search

Azure / hpcpack

The repo to track public issues for Microsoft HPC Pack product.
MIT License
29 stars 11 forks source link

Cluster Access outside main Domain via REST api #13

Open webstc2 opened 3 years ago

webstc2 commented 3 years ago

Feature Request Description

The cluster is part of DomainA and its head node has the full DNS path of headnode.domaina.com. A user that is part of DomainB is unable to authenticate to the REST api. This appears to be an issue with every version of HPC Pack tested (2012R2, 2016, and 2019).

Describe Preferred Solution

A user from DomainB can successfully authenticate and submit jobs to the cluster via the REST api.

phxnsharp commented 3 years ago

I have successfully authenticated using the REST API from within a linux based Docker container on a computer that is not domain added. This is definitely possible. Are you adding the domain to the username field: username@domain.com?

webstc2 commented 3 years ago

What domain is the user account in? Is it the same domain as the cluster? Where you run the command and whether that asset is in the domain is not the issue.

I have previously communicated this issue directly to the HPC Pack developers and received this: "I'm sorry but the REST API doesn't support such use case as the Job Manager and the portal at "/hpcportal" do. I can take a further look for the reason why but I can't promise we can support it. "

phxnsharp commented 3 years ago

Ahh, I see the difference. You are expecting federation among the domains. Good luck!