[GE users] [slightly OT] disallow node login

m0zes adam.tygart at gmail.com
Mon May 24 15:18:27 BST 2010


    [ The following text is in the "utf-8" character set. ]
    [ Your display is set for the "ISO-8859-10" character set.  ]
    [ Some characters may be displayed incorrectly. ]

On Mon, May 24, 2010 at 09:07, fx <d.love at liverpool.ac.uk> wrote:
> seandavi <seandavi at gmail.com> writes:
>
>> Simple question, probably.  I want to disallow node logins (both mac
>> and linux nodes).  However, we use ssh for job submission.
>
> I'm not sure what that means -- distribution of parallel tasks, or
> something else?  The easiest way to remove the access is by turning off
> ssh and using the internal method, if you have a recent SGE.
>
> For cases where you really need ssh to the compute nodes for parallel
> tasks, or want to allow it for debugging purposes, it might be
> convenient to allow it only to nodes where the user has a job running,
> especially if the nodes have exclusive access.  Has anyone done a PAM
> module to control access like that?

I have found a PAM module here: http://www-zeuthen.desy.de/~ahaupt/
http://www-zeuthen.desy.de/~ahaupt/downloads/sge-sshd-control-1.2-1.src.rpm

I am just looking at the code now. I will test it once I am reasonably
sure it isn't malicious ;-).

--
Adam Tygart
Beocat Sysadmin

------------------------------------------------------
http://gridengine.sunsource.net/ds/viewMessage.do?dsForumId=38&dsMessageId=258349

To unsubscribe from this discussion, e-mail: [users-unsubscribe at gridengine.sunsource.net].



More information about the gridengine-users mailing list