[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [HTCondor-users] condor_config_val request refused



Ah, the issue here is that running âcondor_config_val FOOâ is just looking in the configuration files for âFOOâ.  It is not communicating with the running daemons to pick up the dynamically changed variable.

 

If you run âcondor_config_val -master DEFRAG_MAX_WHOLE_MACHINESâ, the tool will query the daemon directly and you should see the updated value.  (You could query the defrag daemon itself using the â-addressâ argument, but it should have the same value as the master)

 

So I think you are probably all set.

 

 

Cheers,

-zach

 

 

-----Original Message-----
From: HTCondor-users <htcondor-users-bounces@xxxxxxxxxxx>
Date: Friday, October 16, 2020 at 4:47 AM
To: HTCondor-Users Mail List <htcondor-users@xxxxxxxxxxx>
Subject: Re: [HTCondor-users] condor_config_val request refused

Hi Zach,

 

I still have a problem. I don't know if the variable is set with the new

value or not:

 

[root@condor1atlas ~]# condor_config_val  -rset "DEFRAG_MAX_WHOLE_MACHINES

= 15"

Successfully set configuration "DEFRAG_MAX_WHOLE_MACHINES = 15" on master

condor1atlas.nipne.ro

<192.168.181.11:9618?addrs=192.168.181.11-9618&noUDP&sock=24487_9fad>. The

change will take effect on the next condor_reconfig.

[root@condor1atlas ~]# condor_reconfig

Sent "Reconfig" command to local master

[root@condor1atlas ~]# condor_config_val DEFRAG_MAX_WHOLE_MACHINES

20

 

As you can see the value is not 15 but 20(the one in the config file).

 

I'm missing something?

 

Thank you,

Mihai

 

 

> I just thought of another thing that could be the problem:

> 

> The user that is running the "condor_config_val -rset" must also be part

> of the ALLOW_CONFIG authorization list.  I think by default that list is

> empty.  So suppose you wanted the "condor" user to be able to change those

> values, and only from the local host, you should also add this line to

> your condor_config:

>        ALLOW_CONFIG = condor@$(UID_DOMAIN)/$(IP_ADDRESS)

> 

> Even after you solved the first problem from the earlier email, you'd

> probably hit this issue as well.

> 

> 

> Cheers,

> -zach

> 

> 

> ïOn 10/15/20, 12:47 PM, "HTCondor-users on behalf of Zach Miller"

> wrote:

> 

>     Hello,

> 

>     You don't actually want to use the "DEFRAG." prefix here.  It is the

> condor_master daemon that is looking at the "SETTABLE_ATTRS_CONFIG"

> variable to see what is allowed to be set.  I would just omit the

> prefix entirely and put this in your config file:

>        SETTABLE_ATTRS_CONFIG =

> DEFRAG_MAX_WHOLE_MACHINE,DEFRAG_MAX_CONCURRENT_DRAINING,DEFRAG_DRAINING_MACHINE_PER_HOUR

> 

>     Don't forget to reconfig the master, then try again and let me know if

> that did the trick.

> 

> 

>     Cheers,

>     -zach

> 

> 

>     On 10/15/20, 11:16 AM, "HTCondor-users on behalf of Mihai Ciubancan"

> wrote:

> 

>         Hello,

> 

>         I have issues setting some values through condor_config_val:

> 

>         condor_config_val  -rset "DEFRAG_MAX_WHOLE_MACHINES = 15"

>         Attempt to set configuration "DEFRAG_MAX_WHOLE_MACHINES = 15" on

> master

>         condor1atlas.nipne.ro

>         <192.168.181.11:9618?addrs=192.168.181.11-9618+[--1]-9618&noUDP&sock=32084_88a9>

>         failed.

> 

>         And In MasterLog I get the message:

>         10/15/20 19:12:20 WARNING: Someone at 192.168.181.11 is trying to

> modify

>         "DEFRAG_MAX_WHOLE_MACHINES"

>         10/15/20 19:12:20 WARNING: Potential security problem, request

> refused

> 

>         I have set SETTABLE_ATRS_CONFIG and ENABLE_RUNTIME_CONFIG

>         DEFRAG.SETTABLE_ATTRS_CONFIG =

>         DEFRAG_MAX_WHOLE_MACHINE,DEFRAG_MAX_CONCURRENT_DRAINING,DEFRAG_DRAINING_MACHINE_PER_HOUR

>         ENABLE_RUNTIME_CONFIG = TRUE

> 

>         I also tried with DEFRAG.SETTABLE_ATTRS_ADMINISTRATOR but it

> doesn't work.

> 

>         Do you know what I'm missing?

> 

>         Regards,

>         Mihai

> 

> 

> 

> 

>         Dr. Mihai Ciubancan

>         IT Department

>         National Institute of Physics and Nuclear Engineering "Horia

> Hulubei"

>         Str. Reactorului no. 30, P.O. BOX MG-6

>         077125, Magurele - Bucharest, Romania

>         http://www.ifin.ro

>         Work:   +40214042360

>         Mobile: +40761345687

>         Fax:    +40214042395

> 

>         _______________________________________________

>         HTCondor-users mailing list

>         To unsubscribe, send a message to

>         subject: Unsubscribe

>         You can also unsubscribe by visiting

> 

>         The archives can be found at:

> 

> 

>     _______________________________________________

>     HTCondor-users mailing list

>     To unsubscribe, send a message to htcondor-users-request@xxxxxxxxxxx

> with a

>     subject: Unsubscribe

>     You can also unsubscribe by visiting

> 

>     The archives can be found at:

> 

> 

> _______________________________________________

> HTCondor-users mailing list

> To unsubscribe, send a message to htcondor-users-request@xxxxxxxxxxx with

> a

> subject: Unsubscribe

> You can also unsubscribe by visiting

> 

> The archives can be found at:

 

 

Dr. Mihai Ciubancan

IT Department

National Institute of Physics and Nuclear Engineering "Horia Hulubei"

Str. Reactorului no. 30, P.O. BOX MG-6

077125, Magurele - Bucharest, Romania

Work:   +40214042360

Mobile: +40761345687

Fax:    +40214042395

 

_______________________________________________

HTCondor-users mailing list

To unsubscribe, send a message to htcondor-users-request@xxxxxxxxxxx with a

subject: Unsubscribe

You can also unsubscribe by visiting

 

The archives can be found at: