<div dir="ltr">Hi again,<div>I think I managed to make it working with: </div><div><br></div><div>$ slurmrestd -f /etc/slurm/slurmrestd.conf -a rest_auth/jwt -s openapi/v0.0.36 -vvv <a href="http://0.0.0.0:6820">0.0.0.0:6820</a></div><div><br></div><div>Sample request:</div><div>$ curl -H "X-SLURM-USER-NAME:riggi" -H "X-SLURM-USER-TOKEN:${SLURM_JWT}" <a href="http://localhost:6820/slurm/v0.0.36/ping">http://localhost:6820/slurm/v0.0.36/ping</a></div><div><br></div><div>{<br> "meta": {<br> "plugin": {<br> "type": "openapi\/v0.0.36",<br> "name": "REST v0.0.36"<br> },<br> "Slurm": {<br> "version": {<br> "major": 20,<br> "micro": 5,<br> "minor": 11<br> },<br> "release": "20.11.5"<br> }<br> },<br> "errors": [<br> ],<br> "pings": [<br> {<br> "hostname": "XXXX",<br> "ping": "UP",<br> "status": 0,<br> "mode": "primary"<br> }<br> ]<br></div><div><br></div><div>where SLURM_JWT was generated with:</div><div><br></div><div>$ scontrol token lifespan=7200 username=riggi</div><div><br></div><div>How can I configure and test the other auth method (local)? I am using jwt at the moment.</div><div>I would like a user to be always authorized to use the rest API. </div><div><br></div><div>Thanks,</div><div><br></div><div>Simone</div><div><br clear="all"><div><div dir="ltr" class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr">****************************************************************<div>Simone Riggi, PhD<br><div><div>INAF, Osservatorio Astrofisico di Catania<br>Via S. Sofia 78<br>95123, Catania - Italy<br>phone: +39 095 7332 extension 282 (or 310)<br>e-mail: <a href="mailto:simone.riggi@gmail.com" target="_blank">simone.riggi@gmail.com</a>,<div> <a href="mailto:sriggi@oact.inaf.it" target="_blank">sriggi@inaf.it</a>,<br> <a href="mailto:simone.riggi@ct.infn.it" target="_blank">sriggi@pec.it</a><br>skype: simone.riggi<br>****************************************************************<br></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div><br></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Thu, 8 Apr 2021 at 21:15, Simone Riggi <<a href="mailto:simone.riggi@gmail.com">simone.riggi@gmail.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr">Ok,<div>I think I have found the plugins in:</div><div><br></div><div>/root/rpmbuild/BUILD/slurm-20.11.5/src/slurmrestd/plugins/openapi/<br></div><div><br></div><div>I did:</div><div><br></div><div>make</div><div>make install</div><div><br></div><div>and now I have:</div><div><br></div><div>$ slurmrestd -s list</div><div>slurmrestd: Possible OpenAPI plugins:<br>slurmrestd: openapi/v0.0.35<br>slurmrestd: openapi/v0.0.36<br>slurmrestd: openapi/dbv0.0.36<br></div><div><br></div><div>Last one is not working:</div><div><br></div><div>$ slurmrestd -f /etc/slurm/slurmrestd.conf <a href="http://0.0.0.0:6820" target="_blank">0.0.0.0:6820</a> -a jwt -s openapi/dbv0.0.36</div><div>slurmrestd: fatal: slurm_openapi_p_init: slurm not configured with slurmdbd<br></div><div><br></div><div>The second one is apparently running but I do not see any logs:</div><div><br></div><div>$ slurmrestd -f /etc/slurm/slurmrestd.conf <a href="http://0.0.0.0:6820" target="_blank">0.0.0.0:6820</a> -a jwt -s openapi/v0.0.36<br></div><div><br></div><div>Besides I have no idea at the moment of what plugins to choose and what they do. </div><div>How can I test (e.g. an endpoint with curl) if the rest API is working including authentication? </div><div><br></div><div>Cheers,</div><div><br></div><div>Simone</div><div><br></div><div><br clear="all"><div><div dir="ltr"><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr">****************************************************************<div>Simone