[Beowulf] Re: Linux cluster authenticating against multiple Active Directory domains

Chris Samuel csamuel at vpac.org
Sun Aug 3 16:12:02 PDT 2008


----- "John Hearns" <john.hearns at streamline-computing.com> wrote:

> On Fri, 2008-08-01 at 15:37 +1000, Chris Samuel wrote:
> 
> > We'd prefer to steer clear of Kerberos, it introduces
> > arbitrary job limitations through ticket lives that
> > are not tolerable for HPC work.
>
> Kerberos is heavily used at CERN. They have a solution for
> that issue - the job can ask for an extension to the tickets.

That's useful to know, though it doesn't help in this
situation due to the fact that there is no GSSAPI support
in the mainline Torque at present.

cheers,
Chris
-- 
Christopher Samuel - (03) 9925 4751 - Systems Manager
 The Victorian Partnership for Advanced Computing
 P.O. Box 201, Carlton South, VIC 3053, Australia
VPAC is a not-for-profit Registered Research Agency



More information about the Beowulf mailing list