With Qube, you have a choice of running jobs as either a designated proxy user or running jobs as one of the users with an account in the system. This is controlled with the proxy_execution_mode paramteter, which can be set to either user or proxy
Consequently, the Worker executes jobs in either of two modes called proxy and user.
- Under proxy mode, all jobs execute as the designated proxy user, regardless of who submitted them.
- Under user mode, all jobs execute as the user specified in the job, either the user that submitted the job, or some other specified user. All processes executed and files created would then owned by that user.
| Info | ||
|---|---|---|
| ||
To run with a proxy_execution_mode set to user on Windows workers, the user passwords must first be registered with Qube, and must be kept up-to-date as the user changes their password. For a user to register their password, they must open WranglerView, go to the Administration pulldown, then choose "Register Windows Password..." Again, this is only required for farms with Windows workers and a proxy_execution_mode of "user". User proxy_execution_mode can be used on OS X and/or Linux without registering a password. |
| Note | ||
|---|---|---|
| ||
The user account must exist on the worker for "user" proxy_execution_mode to function correctly. This implies that a central authentication system (Active Directory, LDAP, NIS, etc.) exists and is properly functioning. The default "proxy" proxy_execution_mode has no such requirement, as it will run all jobs through the local account "qubeproxy." |
Default proxy user account
The installation of the qube-worker package creates a local user account named qubeproxy. The default worker configuration is to run in proxy mode with the qubeproxy user name and password for the proxy user.
- Username: qubeproxy
- Password: Pip3lin3P@$$wd
In the case of Windows, for each job that runs on a Windows host the Worker must supply three pieces of information so that the operating system will allow it to initiate processes as another user:
- Windows Domain
- User login
- User password (encrypted)