Re: [HTCondor-users] Remote holding of other user's jobs

[Zach Miller <zmiller@xxxxxxxxxxx>]

Hello,

I think what you want is to check out "QUEUE_SUPER_USERS" unless I'm missing something about your setup:
    http://research.cs.wisc.edu/htcondor/manual/v8.9/ConfigurationMacros.html#dx33-196135

QUEUE_SUPER_USERS can manipulate any job in the queue.  By default "condor" is already a queue super user so if you use the map file to map a specific GSI cert DN to "condor" that should do what you want.

Or, if you want to map your GSI cert to some other specific unix user (e.g. "colsuper") and add that specific user to the QUEUE_SUPER_USERS and I think you'll be all set:
    QUEUE_SUPER_USERS = root, condor, colsuper


Cheers,
-zach



ïOn 4/5/19, 11:18 AM, "HTCondor-users on behalf of Colson Driemel" <htcondor-users-bounces@xxxxxxxxxxx on behalf of colsond@xxxxxxx> wrote:

    Hi all,
    
    I'm trying to set up a super user of sorts that will be able to remotely 
    perform actions like holding or editing the classad of jobs.
    
    I've been sifting through the condor configuration options listed in the 
    security section 
    (https://research.cs.wisc.edu/htcondor/manual/v8.4/3_6Security.html) but 
    nothing I've tried seems to get the results I'm after.
    
    Is anyone familiar with a configuration that would work for this use 
    case? As another note I'm using GSI authentication via certificate proxies.
    
    -Colson
    
    _______________________________________________
    HTCondor-users mailing list
    To unsubscribe, send a message to htcondor-users-request@xxxxxxxxxxx with a
    subject: Unsubscribe
    You can also unsubscribe by visiting
    https://lists.cs.wisc.edu/mailman/listinfo/htcondor-users
    
    The archives can be found at:
    https://lists.cs.wisc.edu/archive/htcondor-users/