[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[HTCondor-users] ADD_WINDOWS_FIREWALL default has also changed from True (8.6.12) to $(CondorIsAdmin)=False (8.8.12)

Hi Zach


Just something else I noticed when looking at other changed default values between 8.6.12 and 8.8.12?


From the docs:




When set to False, the condor_master will not automatically add HTCondor to the Windows Firewall list of trusted applications.

Such trusted applications can accept incoming connections without interference from the firewall. This only affects machines

running Windows XP SP2 or higher. The default is True.



Checking default values for 8.6.12 and 8.8.12



condor_config_val -dump -verbose on a windows machine with version 8.6.12



# at: <Default>

# expanded: true

# default: true


CondorIsAdmin = false

# at: <Detected>

# expanded: false



condor_config_val -dump -verbose on a windows machine with version 8.8.12



# at: <Default>

# expanded: false

# default: $(CondorIsAdmin)


CondorIsAdmin = false

# at: <Detected>

# expanded: false




So either the documentation is incorrect, or the default is incorrect?








From: HTCondor-users <htcondor-users-bounces@xxxxxxxxxxx> On Behalf Of Zach Miller
Sent: Friday, 19 February 2021 10:34 PM
To: HTCondor-Users Mail List <htcondor-users@xxxxxxxxxxx>
Subject: Re: [HTCondor-users] Ticket #6463: Change IS_OWNER default to False


Hi Greg,


As you suggested, manually setting IS_OWNER to the previous default value should fix that issue and if that's all you care about fixing, that's probably easiest.


However, you might want to consider instead setting "use POLICY:Desktop".  This is a "metaknob" which is a shortcut for setting a whole bunch of things.  Here's exactly what that does:


use POLICY:Desktop is

        WANT_SUSPEND=($(SmallJob) || $(KeyboardNotBusy) || $(IsVanilla) ) && ( $(SUSPEND))

        WANT_VACATE=$(ActivationTimer) > 600 || $(IsVanilla)

        SUSPEND=($(KeyboardBusy) || ( (CpuBusyTime > 120) && $(ActivationTimer) > 90))

        CONTINUE=($(CPUIdle) && ($(ActivityTimer) > 10) && (KeyboardIdle > $(ContinueIdleTime)))

        PREEMPT=(((Activity == "Suspended") && ($(ActivityTimer) > $(MaxSuspendTime))) || (SUSPEND && (WANT_SUSPEND == False)))

        START=((KeyboardIdle > $(StartIdleTime)) && ( $(CPUIdle) || (State != "Unclaimed" && State != "Owner")) )





        IS_OWNER=(START =?= False)



As you can see, the list line restores that particular behaviour.  You may want some of the other behaviors listed there, or maybe you are also setting those manually elsewhere in your config.  The idea is that if you set the metaknob instead, and down the line we figure out ways to improve "a good policy for a desktop", you won't have to change your config and it will pick up the new meaning and settings of the metaknob.







-----Original Message-----
From: HTCondor-users <htcondor-users-bounces@xxxxxxxxxxx> on behalf of Hitchen, Greg (IM&T, Kensington WA) <Greg.Hitchen@xxxxxxxx>
Date: Friday, February 19, 2021 at 2:03 AM
To: HTCondor-Users Mail List <htcondor-users@xxxxxxxxxxx>
Subject: [HTCondor-users] Ticket #6463: Change IS_OWNER default to False

I think we’ve just been bitten by this change when upgrading from 8.6.12 to 8.8.12


Looking through the 8.7 development series changelog shows:


Version 8.7.6

Release Notes:

    HTCondor version 8.7.6 released on January 4, 2018.

New Features:

    Changed the default value of configuration parameter IS_OWNER to False. The previous default value is now set as part of the use POLICY : Desktop configuration template. (Ticket #6463)

IS_OWNER = (START =?= False)



“The Owner state (and IS_OWNER) is an artifact of Condor's cycle-scavenging roots."


We ARE cycle scavenging from staff desktops/laptops. I assume if we explicitly set:

IS_OWNER = (START =?= False)

in the config files then the previous behaviour will be restored?








P.S. some more checking default configs show some other (maybe important?) differences.


8.6.12                                                                                              8.8.12


CondorIsAdmin = true                                                                CondorIsAdmin = false

CURB_MATCHMAKING = false                                                 CURB_MATCHMAKING = RecentDaemonCoreDutyCycle > 0.98


I don’t think the matchmaking one will cause probs, and there’s a bunch of others to

do with concurrent uploads/downloads and negotiator max times that shouldn’t be an issue.