Connection Denied Due to Permission

Symptom

The connection is denied because the permission is insufficient.

Key Process and Cause Analysis

The ADVERTISE_MASTER daemon does not have sufficient permissions. Configure ALLOW_ADVERTISE_MASTER = 192.168.47.42 in the condor_config file. This parameter supports subnet matching, for example, you can enter 192.168.47.*.

Conclusion and Solution

Generally, only the information of the D_ALWAYS level is recorded in the log file. To enable logs of higher levels to be recorded, add the following information to the condor_config file:
```
ALL_DEBUG = D_ALL
```
In condor-8.9.* and later, it is not enough to configure only the ALLOW_WRITE and ALLOW_READ permissions in the condor_config file. You need to add use SECURITY: HOST_BASED.
If the permission is incorrect, configure the related parameter in the condor_config file based on the complete log information. For example, if the ADVERTISE_SCHEDD permission is missing, add the following information to the condor_config file:
```
ALLOW_ADVERTISE_ SCHEDD = 192.168.47.*
```
A space is required before and after the equal sign (=) in the condor_config file. Otherwise, the parameter does not take effect. Example:
```
ALLOW_WRITE = 192.168.47.42, 192.168.47.111
```