[torqueusers] Not able to build torque with pam support.
sabujp at gmail.com
Thu Feb 25 11:13:09 MST 2010
On Thu, Feb 25, 2010 at 11:54 AM, Prakash Velayutham
<prakash.velayutham at cchmc.org> wrote:
> Once you have PAM support built in, just edit the necessary PAM config files
> under /etc/pam.d folder (generally that is where they are in linux) to
> include the pam_pbssimpleauth.so library in the account section and that
> should be it.
> We use it here for SSH service to prevent users from directly logging into
> compute nodes and running jobs.
Most linux variants have pam_access enabled so for example on centos
we just put in /etc/security/access.conf on the compute nodes:
+ : admin : ALL
- : ALL : ALL
Only people in the admin group can login interactively. This doesn't
seem to interfere with pbs_mom starting jobs on the nodes.
More information about the torqueusers