[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [condor-users] Restrict access to certain user/RemoteUser expressionquery



Can this be caused by missing quotes around paul@xxxxxxxxxxxxxxxxxx in the Requirements expression?

Alexander

Paul Wilson wrote:
Hi



I have 6 machines I want to restrict to just 2 of my users to run their Java jobs.



To do this Condor FAQ 7.2 specifies using:



Requirements = (RemoteUser == “userfoo@xxxxxxx”)



In the config of the machines in question.



I've added the following line in the condor.config.local file to machine

tokay@xxxxxxxxxx



Requirements = (RemoteUser == "charaka@xxxxxxxxxxxxxxxxxx <mailto:charaka@xxxxxxxxxxxxx>" ||RemoteUser == paul@xxxxxxxxxxxxxxxxxx <mailto:paul@xxxxxxxxxxxxxxxxxx>)



Then applied condor_reconfig.



viognier.ucl.ac.uk is the submit host, charaka and paul are the users on this submit host that I want to allow to use this machine.



From Viognier:



$ condor_config_val -name tokay@xxxxxxxxx <mailto:tokay@xxxxxxxxx> Requirements



returns the correct expression.



Yet, user vinay@xxxxxxxxxxxxxxxxxx still has his jobs matched to tokay.ucl.ac.uk and run there.



Why is this and is there something I’m missing?



The pool is v6.4.7, Linux master/submit node and windows execute-only nodes.



Cheers,



Paul.















Attachment: signature.asc
Description: OpenPGP digital signature