[GE users] [slightly OT] disallow node login

mhanby mhanby at uab.edu
Mon May 24 16:48:59 BST 2010


    [ The following text is in the "utf-8" character set. ]
    [ Your display is set for the "ISO-8859-10" character set.  ]
    [ Some characters may be displayed incorrectly. ]

The Mvapich list an interesting solution,

Provide SSH access to users of active jobs (and admins), but deny the rest:
http://mail.cse.ohio-state.edu/pipermail/mvapich-discuss/2009-July/002384.html

-----Original Message-----
From: m0zes [mailto:adam.tygart at gmail.com] 
Sent: Monday, May 24, 2010 9:18 AM
To: users at gridengine.sunsource.net
Subject: Re: [GE users] [slightly OT] disallow node login

On Mon, May 24, 2010 at 09:07, fx <d.love at liverpool.ac.uk> wrote:
> seandavi <seandavi at gmail.com> writes:
>
>> Simple question, probably.  I want to disallow node logins (both mac
>> and linux nodes).  However, we use ssh for job submission.
>
> I'm not sure what that means -- distribution of parallel tasks, or
> something else?  The easiest way to remove the access is by turning off
> ssh and using the internal method, if you have a recent SGE.
>
> For cases where you really need ssh to the compute nodes for parallel
> tasks, or want to allow it for debugging purposes, it might be
> convenient to allow it only to nodes where the user has a job running,
> especially if the nodes have exclusive access.  Has anyone done a PAM
> module to control access like that?

I have found a PAM module here: http://www-zeuthen.desy.de/~ahaupt/
http://www-zeuthen.desy.de/~ahaupt/downloads/sge-sshd-control-1.2-1.src.rpm

I am just looking at the code now. I will test it once I am reasonably
sure it isn't malicious ;-).

--
Adam Tygart
Beocat Sysadmin

------------------------------------------------------
http://gridengine.sunsource.net/ds/viewMessage.do?dsForumId=38&dsMessageId=258349

To unsubscribe from this discussion, e-mail: [users-unsubscribe at gridengine.sunsource.net].

------------------------------------------------------
http://gridengine.sunsource.net/ds/viewMessage.do?dsForumId=38&dsMessageId=258358

To unsubscribe from this discussion, e-mail: [users-unsubscribe at gridengine.sunsource.net].



More information about the gridengine-users mailing list