fgci-org / fgci-ansible

:microscope: Collection of the Finnish Grid and Cloud Infrastructure Ansible playbooks
MIT License
54 stars 18 forks source link

"normal" user cant ssh into nodes unless there's an active job #123

Closed A1ve5 closed 8 years ago

A1ve5 commented 8 years ago

normal user can't access cluster's compute nodes by sshing into them. This is the error msg: Access denied: user test (uid=5249) has no active jobs on this node.

This doesn't happen in Taito or Aesyle

Could this be pam_slurm.so related?

martbhell commented 8 years ago

On Taito it's possible for some CSC users. Most normal users cannot. It is a pam thing yes. Not sure exactly how now but one can allow some groups to get in without slurm jobs.

martbhell commented 8 years ago

Probably by adding more groups to the slurm access group variable one can add more: https://github.com/jabl/ansible-role-pam/blob/master/tasks/main.yml

A1ve5 commented 8 years ago

[cscluis@carpo ~]$ salloc -N1 bash salloc: Pending job allocation 2234839 salloc: job 2234839 queued and waiting for resources salloc: job 2234839 has been allocated resources salloc: Granted job allocation 2234839 [cscluis@carpo ~]$ srun hostname ca11 [cscluis@carpo ~]$ ssh ca11 [cscluis@ca11 ~]$

This seems like a quite sensible way to "use" a node.