Hello, Unfortunately, to allow bidirectional passwordless ssh between Linux/Windows (for sole purpose of mm* commands), the literal username 'root' is a requirement. Here are a few variations.
1. Use domain account 'root', where 'root' belongs to "Domain Admins" group. This is the easiest 1-step and the recommended way. or 2. Use domain account 'root', where 'root' does NOT belong to "Domain Admins" group. In this case, on each and every GPFS Windows node, add this 'domain\root' account to local "Administrators" group. or 3. On each and every GPFS Windows node, create a local 'root' account as a member of local "Administrators" group. (1) and (2) work well reliably with Cygwin. I have seen inconsistent results with approach (3) wherein Cygwin passwordless ssh in incoming direction (linux->windows) sometimes breaks and prompts for password. Give it a try to see if you get better results. If you cannot get around the 'root' literal username requirement, the suggested alternative is to use GPFS multi-clustering. Create a separate cluster of all Windows-only nodes (using mmwinrsh/mmwinrcp instead of ssh/scp... so that 'root' requirement is eliminated). And then remote mount from the Linux cluster (all non-Windows nodes) via mmauth, mmremotecluster and mmremotefs et al. Regards, The Spectrum Scale (GPFS) team ------------------------------------------------------------------------------------------------------------------ If you feel that your question can benefit other users of Spectrum Scale (GPFS), then please post it to the public IBM developerWroks Forum at https://www.ibm.com/developerworks/community/forums/html/forum?id=11111111-0000-0000-0000-000000000479 . If your query concerns a potential software error in Spectrum Scale (GPFS) and you have an IBM software maintenance contract please contact 1-800-237-5511 in the United States or your local IBM Service Center in other countries. The forum is informally monitored as time permits and should not be used for priority messages to the Spectrum Scale (GPFS) team. From: "Grunenberg, Renar" <renar.grunenb...@huk-coburg.de> To: "gpfsug-discuss@spectrumscale.org" <gpfsug-discuss@spectrumscale.org> Date: 12/06/2018 09:05 AM Subject: [gpfsug-discuss] Spectrum Scale for Windows Domain -User Requirements Sent by: gpfsug-discuss-boun...@spectrumscale.org Hallo All, i had a question about the domain-user root account on Windows. We have some requirements to restrict these level of authorization and found no info what is possible to change here. Two questions: 1. It is possible to define a other Domain-Account other than as root for this. 2. If not, is it possible to define a local account as root on Windows-Clients? Any hints are appreciate. Thanks Renar Renar Grunenberg Abteilung Informatik ? Betrieb HUK-COBURG Bahnhofsplatz 96444 Coburg Telefon: 09561 96-44110 Telefax: 09561 96-44104 E-Mail: renar.grunenb...@huk-coburg.de Internet: www.huk.de HUK-COBURG Haftpflicht-Unterstützungs-Kasse kraftfahrender Beamter Deutschlands a. G. in Coburg Reg.-Gericht Coburg HRB 100; St.-Nr. 9212/101/00021 Sitz der Gesellschaft: Bahnhofsplatz, 96444 Coburg Vorsitzender des Aufsichtsrats: Prof. Dr. Heinrich R. Schradin. Vorstand: Klaus-Jürgen Heitmann (Sprecher), Stefan Gronbach, Dr. Hans Olav Herøy, Dr. Jörg Rheinländer (stv.), Sarah Rössler, Daniel Thomas. Diese Nachricht enthält vertrauliche und/oder rechtlich geschützte Informationen. Wenn Sie nicht der richtige Adressat sind oder diese Nachricht irrtümlich erhalten haben, informieren Sie bitte sofort den Absender und vernichten Sie diese Nachricht. Das unerlaubte Kopieren sowie die unbefugte Weitergabe dieser Nachricht ist nicht gestattet. This information may contain confidential and/or privileged information. If you are not the intended recipient (or have received this information in error) please notify the sender immediately and destroy this information. Any unauthorized copying, disclosure or distribution of the material in this information is strictly forbidden. _______________________________________________ gpfsug-discuss mailing list gpfsug-discuss at spectrumscale.org http://gpfsug.org/mailman/listinfo/gpfsug-discuss
_______________________________________________ gpfsug-discuss mailing list gpfsug-discuss at spectrumscale.org http://gpfsug.org/mailman/listinfo/gpfsug-discuss