Re: [HTCondor-users] [ExternalEmail] Re: Windows credd, pool_password, run_as_owner all working, but not with Encrypt_Execute_Directory

["Hitchen, Greg (IM&T, Kensington WA)" <Greg.Hitchen@xxxxxxxx>]

Sorry, but to make my statement a bit clearer.

It would appear that the execute node is looking for the "owner" to encrypt the execute directory
by checking local credentials on the execute node itself, whereas it is checking for the "owner" credentials
for running the job "as owner" from the credd server.

Cheers

Greg

-----Original Message-----
From: HTCondor-users <htcondor-users-bounces@xxxxxxxxxxx> On Behalf Of Hitchen, Greg (IM&T, Kensington WA)
Sent: Monday, 21 March 2022 3:22 PM
To: HTCondor-Users Mail List <htcondor-users@xxxxxxxxxxx>
Subject: Re: [HTCondor-users] [ExternalEmail] Re: Windows credd, pool_password, run_as_owner all working, but not with Encrypt_Execute_Directory

OK, I've had time to get back to this and do some more testing.

In general terms, it appears that I cannot run a job with:

run_as_owner = True
encrypt_execute_directory = True

unless I have previously logged into the execute machine itself.

Things work fine with:

run_as_owner = True
encrypt_execute_directory = False

or

run_as_owner = False
encrypt_execute_directory = True

So it would appear that the execute node is looking for the "owner" running the job
by checking local credentials on the execute node itself, rather than querying the credd server?

Is anyone able to confirm this?

I have normal and verbose log files if that helps but won't post them yet unless requested.

Thanks for any help that can be provided.

Cheers

Greg

-----Original Message-----
From: HTCondor-users <htcondor-users-bounces@xxxxxxxxxxx> On Behalf Of Hitchen, Greg (IM&T, Kensington WA)
Sent: Wednesday, 9 March 2022 9:39 AM
To: HTCondor-Users Mail List <htcondor-users@xxxxxxxxxxx>
Subject: [ExternalEmail] Re: [HTCondor-users] Windows credd, pool_password, run_as_owner all working, but not with Encrypt_Execute_Directory

Hi Todd

HTCondor Central Managers
$CondorVersion: 8.8.13 Mar 23 2021 BuildID: 534541 $
$CondorPlatform: x86_64_Ubuntu20 $

HTCondor Submit Nodes
$CondorVersion: 8.8.12 Nov 24 2020 BuildID: 524104 $
$CondorPlatform: x86_64_Windows10 $

HTCondor Execute Nodes
$CondorVersion: 8.8.12 Nov 24 2020 BuildID: 524104 $
$CondorPlatform: x86_Windows8 $

So all are > 8.8.10

Cheers

Greg

-----Original Message-----
From: HTCondor-users <htcondor-users-bounces@xxxxxxxxxxx> On Behalf Of Todd L Miller
Sent: Monday, 7 March 2022 11:42 PM
To: HTCondor-Users Mail List <htcondor-users@xxxxxxxxxxx>
Subject: Re: [HTCondor-users] Windows credd, pool_password, run_as_owner all working, but not with Encrypt_Execute_Directory

> Thanks for any info/insights/suggestions/comments.

 	HTCondor fixed a related bug in 8.8.10, so upgrade if you haven't.

- ToddM
_______________________________________________
HTCondor-users mailing list
To unsubscribe, send a message to htcondor-users-request@xxxxxxxxxxx with a
subject: Unsubscribe
You can also unsubscribe by visiting
https://lists.cs.wisc.edu/mailman/listinfo/htcondor-users

The archives can be found at:
https://lists.cs.wisc.edu/archive/htcondor-users/

_______________________________________________
HTCondor-users mailing list
To unsubscribe, send a message to htcondor-users-request@xxxxxxxxxxx with a
subject: Unsubscribe
You can also unsubscribe by visiting
https://lists.cs.wisc.edu/mailman/listinfo/htcondor-users

The archives can be found at:
https://lists.cs.wisc.edu/archive/htcondor-users/

_______________________________________________
HTCondor-users mailing list
To unsubscribe, send a message to htcondor-users-request@xxxxxxxxxxx with a
subject: Unsubscribe
You can also unsubscribe by visiting
https://lists.cs.wisc.edu/mailman/listinfo/htcondor-users

The archives can be found at:
https://lists.cs.wisc.edu/archive/htcondor-users/