Chris Jewell <[email protected]> writes: > Hi All, > > I was wondering if anybody had any info on using Grid Engine with > Kerberos authentication?
In the absence of anyone speaking who has been doing it: There's was stuff about it on the old list, searchable via gridengine.markmail.org, including reference to Friebel's SGE workshop talk about the setup at DESY. unfortunately the proceedings have been taken down, and I've failed to archive them, although I have a copy of that one. The software it refers to is at ftp://ftp.ifh.de/pub/unix/gnu/perl/modules/ but I haven't used it. There's also a system reported at http://workshop.openafs.org/afsbpw10/talks/wed_3/hautreux_kerberos_hpc.pdf which has integration for SLURM, but I don't know how difficult it would be to integrate it with GE. Of course, the Kerberos security model is basically incompatible with arbitrary length unattended batch jobs, experimental sessions, etc., and you need to have control of your authentication and resource infrastructure to make this sort of thing work. That doesn't mean there's anything wrong with the model, but a capability system is probably more appropriate for such applications. _______________________________________________ users mailing list [email protected] https://gridengine.org/mailman/listinfo/users
