Page History

Turn Off History

How to enable pool password authentication

If would like to enable a simple method for authenticating daemon-to-daemon communication, pool password is very straightforward. However, it will not work if you have flocking (in or out) enabled.

First, you need to tell HTCondor where to store the password. On Windows, this will be in the secure area of the registry. On Linux, you'll need to tell HTCondor where on disk to store the password. 

SEC_PASSWORD_FILE = /etc/condor/condor_pool_password

Then, on each machine in your pool, run the command: 

condor_store_cred -c add
And it will prompt you for the password. On Windows, you'll need to do this on each machine in the pool. On Linux, you can do this on one machine and then securely copy the file to all the other machines; make sure to check the file permissions after copying.

Next, enable the pool password method in the condor_config file: 

SEC_PASSWORD_FILE = /etc/condor/condor_pool_password
SEC_DAEMON_AUTHENTICATION = REQUIRED
SEC_DAEMON_AUTHENTICATION_METHODS = PASSWORD
ALLOW_DAEMON = condor_pool@*

Finally, reconfigure your pool to have the new settings take effect: 

condor_reconfig -all