CONDOR_TOKEN..._AUTO_APPROVE(1)

📦
version 25.14.1 · 12 versions
, in fedora 43

🎀 condor_token_request_auto_approve — HTCondor Manual 🎀

okay bestie, welcome to the HTCondor Manual, and today's main character is condor_token_request_auto_approve, which is literally here to generate a new rule to automatically approve token requests. yes, that's the whole vibe. ✨

✨ SYNOPSIS ✨

condor_token_request_auto_approve -netblock network -lifetime val [-pool pool_name] [-name hostname] [-type type] [-debug]

condor_token_request_auto_approve [-help ]

💖 DESCRIPTION 💖

so what does condor_token_request_auto_approve actually do? bestie, it installs a temporary auto-approval rule for token requests. and the tea is: any token request that matches the auto-approval rule gets immediately approved, instead of you having to sit there manually doing administrator approval. slay. 💅

Automatic request approval is intended to help administrators initially set up their cluster. kinda iconic, ngl.

Now, to install a new rule, you must specify both a network and a lifetime — no skipping, no shortcuts. Requests only get approved if ALL of these are true:

  • they come from that given source network,
  • they're within the rule lifetime,
  • they're limited to ADVERTISE_SCHEDD or ADVERTISE_STARTD permissions,
  • and they're for the condor identity.

and here's the cute part: when a condor_startd or condor_schedd is started and can't communicate with the collector, they will automatically generate token requests that meet those last two conditions. teamwork, fr fr 🫶

⚠️ okay but REAL TALK: it is not safe to enable auto-approval when users have access to any of the involved hosts or networks. like, do not do this. that's a whole mess. 💀

To remove auto-approval rules, run condor_reconfig against the remote daemon.:

By default, condor_token_request_auto_approve will install rules at the local condor_collector; but if you specify a combination of -pool, -name, or -type, the tool can request tokens in other pools, on other hosts, or for different daemon types. so flexible. so versatile. 🌈

🌸 OPTIONS 🌸

  • -debug — sends debugging information to stderr, based on the value of the configuration variable TOOL_DEBUG. (yes, it's giving verbose detective mode 🔍)
  • -help — Display brief usage information and exit. short, sweet, helpful. periodt. 💅
  • -lifetime value — Specify the lifetime, in seconds, for the auto-request rule to be valid. so like, how long is this rule serving? ⏳
  • -name hostname — Request a token from the daemon named hostname in the pool. If not specified, the locally-running daemons will be used. 🏠
  • -netblock network — A netblock of the form IP_ADDRESS / SUBNET_MASK specifying the source of authorized requests. Examples may include 192.0.2.0/24 or 192.0.2.0/26. (the slash is doing a LOT of work here 🦋)
  • -pool pool_name — Request a token from a daemon in a non-default pool pool_name. not your regular pool, bestie. 🌊
  • -type type — Request a token from a specific daemon type type. If not given, a condor_collector is used. 👑

🔥 EXAMPLES 🔥

okay so say you wanna automatically approve token requests to the default condor_collector coming from the 192.0.2.0/26 subnet for the next 10 minutes. here's the moment:

$ condor_token_request_auto_approve -lifetime 600 -netblock 192.0.2.0/26
Successfully installed auto-approval rule for netblock 192.0.2.0/26 with lifetime of 0.17 hours
Remote daemon reports no un-approved requests pending.

ate that. no notes. 👑

💀 EXIT STATUS 💀

condor_token_request_auto_approve will exit with a non-zero status value if it fails to communicate with the remote daemon or has insufficient authorization. Otherwise? it will exit 0. clean, simple, honest. ✨

🦋 SEE ALSO 🦋

the whole token request cinematic universe, iykyk.

👑 AUTHOR 👑

Center for High Throughput Computing, University of Wisconsin-Madison

👑 AUTHOR 👑

HTCondor Team

(yes bestie, there are two AUTHOR sections and I am respecting the lore 💜)

1990-2026, Center for High Throughput Computing, Computer Sciences Department, University of Wisconsin-Madison, Madison, WI, US. Licensed under the Apache License, Version 2.0.

so that's the whole page, bestie 🥰 this was CONDOR_TOKEN..._AUTO_APPROVE(1) from the HTCondor Manual, dated Oct 16, 2026 — go install your rules, stay safe, and don't turn on auto-approval where random users can reach the network, fr fr. mwah. 💖✨🎀

📦 where this page comes from