Bug 756457

Summary:	Condor does not correctly detect the SYSTEM account
Product:	Red Hat Enterprise MRG	Reporter:	Timothy St. Clair <tstclair>
Component:	condor	Assignee:	grid-maint-list <grid-maint-list>
Status:	CLOSED WONTFIX	QA Contact:	MRG Quality Engineering <mrgqe-bugs>
Severity:	medium	Docs Contact:
Priority:	medium
Version:	2.1	CC:	matt, mkudlej, psvobodo
Target Milestone:	---	Keywords:	Reopened
Target Release:	---
Hardware:	All
OS:	Windows
Whiteboard:
Fixed In Version:	condor-7.8.2-0.3	Doc Type:	Bug Fix
Doc Text:	C: Install condor on a French version of Windows C: Will fail to run jobs that have load_profile as submit args F: Check SYSTEM account via SID R: Will correctly run jobs with load_profile and will execute condor under the SYSTEM account	Story Points:	---
Clone Of:		Environment:
Last Closed:	2016-05-26 19:12:39 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:

Description Timothy St. Clair 2011-11-23 16:27:46 UTC

Description of problem:

Condor checks to see if it is running as the Local System account by comparing the username to SYSTEM. This is not guranteed to work on all versions of Windows. The correct way to test is to compare the SID of the current user with a well known value. S-1-5-18.
When condor fails to detect that it is not running as SYSTEM, then it believes that it cannot switch users, so load_profile and run_as_owner dont work. Condor will not run jobs as slot users, etc.
Version-Release number of selected component (if applicable):


Additional info:
https://condor-wiki.cs.wisc.edu/index.cgi/tktview?tn=2642

Comment 2 Timothy St. Clair 2011-12-14 18:25:44 UTC

    Technical note added. If any revisions are required, please edit the "Technical Notes" field
    accordingly. All revisions will be proofread by the Engineering Content Services team.
    
    New Contents:
C: Install condor on a French version of Windows
C: Will fail to run jobs that have load_profile as submit args
F: Check SYSTEM account via SID
R: Will correctly run jobs with load_profile and will execute condor under the SYSTEM account

Comment 8 Anne-Louise Tangring 2016-05-26 19:12:39 UTC

MRG-G is in maintenance only and only customer escalations will be addressed from this point forward. This issue can be re-opened if a customer escalation associated with this issue occurs.