Re: [slurm-users] pam_slurm_adopt not working for all users

2021-05-21 Thread Brian Andrus
Oh, you could also use the ssh-agent to mange the keys, then use 'ssh-add ~/.ssh/id_rsa' to type the passphrase once for your whole session (from that system). Brian Andrus On 5/21/2021 5:53 AM, Loris Bennett wrote: Hi, We have set up pam_slurm_adopt using the official Slurm documentation a

Re: [slurm-users] pam_slurm_adopt not working for all users

2021-05-21 Thread Brian Andrus
Umm.. Your keys are password protected. If they were not, you would be getting what you expect: Enter passphrase for key '/home/loris/.ssh/id_rsa': Brian Andrus On 5/21/2021 5:53 AM, Loris Bennett wrote: Hi, We have set up pam_slurm_adopt using the official Slurm documentation and Ole's in

Re: [slurm-users] pam_slurm_adopt not working for all users

2021-05-21 Thread Juergen Salk
* Tina Friedrich [210521 16:35]: > If this is simply about quickly accessing nodes that they have jobs on to > check on them - we tell our users to 'srun' into a job allocation (srun > --jobid=XX). Hi Tina, sadly, this does not always work in version 20.11.x any more because of the new non-

Re: [slurm-users] pam_slurm_adopt not working for all users

2021-05-21 Thread Marcus Wagner
Hi Loris, pam slurm adopt just allows or disallows a user to login to a node, depending if a job runs or not. Yet you have to do something, that the user can login passwordless, e.g. through host-based authentication. Best Marcus Am 21.05.2021 um 14:53 schrieb Loris Bennett: Hi, We have se

Re: [slurm-users] pam_slurm_adopt not working for all users

2021-05-21 Thread Ole Holm Nielsen
Hi Loris, I don't know if this would solve your problem, but I think that node SSH keys should be gathered and distributed. See my notes in https://wiki.fysik.dtu.dk/niflheim/SLURM#ssh-keys-for-password-less-access-to-cluster-nodes /Ole On 21-05-2021 14:53, Loris Bennett wrote: Hi, We hav

Re: [slurm-users] pam_slurm_adopt not working for all users

2021-05-21 Thread Tina Friedrich
Hi Loris, I'm not an PAM expert, but - pam_slurm_adopt doesn't do authenticatio, it only verifies that access for the authenticated user is allowed (by checking there's a job). 'account' not 'auth' in PAM config. As in, it's got nothing to do with how the user logs in to the server / is authe

Re: [slurm-users] pam_slurm_adopt not working for all users

2021-05-21 Thread Juergen Salk
Hi Loris, this depends largely on whether host-based authentication is configured (which does not seem to be the case for you) and also on how exactly the PAM stack for sshd looks like in /etc/pam.d/sshd. As the rules are worked through in the order they appear in /etc/pam.d/sshd, pam_slurm_adopt

[slurm-users] pam_slurm_adopt not working for all users

2021-05-21 Thread Loris Bennett
Hi, We have set up pam_slurm_adopt using the official Slurm documentation and Ole's information on the subject. It works for a user who has SSH keys set up, albeit the passphrase is needed: $ salloc --partition=gpu --gres=gpu:1 --qos=hiprio --ntasks=1 --time=00:30:00 --mem=100 salloc: Grant