Not as such; but the '-i' flag is 'start via inetd' - so the theory is that is is only started during/for a qlogin session. Plus it won't be on the standard port but something high up & random (and I'm pretty sure last time I looked changing).

I'm not trying to do anything fancy like people connecting to other nodes though; I simply needed a X forwarding capable qlogin :)

Tina

On 13/10/14 22:45, Prentice Bisbal wrote:
Is that ssh conf dynamically generated to limit access only to nodes
that SGE has assigned to that user?

Prentice

On 10/13/2014 12:44 PM, Tina Friedrich wrote:
We also use a different config file for the 'qlogin' ssh to avoid this
- the qlogin_daemon command is 'ssh -i -f path_to_config'.

The 'standard' sshd.conf on the nodes does not allow login for users,
but the one the qlogin_daemon points to does.

Tina

On 30/09/14 02:59, Derrick Lin wrote:
hi guys,

I am trying to configure SSH as underlying protocol for qrsh, qlogin.
However, this requires allowing users to SSH into compute nodes. In such
case, users can simply go to compute nodes with SSH, bypassing SGE
(qrsh, qlogin etc).

I am wondering what the best way to configure SSH to service qrsh and
qlogin but don't expose SSH directly to the users?

Regards,
Derrick


_______________________________________________
users mailing list
[email protected]
https://gridengine.org/mailman/listinfo/users






--
Tina Friedrich, Computer Systems Administrator, Diamond Light Source Ltd
Diamond House, Harwell Science and Innovation Campus - 01235 77 8442

--
This e-mail and any attachments may contain confidential, copyright and or 
privileged material, and are for the use of the intended addressee only. If you 
are not the intended addressee or an authorised recipient of the addressee 
please notify us of receipt by returning the e-mail and do not use, copy, 
retain, distribute or disclose the information in or attached to the e-mail.
Any opinions expressed within this e-mail are those of the individual and not necessarily of Diamond Light Source Ltd. Diamond Light Source Ltd. cannot guarantee that this e-mail or any attachments are free from viruses and we cannot accept liability for any damage which you may sustain as a result of software viruses which may be transmitted in or with the message.
Diamond Light Source Limited (company no. 4375679). Registered in England and 
Wales with its registered office at Diamond House, Harwell Science and 
Innovation Campus, Didcot, Oxfordshire, OX11 0DE, United Kingdom




_______________________________________________
users mailing list
[email protected]
https://gridengine.org/mailman/listinfo/users

Reply via email to