CONDOR_TEST_TOKEN(1)

📦
version 25.14.1 · 12 versions
, in fedora 43

💖 CONDOR_TEST_TOKEN — the HTCondor manual, but make it make sense 💖

okay bestie, so condor_test_token is a section 1 command from the HTCondor manual, and honestly? she's a whole vibe. the tl;dr: create a short-lived SciToken to authenticate with local HTCondor daemons. that's the name and that's the game. ✨

✨ SYNOPSIS ✨

condor_test_token [--help]

condor_test_token --issuer issuer-url --scope scopes [--subject subject]
[--lifetime lifetime] [--audience audience] [--cache cache-location]

🌸 DESCRIPTION 🌸

so here's the tea 🫖: condor_test_token generates a temporary signing key, adds it to the local SciTokens cache for whatever issuer you picked, creates a short-lived token signed by that key, and then prints the token to stdout. that's it. that's the whole girl.

and the magic part? local HTCondor daemons will treat this token like any regular token generated by the given issuer — for a short period of time, which is one hour. no cap. ⏳

heads up bestie 🚨: if the HTCondor daemons were started as root, then the tool must be run as the condor user. them's the rules fr fr.

💅 OPTIONS 💅

  • --help — drop the usage info. that's it, that's the whole option. 🙈
  • --issuer issuer-url — tell it which issuer to impersonate. yes, impersonate. main character energy, but make it identity. 👑
  • --scope scopes — set the scope claim for the token. this is the "what am i even allowed to do" part. 🎀
  • --subject subject — set the sub claim for the token. default is no sub claim at all. if you don't ask, you don't get. 💀
  • --lifetime lifetime — how long the token lives, in seconds. default is 1 hour. choose wisely, she's not immortal. ⏰
  • --audience audience — set the aud claim for the token. default is no aud claim. 🙈
  • --cache cache-location — tell it where the SciTokens cache lives. default is to find the cache via HTCondor configuration files. it'll go looking for it all by itself, iconic. 🔍

🌈 EXAMPLES 🌈

want a SciToken with WRITE-level access for user Alice, that looks like it was issued by the SciTokens demo issuer? say less. consent, but make it authentication:

$ condor_test_token --issuer https://demo.scitokens.org \
    --scope condor:/WRITE --sub alice@foo.org --aud ANY

ate. no crumbs. 🔥

⭐ EXIT STATUS ⭐

  • condor_test_token exits with a status value of 0 (zero) upon success 🎉
  • and it exits with the value 1 (one) upon failure 😭

so yeah, 0 good, 1 bad. check your exit codes, bestie, they're literally telling you how it went.

🦋 AUTHOR 🦋

HTCondor Team 💜 (the goats, genuinely)

1990-2026, Center for High Throughput Computing, Computer Sciences Department, University of Wisconsin-Madison, Madison, WI, US. Licensed under the Apache License, Version 2.0.

aaaand that's the whole page, bestie 🫶 written for the HTCondor Manual, dated Oct 16, 2026, filed under CONDOR_TEST_TOKEN(1). go forth and generate short-lived tokens responsibly 💖✨🎀

📦 where this page comes from