[torqueusers] Not able to build torque with pam support.

[Prakash Velayutham]

Oh, forgot to mention that we use pam_pbssimpleauth to allow users who  
have a job running in a node to be able to SSH into that node. That is  
where the difference is. /etc/security/access.conf is used to allow  
system admins to login anytime, anywhere.

Prakash

On Feb 25, 2010, at 1:13 PM, Sabuj Pattanayek wrote:

> On Thu, Feb 25, 2010 at 11:54 AM, Prakash Velayutham
> <prakash.velayutham at cchmc.org> wrote:
>> Once you have PAM support built in, just edit the necessary PAM  
>> config files
>> under /etc/pam.d folder (generally that is where they are in linux)  
>> to
>> include the pam_pbssimpleauth.so library in the account section and  
>> that
>> should be it.
>>
>> We use it here for SSH service to prevent users from directly  
>> logging into
>> compute nodes and running jobs.
>
> Most linux variants have pam_access enabled so for example on centos
> we just put in /etc/security/access.conf on the compute nodes:
>
> + : admin : ALL
> - : ALL : ALL
>
> Only people in the admin group can login interactively. This doesn't
> seem to interfere with pbs_mom starting jobs on the nodes.
> _______________________________________________
> torqueusers mailing list
> torqueusers at supercluster.org
> http://www.supercluster.org/mailman/listinfo/torqueusers