1condor_store_cred(1) General Commands Manual condor_store_cred(1)
2
3
4
6 condor_store_credsecurely stash a password
7
9 condor_store_cred[-help]
10
11 condor_store_credadd[ -c | -u username] [-p password] [-n machinename]
12 [-f filename]
13
14 condor_store_creddelete[ -c | -u username] [-n machinename]
15
16 condor_store_credquery[ -c | -u username] [-n machinename]
17
19 condor_store_credstores passwords in a secure manner. There are two
20 separate uses of condor_store_cred:
21
22 1. A shared pool password is needed in order to implement the PASS‐
23 WORDauthentication method. condor_store_credusing the -coption deals
24 with the password for the implied condor_pool@$(UID_DOMAIN) user
25 name.
26
27 On a Unix machine, condor_store_credwith the -foption is used to set
28 the pool password, as needed when used with the PASSWORDauthentica‐
29 tion method. The pool password is placed in a file specified by the
30 SEC_PASSWORD_FILEconfiguration variable.
31
32
33
34 2. In order to submit a job from a Windows platform machine, or to
35 execute a job on a Windows platform machine utilizing the
36 run_as_ownerfunctionality, condor_store_credstores the password of a
37 user/domain pair securely in the Windows registry. Using this stored
38 password, HTCondor may act on behalf of the submitting user to
39 access files, such as writing output or log files. HTCondor is able
40 to run jobs with the user ID of the submitting user. The password is
41 stored in the same manner as the system does when setting or chang‐
42 ing account passwords.
43
44 Passwords are stashed in a persistent manner; they are maintained
45 across system reboots.
46
47 The addargument on the Windows platform stores the password securely in
48 the registry. The user is prompted to enter the password twice for con‐
49 firmation, and characters are not echoed. If there is already a pass‐
50 word stashed, the old password will be overwritten by the new password.
51
52 The deleteargument deletes the current password, if it exists.
53
54 The queryreports whether the password is stored or not.
55
57 -c
58
59 Operations refer to the pool password, as used in the PASSWORDau‐
60 thentication method.
61
62
63
64
65
66 -f filename
67
68 For Unix machines only, generates a pool password file named file‐
69 namethat may be used with the PASSWORDauthentication method.
70
71
72
73
74
75 -help
76
77 Displays a brief summary of command options.
78
79
80
81
82
83 -n machinename
84
85 Apply the command on the given machine.
86
87
88
89
90
91 -p password
92
93 Stores password, rather than prompting the user to enter a password.
94
95
96
97
98
99 -u username
100
101 Specify the user name.
102
103
104
105
106
108 condor_store_credwill exit with a status value of 0 (zero) upon suc‐
109 cess, and it will exit with the value 1 (one) upon failure.
110
112 Center for High Throughput Computing, University of Wiscon‐
113 sin–Madison
114
116 Copyright © 1990-2019 Center for High Throughput Computing, Computer
117 Sciences Department, University of Wisconsin-Madison, Madison, WI. All
118 Rights Reserved. Licensed under the Apache License, Version 2.0.
119
120
121
122 date condor_store_cred(1)