[Beowulf] Restricting users from ssh into nodes

[Hearns, John]

Over the years there have been several discussions on this list on how to prevent users sshing into compute cluster nodes,
and so circumventing the batch system.

Reading the PBSPro manual, I just found the Mom parameter $restrict_user
Set this to true, and any (non-system) users who are not running a batch job on a system are killed after 10 seconds!
Tried it and it works.
I am unsure if there are equivalents in other batch systems.

Just goes to show


a)      There is always something new to learn

b)      RTFM


Dr John Hearns | CFD Hardware Specialist | McLaren Racing Limited
McLaren Technology Centre, Chertsey Road, Woking, Surrey GU21 4YH, UK

T:  +44 (0) 1483 262000
D:  +44 (0) 1483 262352
F:  +44 (0) 1483 261928
E:  john.hearns at mclaren.com
W: www.mclaren.com<http://www.mclaren.com/>

The contents of this e-mail are confidential and for the exclusive use of the intended recipient.
If you are not the intended recipient you should not read, copy, retransmit or disclose its contents.
If you have received this email in error please delete it from your system immediately and notify us either by email or telephone.
The views expressed in this communication may not necessarily be the views held by McLaren Racing Limited. 
McLaren Racing Limited | McLaren Technology Centre | Chertsey Road | Woking | Surrey | GU21 4YH | UK | Company Number: 01517478



-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.beowulf.org/pipermail/beowulf/attachments/20130723/309d787e/attachment.html>