Re: [gridengine users] Using ssh with qrsh and qlogin but disable users direct ssh

2014-10-14 Thread Prentice Bisbal
On 10/14/2014 03:58 AM, Mark Dixon wrote: On Mon, 13 Oct 2014, Prentice Bisbal wrote: ... I think what he wants to do is this, which is actually a pretty common desire: 1. Not let users ssh directly into cluster nodes and bypass the scheduler. 2. If a user is in a qrsh or qlogin session and

Re: [gridengine users] Using ssh with qrsh and qlogin but disable users direct ssh

2014-10-14 Thread Tina Friedrich
Not as such; but the '-i' flag is 'start via inetd' - so the theory is that is is only started during/for a qlogin session. Plus it won't be on the standard port but something high up & random (and I'm pretty sure last time I looked changing). I'm not trying to do anything fancy like people co

Re: [gridengine users] Using ssh with qrsh and qlogin but disable users direct ssh

2014-10-14 Thread Mark Dixon
On Mon, 13 Oct 2014, Prentice Bisbal wrote: ... I think what he wants to do is this, which is actually a pretty common desire: 1. Not let users ssh directly into cluster nodes and bypass the scheduler. 2. If a user is in a qrsh or qlogin session and has requested multiple nodes, for debugging p

Re: [gridengine users] Using ssh with qrsh and qlogin but disable users direct ssh

2014-10-13 Thread Derrick Lin
Hi Tina, Thanks for sharing your experience. I found: -F configfile Specifies an alternative per-user configuration file. If a configuration file is given on the command line, the system-wide configuration file (/etc/ssh/ssh_config) will be ignored. The default for the

Re: [gridengine users] Using ssh with qrsh and qlogin but disable users direct ssh

2014-10-13 Thread Prentice Bisbal
Is that ssh conf dynamically generated to limit access only to nodes that SGE has assigned to that user? Prentice On 10/13/2014 12:44 PM, Tina Friedrich wrote: We also use a different config file for the 'qlogin' ssh to avoid this - the qlogin_daemon command is 'ssh -i -f path_to_config'. Th

Re: [gridengine users] Using ssh with qrsh and qlogin but disable users direct ssh

2014-10-13 Thread Prentice Bisbal
On 10/13/2014 11:18 AM, Mark Dixon wrote: On Tue, 30 Sep 2014, Derrick Lin wrote: ... I am trying to configure SSH as underlying protocol for qrsh, qlogin. However, this requires allowing users to SSH into compute nodes. In such case, users can simply go to compute nodes with SSH, bypassing SGE

Re: [gridengine users] Using ssh with qrsh and qlogin but disable users direct ssh

2014-10-13 Thread Tina Friedrich
We also use a different config file for the 'qlogin' ssh to avoid this - the qlogin_daemon command is 'ssh -i -f path_to_config'. The 'standard' sshd.conf on the nodes does not allow login for users, but the one the qlogin_daemon points to does. Tina On 30/09/14 02:59, Derrick Lin wrote: hi

Re: [gridengine users] Using ssh with qrsh and qlogin but disable users direct ssh

2014-10-13 Thread Mark Dixon
On Tue, 30 Sep 2014, Derrick Lin wrote: ... I am trying to configure SSH as underlying protocol for qrsh, qlogin. However, this requires allowing users to SSH into compute nodes. In such case, users can simply go to compute nodes with SSH, bypassing SGE (qrsh, qlogin etc). I am wondering what th

Re: [gridengine users] Using ssh with qrsh and qlogin but disable users direct ssh

2014-10-13 Thread Prentice Bisbal
On 09/29/2014 09:59 PM, Derrick Lin wrote: hi guys, I am trying to configure SSH as underlying protocol for qrsh, qlogin. However, this requires allowing users to SSH into compute nodes. In such case, users can simply go to compute nodes with SSH, bypassing SGE (qrsh, qlogin etc). I am won

Re: [gridengine users] Using ssh with qrsh and qlogin but disable users direct ssh

2014-10-13 Thread William Hay
On Tue, 30 Sep 2014 01:59:59 + Derrick Lin wrote: > hi guys, > > I am trying to configure SSH as underlying protocol for qrsh, qlogin. > However, this requires allowing users to SSH into compute nodes. In such > case, users can simply go to compute nodes with SSH, bypassing SGE (qrsh, > q

[gridengine users] Using ssh with qrsh and qlogin but disable users direct ssh

2014-10-13 Thread Derrick Lin
hi guys, I am trying to configure SSH as underlying protocol for qrsh, qlogin. However, this requires allowing users to SSH into compute nodes. In such case, users can simply go to compute nodes with SSH, bypassing SGE (qrsh, qlogin etc). I am wondering what the best way to configure SSH to servi