On Fri, Sep 7, 2012 at 7:18 PM, Evren Yurtesen IB <[email protected]> wrote: > > It appears it is enough to set X11UseLocalhost=no on login node only. > > Now the question is, how secure is this? :) or what is the downside?
It's not terribly secure. Basically you're allowing X11 clients to connect from any host. As Aaron indicates, Slurm doesn't do X forwarding. The DISPLAY variable you're getting in the interactive session is from the environment on your login node. srun.x11 works by creating a screen session via an ssh connection to the node. We have been working with a X11 spank plugin- so far so good. There seem to be a few forks on github- IIRC, we started with the contribution from here: http://www.google.com/url?sa=t&rct=j&q=&esrc=s&source=web&cd=3&cad=rja&ved=0CDgQFjAC&url=http%3A%2F%2Fgroups.google.com%2Fgroup%2Fslurm-devel%2Fbrowse_thread%2Fthread%2F8a4f7eedacf8d476%2Fccf84be0a5e4b57a&ei=t9JKUP_kC8eLiwL04YD4Dw&usg=AFQjCNGSkQcT-C9fzlVSVnC-AGAxGHbneg > On Fri, 7 Sep 2012, Aaron Knister wrote: > >> Hi Evren, > >> I'm not sure if --pry plays a significant role here. The DISPLAY variable, >> by default, is set to localhost:port_offset. SLURM itself doesn't do any x11 >> forwarding so when your remote application attempts to connect to the x11 >> server on the submission node, unless they're the same, the connection will >> fail. The solution is to set X11UseLocalhost to no in your sshd_config's on >> your clusters nodes, restart sshd and login again. > > >> > >> Sent from my iPhone > > >> > >> On Sep 7, 2012, at 6:36 PM, Evren Yurtesen IB <[email protected]> wrote: > > >> > >>> > >>> Hello, > > >>> > >>> I am trying to run programs with graphical output using slurm. > > >>> > >>> I tried srun's --pty option to start a shell. Everything looks fine and >>> DISPLAY variable is set, yet programs are not able to connect to the >>> DISPLAY. I get error stating failed to connect to localhost:11.0 from node1 > > >>> > >>> Then I tried using P. Anderssons scripts and they seem to work fine: > > >>> https://computing.llnl.gov/linux/slurm/faq.html#terminal > > >>> > >>> So, am I understanding correctly that --pty option should allow X11 >>> forwarding? Is there a trick to get it working? > > >>> > >>> Thanks, > > >>> Evren > > -- Hey! Somebody punched the foley guy! - Crow, MST3K ep. 508