Riggi, PhD<br><div><div>INAF, Osservatorio Astrofisico di Catania<br>Via S. Sofia 78<br>95123, Catania - Italy<br>phone: +39 095 7332 extension 282 (or 310)<br>e-mail: <a href="mailto:simone.riggi@gmail.com" target="_blank">simone.riggi@gmail.com</a>,<div> <a href="mailto:sriggi@oact.inaf.it" target="_blank">sriggi@inaf.it</a>,<br> <a href="mailto:simone.riggi@ct.infn.it" target="_blank">sriggi@pec.it</a><br>skype: simone.riggi<br>****************************************************************<br></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div><br></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Thu, 8 Apr 2021 at 20:47, Simone Riggi <<a href="mailto:simone.riggi@gmail.com" target="_blank">simone.riggi@gmail.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr">Thanks very much. <div>I found both files under: </div><div><br></div><div>/root/rpmbuild/BUILD/slurm-20.11.5/src/slurmrestd/plugins/auth/jwt/.libs/rest_auth_jwt.so<br></div><div>/root/rpmbuild/BUILD/slurm-20.11.5/src/slurmrestd/plugins/auth/local/.libs/rest_auth_local.so<br></div><div><br></div><div>It seems they weren't installed (any hints why?). By the way I tried to copy both in the /usr/lib64 and now slurmrestd returns:</div><div><br></div><div>$ slurmrestd -a list</div><div>slurmrestd: Possible REST authentication plugins:<br>slurmrestd: rest_auth/local<br>slurmrestd: rest_auth/jwt<br></div><div><br></div><div>However when I try to run it (slurmrestd -a rest_auth/local or slurmrestd -a rest_auth/local) I get: </div><div><br></div><div>slurmrestd: fatal: No OAS plugins to load. Nothing to do<br></div><div><br></div><div>Some other plugins to be built and installed? </div><div><br></div><div>Thanks again,</div><div><br></div><div>Simone</div><div><br></div><div><br clear="all"><div><div dir="ltr"><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr">****************************************************************<div>Simone Riggi, PhD<br><div><div>INAF, Osservatorio Astrofisico di Catania<br>Via S. Sofia 78<br>95123, Catania - Italy<br>phone: +39 095 7332 extension 282 (or 310)<br>e-mail: <a href="mailto:simone.riggi@gmail.com" target="_blank">simone.riggi@gmail.com</a>,<div> <a href="mailto:sriggi@oact.inaf.it" target="_blank">sriggi@inaf.it</a>,<br> <a href="mailto:simone.riggi@ct.infn.it" target="_blank">sriggi@pec.it</a><br>skype: simone.riggi<br>****************************************************************<br></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div><br></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Thu, 8 Apr 2021 at 17:07, Ward Poelmans <<a href="mailto:ward.poelmans@vub.be" target="_blank">ward.poelmans@vub.be</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">Hi Simone,<br>
<br>
On 8/04/2021 15:53, Simone Riggi wrote:<br>
<br>
> - I see effectively that --with jwt is not listed. I wonder how to build<br>
> (using rpmbuild) slurm auth plugins? <br>
> In general I didn't understand from the doc what plugins slurmrestd<br>
> expects by default and where it searches it. From -a option it seems it<br>
> searches libraries inside a directory rest_auth/[PLUGIN_LIB_NAME]. But<br>
> it seems these plugins are not built by rpmbuild or are not installed or<br>
> are installed in a non-standard directory. <br>
<br>
I see 'slurmrestd -a list' do stat on all libraries under<br>
/usr/lib64/slurm and it opens two files:<br>
/usr/lib64/slurm/rest_auth_local.so<br>
/usr/lib64/slurm/rest_auth_jwt.so<br>
<br>
Both of these come from the slurm RPM in my case<br>
(slurm-20.11.5-1.el7.x86_64)<br>
<br>
Ward<br>
<br>
</blockquote></div>
</blockquote></div>
</blockquote></div>