[GE users] Restricting Logon To Execute Nodes ..

Olesen, Mark Mark.Olesen at emcontechnologies.com
Mon Jul 23 09:14:43 BST 2007

    [ The following text is in the "iso-8859-1" character set. ]
    [ Your display is set for the "ISO-8859-10" character set.  ]
    [ Some special characters may be displayed incorrectly. ]

> We're facing some possible issues where ordinary users can login to a
> head node, the ssh to an execute node and run jobs there.
> But that stopped Globus (and probably qsub) from working for mpich and
> other jobs.

A similar question appeared on the mailing list quite some time ago.
If you can't or don't want to lock down rsh/ssh to prevent logins, a
solution would be a cron job that scans the process table for calculation
jobs that don't have sge_shepherd as their parent.
Instead of cron, you can also misuse the load_sensor for calling this cull
You can use "/bin/ps -e f -o user,pid,ppid,pgrp,command" to help with
establishing the rules.

This e-mail message and any attachments may contain legally privileged, confidential or proprietary Information, or information otherwise protected by law of EMCON Technologies, its affiliates, or third parties. This notice serves as marking of its "Confidential" status as defined in any confidentiality agreements concerning the sender and recipient. If you are not the intended recipient(s), or the employee or agent responsible for delivery of this message to the intended recipient(s), you are hereby notified that any dissemination, distribution or copying of this e-mail message is strictly prohibited. If you have received this message in error, please immediately notify the sender and delete this e-mail message from your computer.

To unsubscribe, e-mail: users-unsubscribe at gridengine.sunsource.net
For additional commands, e-mail: users-help at gridengine.sunsource.net

More information about the gridengine-users mailing list