[slurm-dev] Re: Qos limits associations and AD auth

2017-10-21 Thread Nadav Toledo
It works, thanks alot for the tip the only problem now is having QOS enforcements(and limits) without associations. On 20/10/2017 10:28, Chris Samuel wrote: On Friday, 20 October 2017 9:53:06 AM AEDT Lachlan Musicman wrote: Latest version of sssd can take short

[slurm-dev] Re: Qos limits associations and AD auth

2017-10-20 Thread Chris Samuel
On Friday, 20 October 2017 9:53:06 AM AEDT Lachlan Musicman wrote: > Latest version of sssd can take shortnames and search through domains. I'm not sure if that works though if you've got two different people with the same username in different domains though. cheers, Chris -- Christopher Sa

[slurm-dev] Re: Qos limits associations and AD auth

2017-10-19 Thread Lachlan Musicman
On 19 October 2017 at 20:37, Chris Samuel wrote: > > On Thursday, 19 October 2017 7:41:37 PM AEDT Nadav Toledo wrote: > > > running : id -u domain_name\\username , does return its uid > > So your system is not finding users as just "username", but instead only as > domain_name\\username which is

[slurm-dev] Re: Qos limits associations and AD auth

2017-10-19 Thread Chris Samuel
On Thursday, 19 October 2017 7:41:37 PM AEDT Nadav Toledo wrote: > running : id -u domain_name\\username , does return its uid So your system is not finding users as just "username", but instead only as domain_name\\username which is probably not ideal. You probably want to see if you can find

[slurm-dev] Re: Qos limits associations and AD auth

2017-10-19 Thread Nadav Toledo
Re: [slurm-dev] Re: Qos limits associations and AD auth Re: [slurm-dev] Re: Qos limits associations and AD auth I found a hint, running sacctmgr show problem: Cluster Account User Problem -- -- -- domain_name

[slurm-dev] Re: Qos limits associations and AD auth

2017-10-19 Thread Nadav Toledo
Re: [slurm-dev] Re: Qos limits associations and AD auth also running with sudo both slurmctrld and slurmdbd perhaps i should "sudo su -" first? On 19/10/2017 11:17, Douglas Jacobsen wrote: Are they both running as the same user? (They need to to trust each other&

[slurm-dev] Re: Qos limits associations and AD auth

2017-10-19 Thread Nadav Toledo
Re: [slurm-dev] Re: Qos limits associations and AD auth yeah, slurmuser=slurmduser=root On 19/10/2017 11:17, Douglas Jacobsen wrote: Are they both running as the same user? (They need to to trust each other's messages) On Oct 19, 2017 01:12, "Nadav Toledo&q

[slurm-dev] Re: Qos limits associations and AD auth

2017-10-19 Thread Douglas Jacobsen
Are they both running as the same user? (They need to to trust each other's messages) On Oct 19, 2017 01:12, "Nadav Toledo" wrote: > slurmdbd and slurmctrld are on the same machine... > > sacctmgr list clusters format=cluster,controlhost,controlport >ClusterControlHost ControlPort >

[slurm-dev] Re: Qos limits associations and AD auth

2017-10-19 Thread Nadav Toledo
slurmdbd and slurmctrld are on the same machine... sacctmgr list clusters format=cluster,controlhost,controlport Cluster ControlHost ControlPort -- --- imageproc+ 127.0.0.1 6817 Its still beta stage for testing, so

[slurm-dev] Re: Qos limits associations and AD auth

2017-10-19 Thread Chris Samuel
On Thursday, 19 October 2017 4:43:13 PM AEDT Nadav Toledo wrote: > so adding manually only works if I dont restart slurmctrld... That usually points to a communication problem for slurmdbd trying to tell the slurmctld about these changes via an RPC. What does this say? sacctmgr list clusters

[slurm-dev] Re: Qos limits associations and AD auth

2017-10-18 Thread Nadav Toledo
Hey chris, Problem is, even adding a user : sacctmgr create user domain_name\\user_name account=research restarting slurmctrld and trying to run a job with the above user : srun bash, resulting in: slurmctld: error: User 243309139 not found slurmctld: _job_create: invalid acc

[slurm-dev] Re: Qos limits associations and AD auth

2017-10-18 Thread Christopher Samuel
On 18/10/17 16:27, Nadav Toledo wrote: > about B:ן¿½ The reason is I dont want to manually adding each user to > the slurm database (sacctmgr create user...) I'm afraid you don't really have an option there, if you want to use the slurmdbd limits then you're going to need to add the users to the

[slurm-dev] Re: Qos limits associations and AD auth

2017-10-18 Thread Nadav Toledo
Re: [slurm-dev] Re: Qos limits associations and AD auth Hey Benjamin, I am sorry english is not my mother language, so I barely understand what you wrote can you explain when you have more time? Thanks, Nadav On 18/10/2017 17:59, Benjamin LIPERE wrote: Sorry, bad Phone typo

[slurm-dev] Re: Qos limits associations and AD auth

2017-10-18 Thread Benjamin LIPERE
Sorry, bad Phone typo Le 18 oct. 2017 08:07, "Benjamin LIPERE" a écrit : Wellington, for security, first wrong starting. HPC not secure. Except if you have à 10pers team. I hope that at list you put thé cluster behind a router firewall in à militarisation zone. If you d'idées not second score in

[slurm-dev] Re: Qos limits associations and AD auth

2017-10-17 Thread Benjamin LIPERE
Wellington, for security, first wrong starting. HPC not secure. Except if you have à 10pers team. I hope that at list you put thé cluster behind a router firewall in à militarisation zone. If you d'idées not second score in your ass, Man. Also thé third screw is that you let ssh access to not trust

[slurm-dev] Re: Qos limits associations and AD auth

2017-10-17 Thread Nadav Toledo
Re: [slurm-dev] Re: Qos limits associations and AD auth can you ellaborate what exactly you mean by web portal? at the moment users are logging to login server via ssh with their AD credentials, these creds are being auth against AD via pbis-open What do you suggest I add to these

[slurm-dev] Re: Qos limits associations and AD auth

2017-10-17 Thread Benjamin LIPERE
Yo. Put à freaking Web portail, if you add this to thé cluster you and your student will have to manage it. The will get bad habit of it. Or installé à singularity cluster. You Can code all this in à afternoon easy. Le 18 oct. 2017 07:35, "Nadav Toledo" a écrit : > Sorry for all the wierd symbol

[slurm-dev] Re: Qos limits associations and AD auth

2017-10-17 Thread Nadav Toledo
Qos limits associations and AD auth Sorry for all the wierd symbols, I was copying the code from linux terminal here is the clean code(I hope): if ((accounting_enforce & ACCOUNTING_ENFORCE_QOS) && assoc_ptr && !admin && (!assoc_ptr->usage->valid_qos || !bit_test(assoc_ptr->

[slurm-dev] Re: Qos limits associations and AD auth

2017-10-17 Thread Benjamin LIPERE
You Can use AD, but it is bothersome in Many ways. Use à Web portail for manage your users. Le 18 oct. 2017 07:25, "Nadav Toledo" a écrit : > Hey everyone, > I am working at a university and we trying to setup a slurm cluster for > courses and research. > for the courses we would like to enforce