Re: [HTCondor-users] Shadow error while transferring proxy certificates

[Kenyi Hurtado Anampa <khurtado@xxxxxx>]

Hi Brian, Saqib,

Thanks for the help! I downgraded to 9.1.2 in the schedd and things are working normally again.

Best regards,

Kenyi

On Tue, Aug 24, 2021 at 7:45 AM Saqib Haleem <Saqib.Haleem@xxxxxxx> wrote:

Hi,

In CMS pool, we are currently running condor version 8.8.12 on startd side . But, even switching startd to condor 9.0.1 and 9.0.5 results in same error. We did not test Startd from development release yet.

Best Regards

Saqib

---

From: Bockelman, Brian [BBockelman@xxxxxxxxxxxxx]
Sent: 24 August 2021 04:17
To: HTCondor-Users Mail List
Cc: cms-htcondor-admins (A group HTCondor experts to debug related issues)
Subject: Re: [HTCondor-users] Shadow error while transferring proxy certificates

Hi Kenyi,

The delegation code was rewritten from scratch in 9.1.3 to drop the Globus dependency.

Do you happen to know the version of condor on the starter side? I suppose there could be an incompatibility between the two.

Thanks,

Brian

On Aug 23, 2021, at 7:03 PM, Kenyi Hurtado Anampa <khurtado@xxxxxx> wrote:

Hello,

I'm using condor 9.1.3 with a glidein-based pool (the CMS Condor pool).Â

We send jobs with a proxy certificate viaÂx509userproxy.Â

However, the shadow fails while transferring the proxy with a delegation error. Any ideas of what is wrong?

Here is the ShadowLog info on one of the jobs:

08/23/21 18:58:01 Initializing a VANILLA shadow for job 9612559.0 08/23/21 18:58:01 (9612559.0) (2485243): LIMIT_DIRECTORY_ACCESS = <unset> 08/23/21 18:58:01 (9612559.0) (2485243): Request to run on slot1_5@glidein_40633_603955277@g33n05.hep.wisc.edu <128.104.227.105:15975?CCBID=128.142.194.25:9618%3faddrs%3d128.142.194.25-9618%26alias%3dvocms0813.cern.ch%26noUDP%26sock%3dcollector9695#1398181%20131.225.189.210:9618%3faddrs%3d131.225.189.210-9618%26alias%3dcmssrvz03.fnal.gov%26noUDP%26sock%3dcollector9681_259953_27a4#549336&PrivNet=g33n05.hep.wisc.edu&addrs=128.104.227.105-15975+[2607-f388-101c-1000--54]-15975&noUDP> was ACCEPTED 08/23/21 18:58:02 (9612559.0) (2485243): Delegation error: 139689747117712:error:0D0C50A1:lib(13):func(197):reason(161):a_verify.c:213: 08/23/21 18:58:02 (9612559.0) (2485243): Delegation error: 08/23/21 18:58:02 (9612559.0) (2485243): ReliSock::put_x509_delegation(): delegation failed: X509Credential::Delegate() failed 08/23/21 18:58:03 (9612559.0) (2485243): DoUpload: SHADOW at 192.170.227.182 failed to send file(s) to <128.104.227.105:10155>: error sending /tmp/x509up_u24239; STARTER at 128.104.227.105 failed to receive file /var/condor/.execute-links/slot01/dir_40630/glide_HHQkYW/execute/dir_38393/x509up_u24239 08/23/21 18:58:03 (9612559.0) (2485243): ERROR "Error from slot1_5@glidein_40633_603955277@g33n05.hep.wisc.edu: Failed to transfer files" at line 560 in file /var/lib/condor/execute/slot1/dir_78994/userdir/.tmpoEcKZl/BUILD/condor-9.1.3/src/condor_shadow.V6.1/pseudo_ops.cpp

Best regards,

Kenyi

_______________________________________________
HTCondor-users mailing list
To unsubscribe, send a message to htcondor-users-request@xxxxxxxxxxx with a
subject: Unsubscribe
You can also unsubscribe by visiting
https://lists.cs.wisc.edu/mailman/listinfo/htcondor-users

The archives can be found at:
https://lists.cs.wisc.edu/archive/htcondor-users/