On Mon, 13 Jan 2003, Edmund Bertschinger wrote:
> Last week I wrote a few emails to this list seeking help for problems I
> was having on oscar install. I've managed to solve the problems well
> enough to get through step 7. My experience could be helpful for others
> or at least for the documentation writers.
Excellent -- thanks. See below.
> 2. I was having problems with being unable to ssh into the nodes. It
> turns out that, in a moment of security paranoia some weeks earlier
> which I had forgotten, I disabled root logins by editing
> /etc/ssh/sshd-config and setting PermitRootLogin to no. While this is
> good security policy on single machines, it is (in retrospect) obviously
> bad for clusters. Without root login, a cluster can't work. It might
> be worth a footnote in the oscar documentation about this for the
> paranoid newbie.
Will do.
> 3. If one uses tcp_wrappers (and who doesn't?), then at least during
> oscar installation, one must allow the client nodes to run tftp on the
> server. The following hosts.allow file will take care of this. It
> might be worth noting this fact in the oscar documentation, since the
> careful linux manager will by default allow no access to any inet
> services.
I added a note about this, and about firewall software.
--
{+} Jeff Squyres
{+} [EMAIL PROTECTED]
{+} http://www.lam-mpi.org/
-------------------------------------------------------
This SF.NET email is sponsored by: Thawte.com
Understand how to protect your customers personal information by implementing
SSL on your Apache Web Server. Click here to get our FREE Thawte Apache
Guide: http://ads.sourceforge.net/cgi-bin/redirect.pl?thaw0029en
_______________________________________________
Oscar-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/oscar-users
