Hi Chris,
If you include:
SCHEDD.DENY_WRITE = nobody@$(UID_DOMAIN)
in the Condor configuration on the CEs this should prevent jobs from user nobody from being able to be submitted.
Regards,
Andrew.
________________________________________
From: Chris Brew [[log in to unmask]]
Sent: Wednesday, April 09, 2014 5:18 PM
To: [log in to unmask]
Subject: Re: ARC-CE
Hi Luke,
unixmap="nobody:nobody all"
When I had that as the last mapping line and had some argus issues, I actually saw jobs in the condor system as user nobody, so I switched to a non-existent uid:gid combination of 999:999 which I think fixes the problem.
Yours,
Chris.
--
Scanned by iCritical.
--
Scanned by iCritical.
|