Describe the bug
There are two separate things that needs to be addressed:
1) HTCondor used to set the x509UserProxy classad in the submitted jobs by looking at the X509_USER_PROXY environment variable. It did not required the factory to set the parameter explicitly. Newer versions of condor do not do that anymore and we need to se it explicitly.
2) HTCondor does not have a fallback to proxy when sending pilots to the ARC CE REST interface. If you set both SciTokensFile and x509UserProxy condor will use the token authentication and just transfer the proxy. If you just set the proxy condor will use the proxy authentication.
Expected behavior
We want to be able to explicitly use the token authentication or the proxy one depending on the auth_method value. For grid_type="condor" it is fine to set both proxy and token in the JDL since there is the fallback (actually just until May). For grid_type="arc" we want to set the scitokensfile parameter only if auth_method="scitoken"
Describe the bug There are two separate things that needs to be addressed: 1) HTCondor used to set the
x509UserProxyclassad in the submitted jobs by looking at the X509_USER_PROXY environment variable. It did not required the factory to set the parameter explicitly. Newer versions of condor do not do that anymore and we need to se it explicitly.2) HTCondor does not have a fallback to proxy when sending pilots to the ARC CE REST interface. If you set both
SciTokensFileandx509UserProxycondor will use the token authentication and just transfer the proxy. If you just set the proxy condor will use the proxy authentication.Expected behavior We want to be able to explicitly use the token authentication or the proxy one depending on the
auth_methodvalue. Forgrid_type="condor"it is fine to set both proxy and token in the JDL since there is the fallback (actually just until May). Forgrid_type="arc"we want to set thescitokensfileparameter only ifauth_method="scitoken"Info (please complete the following information):