[torqueusers] Not able to build torque with pam support.
prakash.velayutham at cchmc.org
Thu Feb 25 11:49:38 MST 2010
Oh, forgot to mention that we use pam_pbssimpleauth to allow users who
have a job running in a node to be able to SSH into that node. That is
where the difference is. /etc/security/access.conf is used to allow
system admins to login anytime, anywhere.
On Feb 25, 2010, at 1:13 PM, Sabuj Pattanayek wrote:
> On Thu, Feb 25, 2010 at 11:54 AM, Prakash Velayutham
> <prakash.velayutham at cchmc.org> wrote:
>> Once you have PAM support built in, just edit the necessary PAM
>> config files
>> under /etc/pam.d folder (generally that is where they are in linux)
>> include the pam_pbssimpleauth.so library in the account section and
>> should be it.
>> We use it here for SSH service to prevent users from directly
>> logging into
>> compute nodes and running jobs.
> Most linux variants have pam_access enabled so for example on centos
> we just put in /etc/security/access.conf on the compute nodes:
> + : admin : ALL
> - : ALL : ALL
> Only people in the admin group can login interactively. This doesn't
> seem to interfere with pbs_mom starting jobs on the nodes.
> torqueusers mailing list
> torqueusers at supercluster.org
More information about the torqueusers