Hi,

Already done as part of the build process.

regards

Steven

________________________________
From: Williams, Jenny Avis <jenny_willi...@unc.edu>
Sent: Friday, 31 January 2025 9:06 am
To: Steven Jones <steven.jo...@vuw.ac.nz>; John Hearns <hear...@gmail.com>
Cc: slurm-us...@schedmd.com <slurm-us...@schedmd.com>
Subject: RE: [slurm-users] Re: RHEL8.10 V slurmctld

You don't often get email from jenny_willi...@unc.edu. Learn why this is 
important<https://aka.ms/LearnAboutSenderIdentification>

First I’d verify munge functionality in the updated environment –



https://github.com/dun/munge/wiki/Installation-Guide#troubleshooting









From: Steven Jones <steven.jo...@vuw.ac.nz>
Sent: Thursday, January 30, 2025 2:55 PM
To: Williams, Jenny Avis <jenny_willi...@unc.edu>; John Hearns 
<hear...@gmail.com>
Cc: slurm-us...@schedmd.com
Subject: Re: [slurm-users] Re: RHEL8.10 V slurmctld



Hi,

Hmmm, yes I am using munge.



[root@node1 ~]# strings `which slurmd` |egrep -i munge

[root@node1 ~]#



Does not return anything on the nodes, but worked fine for RHEL9.5

[root@xxxunidrslurmd2 munge]# scontrol show config |egrep -i auth

AuthAltTypes            = (null)

AuthAltParameters       = (null)

AuthInfo                = (null)

AuthType                = auth/munge

[root@vuwunidrslurmd2 munge]#

Munge logs are 0 length



=============



slurmd2 slurm]# rpm -qi munge

Name        : munge

Version     : 0.5.13

Release     : 2.el8

Architecture: x86_64

Install Date: Wed 15 Jan 2025 02:11:46 AM UTC

Group       : Unspecified

Size        : 320124

License     : GPLv3+ and LGPLv3+

Signature   : RSA/SHA256, Mon 27 Apr 2020 11:43:24 PM UTC, Key ID 
199e2f91fd431d51

Source RPM  : munge-0.5.13-2.el8.src.rpm

Build Date  : Fri 24 Apr 2020 07:37:08 AM UTC

Build Host  : x86-vm-02.build.eng.bos.redhat.com

Relocations : (not relocatable)

Packager    : Red Hat, Inc. <http://bugzilla.redhat.com/bugzilla>

Vendor      : Red Hat, Inc.

URL         : https://dun.github.io/munge/

Summary     : Enables uid & gid authentication across a host cluster

Description :

MUNGE (MUNGE Uid 'N' Gid Emporium) is an authentication service for creating

and validating credentials. It is designed to be highly scalable for use

in an HPC cluster environment.

It allows a process to authenticate the UID and GID of another local or

remote process within a group of hosts having common users and groups.

These hosts form a security realm that is defined by a shared cryptographic

key. Clients within this security realm can create and validate credentials

without the use of root privileges, reserved ports, or platform-specific

methods.



==========



[root@node1 ~]# rpm -qi munge

Name        : munge

Version     : 0.5.13

Release     : 2.el8

Architecture: x86_64

Install Date: Sun Jan 26 22:14:28 2025

Group       : Unspecified

Size        : 319876

License     : GPLv3+ and LGPLv3+

Signature   : RSA/SHA256, Mon Apr 12 06:46:59 2021, Key ID 15af5dac6d745a60

Source RPM  : munge-0.5.13-2.el8.src.rpm

Build Date  : Mon Apr 12 05:07:29 2021

Build Host  : ord1-prod-x86build003.svc.aws.rockylinux.org

Relocations : (not relocatable)

Packager    : 
infrastruct...@rockylinux.org<mailto:infrastruct...@rockylinux.org>

Vendor      : Rocky

URL         : https://dun.github.io/munge/

Summary     : Enables uid & gid authentication across a host cluster

Description :

MUNGE (MUNGE Uid 'N' Gid Emporium) is an authentication service for creating

and validating credentials. It is designed to be highly scalable for use

in an HPC cluster environment.

It allows a process to authenticate the UID and GID of another local or

remote process within a group of hosts having common users and groups.

These hosts form a security realm that is defined by a shared cryptographic

key. Clients within this security realm can create and validate credentials

without the use of root privileges, reserved ports, or platform-specific

methods.

