Hello,
We would like to modify our xcat cluster so that if anyone was
(fortunate/clever enough) to gain root access then they could not ssh directly
in to the management and service nodes. I decided to look at this documentation
-- https://sourceforge.net/p/xcat/wiki/Setting_Up_Zones/. Putting a group of
nodes in a zone does the trick. I simple did the following...
mkzone zone2 -a phi -g
updatenode phi -k
These commands do have the desired effect, however I don't have my head around
the updatenode command. What exactly does this do? Presumably that command
modifies an ssh key so that password-less access to the management/service
nodes no longer works from the phi group. Have I got the essence of what is
going on here or missed the boat? Also is that phase that updatenode requests
important? Could someone please advise me.
Best regards,
David.
------------------------------------------------------------------------------
Transform Data into Opportunity.
Accelerate data analysis in your applications with
Intel Data Analytics Acceleration Library.
Click to learn more.
http://pubads.g.doubleclick.net/gampad/clk?id=278785231&iu=/4140
_______________________________________________
xCAT-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/xcat-user
