[GE users] About how is the connection between the submit_host, qmaster and the execution_host when you send a job

Esteban Freire esfreire at cesga.es
Thu Oct 23 14:24:26 BST 2008


    [ The following text is in the "ISO-8859-1" character set. ]
    [ Your display is set for the "ISO-8859-10" character set.  ]
    [ Some special characters may be displayed incorrectly. ]

Hi Reuti,

Thanks for your quick answer. It would be necessary have any special on 
the machine to install SGE with option -csp? I mean, for example a 
digital certificate.

How it works option csp? Is there any link/web page where I can get more 
information about this option?

Thanks,
Esteban

Reuti wrote:
> Hi,
>
> Am 23.10.2008 um 11:21 schrieb Esteban Freire:
>
>> These days we have come a doubt about if the connection between the 
>> qmaster and the execution_host is secure. We would like to know when 
>> we send a job how is the connection between the qmaster and the 
>> execution_host. I mean, It is a secure connection?
>> Could a malicious user install a sniffer into the cluster to check 
>> sge connections in order to see what we are sending in the job?
>
> up to 6.2 or still with classic spooling the job scripts are stored in 
> plain text in the qmaster $SGE_ROOT/spool/qmaster/job_scripts. On the 
> execution node in 
> $SGE_ROOT/default/spool/$HOSTNAME/job_scripts/$JOB_ID the scripts are 
> stored also as plain texts as they have to be executed.
>
> To encrypt at least the network traffic, you will have to install SGE 
> with the -csp option.
>
> -- Reuti
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe at gridengine.sunsource.net
> For additional commands, e-mail: users-help at gridengine.sunsource.net
>
>



---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe at gridengine.sunsource.net
For additional commands, e-mail: users-help at gridengine.sunsource.net




More information about the gridengine-users mailing list