists.cs.wisc.edu/archive/htcondor-users/
> > _______________________________________________
> > HTCondor-users mailing list
> > To unsubscribe, send a message to htcondor-users-request@xxxxxxxxxxx with
> a
> > subject: Unsubscribe
> > You can also unsubscribe by visiting
> > https://lists.cs.wisc.edu/mailman/listinfo/htcondor-users
> >
> > The archives can be found at:
> > https://lists.cs.wisc.edu/archive/htcondor-users/
> 
> _______________________________________________
> HTCondor-users mailing list
> To unsubscribe, send a message to htcondor-users-request@xxxxxxxxxxx with a
> subject: Unsubscribe
> You can also unsubscribe by visiting
> https://lists.cs.wisc.edu/mailman/listinfo/htcondor-users
> 
> The archives can be found at:
> https://lists.cs.wisc.edu/archive/htcondor-users/