On 6/16/20 3:17 PM, Durai Arasan wrote:
Thank you. We are planning to put ssh keys on login nodes only and use the
PAM module to control access to compute nodes. Will such a setup work? Or
is it necessary for PAM to work to have the ssh keys on the compute nodes
as well? I'm sorry but this is not clearly mentioned on any documentation...
That will work. You need to configure the pam_slurm_adopt module to
control access, see
https://wiki.fysik.dtu.dk/niflheim/Slurm_configuration#pam-module-restrictions
SSH authentication must of course be configured in order for users to ssh
to the nodes, but I don't believe that PAM cares about that.
/Ole