[GE users] prolog script for parallel jobs

Neeraj Chourasia neeraj at crlindia.com
Wed Jan 30 13:39:46 GMT 2008


    [ The following text is in the "ISO-8859-1" character set. ]
    [ Your display is set for the "ISO-8859-10" character set.  ]
    [ Some special characters may be displayed incorrectly. ]

Hi,

    My intention is to discourage people running MPI jobs directly on 
compute nodes. If i modify ssh, and assuming ssh to be common across all 
kind of jobs, (via SGE/ without SGE ), i wont be able to achieve user 
restriction.

-Neeraj


Andy Schwierskott wrote:
> Hi,
>
> you can't run prolog scripts on the slvaes nodes.
>
> Since SGE starts its own sshd (and does not use the system wide sshd)
> perhaps there is a possibility to use a different limits.conf for the 
> sshd
> started by SGE by using a command line argument for the sshd startup?
>
> If this is not possible and you are anyhow using a modified sshd (or
> consider to do it) to get proper accounting when ssh is used for starting
> parallel jobs it might be possible to do further modifications to sshd to
> disregard that setting in limits.conf.
>
> In case you are unaware why there is a motivation for a sshd patch please
> see Ron's and Rayson's presentation on it:
>
>   
> http://gridengine.sunsource.net/download/workshop10-12_09_07/SGE-WS2007-openSSHTightIntegration_RonChen.pdf 
>
>
> Regards,
> Andy
>
>
>
> On Wed, 30 Jan 2008, Neeraj Chourasia wrote:
>
>> hello all,
>>
>>   Is there a way to run prolog or some kind of script under root 
>> privileges in parallel kind of job? What i have observed is that 
>> prolog script runs on master node and not on slaves.
>> Actually i want to disable user login directly onto compute nodes, 
>> and only make it possible via SGE. Since prolog script runs under 
>> root privileges, i can change say /etc/security/limits.conf for the 
>> time job is being run and hence can restrict normal SSH(without SGE).
>>
>> Can i run prolog on slaves or is there any other way to restrict 
>> normal user login?
>>
>> -Neeraj
>>
>> The information contained in this electronic message and any 
>> attachments to this message are intended for the exclusive use of the 
>> addressee(s) and may contain proprietary, confidential or privileged 
>> information. If you are not the intended recipient, you should not 
>> disseminate, distribute or copy this e-mail. Please notify the sender 
>> immediately and destroy all copies of this message and any 
>> attachments contained in it.
>>
>> Contact your Administrator for further information.
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: users-unsubscribe at gridengine.sunsource.net
>> For additional commands, e-mail: users-help at gridengine.sunsource.net
>>
>>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe at gridengine.sunsource.net
> For additional commands, e-mail: users-help at gridengine.sunsource.net
>
>


The information contained in this electronic message and any attachments to this message are intended for the exclusive use of the addressee(s) and may contain proprietary, confidential or privileged information. If you are not the intended recipient, you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately and destroy all copies of this message and any attachments contained in it.

Contact your Administrator for further information.

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe at gridengine.sunsource.net
For additional commands, e-mail: users-help at gridengine.sunsource.net




More information about the gridengine-users mailing list