Connection Rejected Due to Permission

Symptom

The access request is rejected because the permission is denied.

Possible Causes

The ADVERTISE_MASTER daemon does not have the permission. You need to configure "ALLOW_ADVERTISE_MASTER = 192.168.47.42" in the condor_config file. This parameter supports subnet matching, for example, you can enter 192.168.47.*.

Procedure

• Generally, only the information of the D_ALWAYS level is recorded in the log file. To enable logs of higher levels to be recorded, add the following information to the condor_config file:

  ALL_DEBUG   =  D_ALL

• In condor-8.9.* and later versions, it is not enough to configure only ALLOW_WRITE and ALLOW_READ in the condor_config file. You need to add "use SECURITY: HOST_BASED".
• If the permission is incorrect, configure the condor_config parameter based on the complete log information. If the ADVERTISE_ SCHEDD permission is missing, add the following information to the condor_config file:

  ALLOW_ADVERTISE_ SCHEDD = 192.168.47.*

• A space is required before and after the equal sign (=) in the condor_config parameter. Otherwise, the parameter does not take effect.
  Example:

  ALLOW_WRITE  =  192.168.47.42, 192.168.47.111