<div dir="ltr">John can't you do that with a feature in ssh called Deny users and specify the user name or that wouldnt work in a cluster environment.</div><div class="gmail_extra"><br><br><div class="gmail_quote">On Tue, Jul 23, 2013 at 12:55 PM, Hearns, John <span dir="ltr"><<a href="mailto:john.hearns@mclaren.com" target="_blank">john.hearns@mclaren.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div lang="EN-GB" link="blue" vlink="purple">
<br>
<br>
<div>
<p class="MsoNormal">Over the years there have been several discussions on this list on how to prevent users sshing into compute cluster nodes,<u></u><u></u></p>
<p class="MsoNormal">and so circumventing the batch system.<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">Reading the PBSPro manual, I just found the Mom parameter $restrict_user<u></u><u></u></p>
<p class="MsoNormal">Set this to true, and any (non-system) users who are not running a batch job on a system are killed after 10 seconds!<u></u><u></u></p>
<p class="MsoNormal">Tried it and it works.<u></u><u></u></p>
<p class="MsoNormal">I am unsure if there are equivalents in other batch systems.<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">Just goes to show<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p><u></u><span>a)<span style="font:7.0pt "Times New Roman"">
</span></span><u></u>There is always something new to learn<u></u><u></u></p>
<p><u></u><span>b)<span style="font:7.0pt "Times New Roman"">
</span></span><u></u>RTFM<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal"><b><span style="font-size:7.5pt;font-family:"Arial","sans-serif";color:gray">Dr John Hearns</span></b><b><span style="font-size:7.5pt;font-family:"Arial","sans-serif";color:gray"> | CFD Hardware Specialist |</span></b><span style="font-size:7.5pt;font-family:"Arial","sans-serif";color:gray">
<b>McLaren Racing Limited</b></span><span style="font-size:7.5pt;font-family:"Arial","sans-serif";color:navy"><br>
</span><span style="font-size:7.5pt;font-family:"Arial","sans-serif";color:gray">McLaren Technology Centre, Chertsey Road, Woking, Surrey GU21 4YH, UK</span><u></u><u></u></p>
<p class="MsoNormal"><span style="font-size:7.5pt;font-family:"Arial","sans-serif";color:gray"><br>
</span><b><span lang="DE" style="font-size:7.5pt;font-family:"Arial","sans-serif";color:red">T:
</span></b><span lang="DE" style="font-size:7.5pt;font-family:"Arial","sans-serif";color:gray"> <a href="tel:%2B44%20%280%29%201483%20262000" value="+441483262000" target="_blank">+44 (0) 1483 262000</a></span><u></u><u></u></p>
<p class="MsoNormal"><b><span style="font-size:7.5pt;font-family:"Arial","sans-serif";color:red">D: </span></b><span lang="DE" style="font-size:7.5pt;font-family:"Arial","sans-serif";color:gray"><a href="tel:%2B44%20%280%29%201483%20262352" value="+441483262352" target="_blank">+44 (0) 1483 262352</a></span><span style="font-size:12.0pt;font-family:"Times New Roman","serif""><u></u><u></u></span></p>
<p class="MsoNormal"><b><span lang="DE" style="font-size:7.5pt;font-family:"Arial","sans-serif";color:red">F:</span></b><span lang="DE" style="font-size:7.5pt;font-family:"Arial","sans-serif";color:gray"> <a href="tel:%2B44%20%280%29%201483%20261928" value="+441483261928" target="_blank">+44 (0) 1483 261928</a> </span><span lang="DE" style="font-size:7.5pt;font-family:"Arial","sans-serif";color:navy"><br>
</span><b><span lang="DE" style="font-size:7.5pt;font-family:"Arial","sans-serif";color:red">E:</span></b><span lang="DE" style="font-size:7.5pt;font-family:"Arial","sans-serif";color:red"> </span><span lang="DE" style="font-size:7.5pt;font-family:"Arial","sans-serif";color:#7f7f7f"><a href="mailto:john.hearns@mclaren.com" target="_blank">john.hearns@mclaren.com</a></span><u></u><u></u></p>
<p class="MsoNormal"><b><span lang="DE" style="font-size:7.5pt;font-family:"Arial","sans-serif";color:red">W:
</span></b><a href="http://www.mclaren.com/" title="blocked::http://www.mclaren.com/" target="_blank"><span lang="DE" style="font-size:7.5pt;font-family:"Arial","sans-serif";color:gray">www.mclaren.com</span></a><u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<br>
<br>
The contents of this e-mail are confidential and for the exclusive use of the intended recipient.
If you are not the intended recipient you should not read, copy, retransmit or disclose its contents.
If you have received this email in error please delete it from your system immediately and notify us either by email or telephone.
The views expressed in this communication may not necessarily be the views held by McLaren Racing Limited.
<br>McLaren Racing Limited | McLaren Technology Centre | Chertsey Road | Woking | Surrey | GU21 4YH | UK | Company Number: 01517478
</div>
<br>_______________________________________________<br>
Beowulf mailing list, <a href="mailto:Beowulf@beowulf.org">Beowulf@beowulf.org</a> sponsored by Penguin Computing<br>
To change your subscription (digest mode or unsubscribe) visit <a href="http://www.beowulf.org/mailman/listinfo/beowulf" target="_blank">http://www.beowulf.org/mailman/listinfo/beowulf</a><br>
<br></blockquote></div><br><br clear="all"><div><br></div>-- <br>Jonathan Aquilina
</div>