[root@node1 ~]#



==========



[root@node1 ~]# rpm -qi slurm-slurmd

Name        : slurm-slurmd

Version     : 20.11.9

Release     : 1.el8

Architecture: x86_64

Install Date: Sun Jan 26 22:15:34 2025

Group       : Unspecified

Size        : 517922

License     : GPLv2 and BSD

Signature   : RSA/SHA256, Fri May  6 00:03:49 2022, Key ID 21ea45ab2f86d6a1

Source RPM  : slurm-20.11.9-1.el8.src.rpm

Build Date  : Thu May  5 23:33:30 2022

Build Host  : buildvm-x86-18.iad2.fedoraproject.org

Relocations : (not relocatable)

Packager    : Fedora Project

Vendor      : Fedora Project

URL         : https://slurm.schedmd.com/

Bug URL     : https://bugz.fedoraproject.org/slurm

Summary     : Slurm compute node daemon

Description :

Slurm compute node daemon. Used to launch jobs on compute nodes

[root@node1 ~]#

=======



slurmd2 ~]#  rpm -qi slurm-slurmctld

Name        : slurm-slurmctld

Version     : 20.11.9

Release     : 1.el8

Architecture: x86_64

Install Date: Wed 15 Jan 2025 02:11:48 AM UTC

Group       : Unspecified

Size        : 1097306

License     : GPLv2 and BSD

Signature   : RSA/SHA256, Fri 06 May 2022 12:03:49 AM UTC, Key ID 
21ea45ab2f86d6a1

Source RPM  : slurm-20.11.9-1.el8.src.rpm

Build Date  : Thu 05 May 2022 11:33:30 PM UTC

Build Host  : buildvm-x86-18.iad2.fedoraproject.org

Relocations : (not relocatable)

Packager    : Fedora Project

Vendor      : Fedora Project

URL         : https://slurm.schedmd.com/

Bug URL     : https://bugz.fedoraproject.org/slurm

Summary     : Slurm controller daemon

Description :

Slurm controller daemon. Used to manage the job queue, schedule jobs,

and dispatch RPC messages to the slurmd processon the compute nodes

to launch jobs.







regards

Steven



________________________________

From: Williams, Jenny Avis 
<jenny_willi...@unc.edu<mailto:jenny_willi...@unc.edu>>
Sent: Friday, 31 January 2025 8:36 am
To: Steven Jones <steven.jo...@vuw.ac.nz<mailto:steven.jo...@vuw.ac.nz>>; John 
Hearns <hear...@gmail.com<mailto:hear...@gmail.com>>
Cc: slurm-us...@schedmd.com<mailto:slurm-us...@schedmd.com> 
<slurm-us...@schedmd.com<mailto:slurm-us...@schedmd.com>>
Subject: RE: [slurm-users] Re: RHEL8.10 V slurmctld



You don't often get email from 
jenny_willi...@unc.edu<mailto:jenny_willi...@unc.edu>. Learn why this is 
important<https://aka.ms/LearnAboutSenderIdentification>

On both a compute node and the controller

rpm -qi slurm-slurmctld

rpm -qi slurm-slurmd
check what the auth type is – for example, we still use munge, which in my 
compile is also the default auth type.  :

# strings `which slurmd` |egrep -i munge

DEFAULT_AUTH_TYPE "auth/munge"

DEFAULT_CRED_TYPE "cred/munge"



#scontrol show config |egrep -i auth

AuthAltTypes            = (null)

AuthAltParameters       = (null)

AuthInfo                = (null)

AuthType                = auth/munge



From: Steven Jones via slurm-users 
<slurm-users@lists.schedmd.com<mailto:slurm-users@lists.schedmd.com>>
Sent: Thursday, January 30, 2025 2:07 PM
To: John Hearns <hear...@gmail.com<mailto:hear...@gmail.com>>
Cc: slurm-us...@schedmd.com<mailto:slurm-us...@schedmd.com>
Subject: [slurm-users] Re: RHEL8.10 V slurmctld



Hi,

Yes, even ssh works OK.

