Hi Matthieu
Hi Robbert, what we do to solve this problem is adding a section in the Slurmctld prolog that check that the user associated to the job to start has a valid credential in the auksd daemon, otherwise we update the job with a comment indicating that no kerberos token is available and then suspend the job.
That sounds like a nice feature to have if it is simple to implement (it happens so rarely that even I sometimes have to think twice to see what is happening). I have idea how to do this in the Slurm prolog, I have not had to use the prolog before. Would it be possible for you to let me have the snippet that takes care of this?
Best, Robbert
