5.12. Using a pool password to secure Condor Communications

The default Rocks configuration is to use host-based authentication. This is a good and simple choice for a cluster with a private network. With the Rocks 5.4 version of the Condor Roll, it is straightforward to set up a "Pool Password" that utilizes a shared secret among pool members. This is especially useful when allowing remote systems to report directly to the Condor collector on your cluster. The EC2 Roll can utilize a pool password for a higher security.

The following, straightforward will create, copy and enable a system-wide shared-secret pool password.

1. Create a pool password. Use rocks create osg condor password

2. Enable pool password security. Use rocks set attr OSG_Condor_Password yes

3. Reconfigure Condor Daemons and copy new pool password. Use rocks sync host osg condor syncpassword=yes localhost compute