Il 11/02/2016 08:23, Janne Blomqvist ha scritto:

> do you have user and group enumeration enabled in winbind?
No. I couldn't do it: when I tried it (some years ago, while
experimenting with winbind join), it took more than 8 *hours* to fetch
the groups list. IIRC we have more than 200k users and more than 800k
groups. Yes' we've quite a large forest :)

> I.e. does
> $ getent passwd
> and
> $ getent group
> return nothing, or the entire user and group lists?
They just return LOCAL users/groups.

> FWIW, slurm 16.05 will have some changes to work better in environments
> with enumeration disabled, see http://bugs.schedmd.com/show_bug.cgi?id=1629
Yep. Seems quite applicable.

For the time being I worked around it by using a script:
#!/bin/bash
# Syntax: sspp partition group
AU=$(getent group $2 | sed 's/.*://')
scontrol update PartitionName=$1 AllowAccounts=$AU
scontrol reconf

I don't really understand why is scontrol reconf needed at all, but if I
don't use it, jobs won't get submitted.

-- 
Diego Zuccato
Servizi Informatici
Dip. di Fisica e Astronomia (DIFA) - Università di Bologna
V.le Berti-Pichat 6/2 - 40127 Bologna - Italy
tel.: +39 051 20 95786
mail: [email protected]

Reply via email to