[root@xxxunicobuildt1 warewulf]# ssh 
xxxjone...@xxx.ac.nz@node1<mailto:xxxjone...@xxx.ac.nz@node1>

(xxxjone...@xxx.ac.nz@node1<mailto:xxxjone...@xxx.ac.nz@node1>) Password:

Last login: Wed Jan 29 01:26:21 2025 from 130.195.87.12

[xxxjone...@xxx.ac.nz@node1 ~]$



xxxjone...@xxx.ac.nz@node1<mailto:xxxjone...@xxx.ac.nz@node1> ~]$ whoami | id

uid=1204805830(xxxjone...@xxx.ac.nz<mailto:xxxjone...@xxx.ac.nz>) 
gid=1204805830(xxxjone...@xxx.ac.nz<mailto:xxxjone...@xxx.ac.nz>)





tail -f /var/log/secure

=========



Jan 30 18:19:56 node1 sshd[15443]: pam_sss(sshd:auth): authentication success; 
logname= uid=0 euid=0 tty=ssh ruser= rhost=130.195.87.12 
user=xxxjone...@xxx.ac.nz<mailto:user=xxxjone...@xxx.ac.nz>

Jan 30 18:19:56 node1 sshd[15440]: Accepted keyboard-interactive/pam for 
xxxjone...@xxx.ac.nz<mailto:xxxjone...@xxx.ac.nz> from 130.195.87.12 port 59402 
ssh2

Would there be any relevant  changes between RHEL8's slurm and RHEL9's slurm?

[root@node1 ~]# rpm -qa |grep slurm

slurm-libs-20.11.9-1.el8.x86_64

slurm-slurmd-20.11.9-1.el8.x86_64

slurm-20.11.9-1.el8.x86_64

[root@node1 ~]#

I would have to go back and check but I do not think I hit this on RHEL9  what 
I did get was srun ver22 on the RHEL9

server didnt like srun ver20 on the rocky8 node.

Can I compile / rpm build  srun ver22 to run on rocky8?  or is that part of 
slurmd?



regards

Steven

________________________________

From: John Hearns <hear...@gmail.com<mailto:hear...@gmail.com>>
Sent: Thursday, 30 January 2025 10:53 pm
To: Steven Jones <steven.jo...@vuw.ac.nz<mailto:steven.jo...@vuw.ac.nz>>
Cc: slurm-us...@schedmd.com<mailto:slurm-us...@schedmd.com> 
<slurm-us...@schedmd.com<mailto:slurm-us...@schedmd.com>>
Subject: Re: [slurm-users] RHEL8.10 V slurmctld



You don't often get email from hear...@gmail.com<mailto:hear...@gmail.com>. 
Learn why this is important<https://aka.ms/LearnAboutSenderIdentification>

Have you run id on a computer node?



On Wed, Jan 29, 2025, 6:47 PM Steven Jones via slurm-users 
<slurm-users@lists.schedmd.com<mailto:slurm-users@lists.schedmd.com>> wrote:

I am using Redhat's  IdM/IPA for users



Slurmctld is failing to run jobs and it is getting "invalid user id".



"2025-01-28T21:48:50.271] sched: Allocate JobId=4 NodeList=node4 #CPUs=1 
Partition=debug

[2025-01-28T21:48:50.280] Killing non-startable batch JobId=4: Invalid user id"



id on the slurm controller works fine.



[xxxjon...@xxx.ac.nz@hpcunidrslurmd2 ~]$ id 
xxxjon...@xxx.ac.nz<mailto:xxxjon...@xxx.ac.nz>
uid=1204805830(xxxjon...@xxx.ac.nz<mailto:xxxjon...@xxx.ac.nz>) 
gid=1204805830(xxxjon...@xxx.ac.nz<mailto:xxxjon...@xxx.ac.nz>) 
groups=1204805830(xxxjon...@xxx.ac.nz<mailto:xxxjon...@xxx.ac.nz>)  8><---

Any ideas please?  because I am out.....



I have tried RHEL9.5, this seemed to run but  srun is version 22 and on rocky8 
it is version20 so fails.



regards

Steven

--
slurm-users mailing list -- 
slurm-users@lists.schedmd.com<mailto:slurm-users@lists.schedmd.com>
To unsubscribe send an email to 
slurm-users-le...@lists.schedmd.com<mailto:slurm-users-le...@lists.schedmd.com>
-- 
slurm-users mailing list -- slurm-users@lists.schedmd.com
To unsubscribe send an email to slurm-users-le...@lists.schedmd.com

Reply via email to