[Beowulf] Restricting users from ssh into nodes

[Jonathan Aquilina]

John can't you do that with a feature in ssh called Deny users and specify
the user name or that wouldnt work in a cluster environment.


On Tue, Jul 23, 2013 at 12:55 PM, Hearns, John <john.hearns at mclaren.com>wrote:

>
>
>  Over the years there have been several discussions on this list on how
> to prevent users sshing into compute cluster nodes,****
>
> and so circumventing the batch system.****
>
> ** **
>
> Reading the PBSPro manual, I just found the Mom parameter $restrict_user**
> **
>
> Set this to true, and any (non-system) users who are not running a batch
> job on a system are killed after 10 seconds!****
>
> Tried it and it works.****
>
> I am unsure if there are equivalents in other batch systems.****
>
> ** **
>
> Just goes to show****
>
> ** **
>
> **a)      **There is always something new to learn****
>
> **b)      **RTFM****
>
> ** **
>
> ** **
>
> *Dr John Hearns** | CFD Hardware Specialist |* *McLaren Racing Limited*
> McLaren Technology Centre, Chertsey Road, Woking, Surrey GU21 4YH, UK****
>
>
> *T: * +44 (0) 1483 262000****
>
> *D:  *+44 (0) 1483 262352****
>
> *F:*  +44 (0) 1483 261928
> *E:*  john.hearns at mclaren.com****
>
> *W: *www.mclaren.com****
>
> ** **
>
>
> The contents of this e-mail are confidential and for the exclusive use of
> the intended recipient. If you are not the intended recipient you should
> not read, copy, retransmit or disclose its contents. If you have received
> this email in error please delete it from your system immediately and
> notify us either by email or telephone. The views expressed in this
> communication may not necessarily be the views held by McLaren Racing
> Limited.
> McLaren Racing Limited | McLaren Technology Centre | Chertsey Road |
> Woking | Surrey | GU21 4YH | UK | Company Number: 01517478
>
> _______________________________________________
> Beowulf mailing list, Beowulf at beowulf.org sponsored by Penguin Computing
> To change your subscription (digest mode or unsubscribe) visit
> http://www.beowulf.org/mailman/listinfo/beowulf
>
>


-- 
Jonathan Aquilina
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.beowulf.org/pipermail/beowulf/attachments/20130723/bc0d4856/attachment.html>