HEPCloud / decisionengine_modules

Apache License 2.0
2 stars 19 forks source link

Decision engine not supporting token authentication to talk to the Factory #439

Closed mambelli closed 2 years ago

mambelli commented 2 years ago

The htcondor publisher should support token authentication as an alternative to the current x509. Ideally, both are supported and one or the other is used depending on the configuration.

mambelli commented 2 years ago

To clarify, this is about using IDTOKENS between the DE publisher and the Factory (not SciTokens w/ CE, not Glideins IDTOKENS), something similar to https://glideinwms.fnal.gov/doc.prd/recipes/IDTOKENS_auth.html#VOFrontendFactory

mambelli commented 2 years ago

DE is actually supporting token authentication. It is just a matter of configuring correctly HTCondor. This is being documented by @vitodb