[torqueusers] Directory problems (new user)

Nico van Eikema Hommes hommes at chemie.uni-erlangen.de
Mon Apr 7 07:19:48 MDT 2008


I would not recommended this, as it is rather insecure. SSH keys
should never be used without passphrase protection.
Since passwordless copying (and possibly passwordless login as well,
e.g. for MPI jobs) is required only within the cluster, it is more
appropriate to use hostbased authentication instead: this offers
what you need while still being under control of the administrator
and not allowing users to configure their own passwordless access,
possibly from outside.

Setting up hostbased authentication requires a list of all hostnames
in /etc/hosts.equiv, public keys for all servers to be present in
/etc/ssh/ssh_known_hosts and permissions for the ssh executable to be
4755 instead of 0755.

On 07-04-2008, at 13:42 , rishi pathak wrote:
> If your /home is coming from an nfs server then for a password less  
> ssh and scp  do this.
> Login as user on nfs server;
> ssh-keygen -t dsa
> Press enter when asked for passphrase
>
> not write the public key(id_dsa.pub) to .ssh/authorized
>
> Now login on a compute node and try doing ssh to other compute  
> nodes.That should work without asking for passwd

--
Dr. N.J.R. van Eikema Hommes   Computer-Chemie-Centrum
hommes at chemie.uni-erlangen.de  Universitaet Erlangen-Nuernberg
Phone:    +49-(0)9131-8526532  Naegelsbachstr. 25
FAX:      +49-(0)9131-8526565  91052 Erlangen, Germany





More information about the torqueusers mailing list