<div dir="ltr">Thanks! I have given that a try and unfortunately it still has not resolved the issue. Regular SSH login = all groups get populated, interactive slurm bash session = only IPA groups get populated.<div><br></div><div>Any other ideas? I think that was a good shot to try for sure.</div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Mon, May 10, 2021 at 3:25 PM Brian Andrus <<a href="mailto:toomuchit@gmail.com">toomuchit@gmail.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
  
    
  
  <div>
    <p>Ah.</p>
    <p>You should put files first. Otherwise, if it finds an entry in
      SSS, that takes precedence and the local groups/users will not be
      seen.</p>
    <p>Brian Andrus</p>
    <p><br>
    </p>
    <div>On 5/10/2021 1:09 PM, Russell Jones
      wrote:<br>
    </div>
    <blockquote type="cite">
      
      <div dir="ltr">Thanks!<br>
        <br>
        No, we are not. The compute nodes are also properly configured
        in /etc/nsswitch.conf with "sss" first, and then files for
        passwd, group. (It's not pure LDAP. We're using FreeIPA)</div>
      <br>
      <div class="gmail_quote">
        <div dir="ltr" class="gmail_attr">On Mon, May 10, 2021 at 11:28
          AM Brian Andrus <<a href="mailto:toomuchit@gmail.com" target="_blank">toomuchit@gmail.com</a>> wrote:<br>
        </div>
        <blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
          <div>
            <p>Quick question:</p>
            <p>Are you using nss_slurm? <br>
            </p>
            <dl>
              <dt><b style="box-sizing:border-box;margin:0px;padding:0px;border:0px;font-style:inherit;font-variant:inherit;font-weight:bold;font-stretch:inherit;font-size:inherit;line-height:inherit;font-family:inherit;vertical-align:baseline">enable_nss_slurm</b></dt>
              <dd>Permits
                passwd and group resolution for a job to be serviced by
                slurmstepd rather than requiring a lookup from a network
                based service. See<span> </span><a href="https://slurm.schedmd.com/nss_slurm.html" style="box-sizing:border-box;margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline;outline:none;color:rgb(21,120,183)" target="_blank">https://slurm.schedmd.com/nss_slurm.html</a><span> </span>for
                more information.</dd>
            </dl>
            <p>That could explain it.</p>
            <p>Brian Andrus<br>
            </p>
            <div>On 5/10/2021 7:57 AM, Russell Jones wrote:<br>
            </div>
            <blockquote type="cite">
              <div dir="ltr">Hello,
                <div><br>
                </div>
                <div>We have a few users we are needing to add to the
                  local "video" group of a specific set of compute
                  nodes. When submitting a job, slurm appears to not be
                  populating that local group to their list of groups.
                  For example, an interactive job (srun --pty bash -l)
                  is resulting in a bash shell on that node with all of
                  their LDAP groups populated, but not the groups from
                  the local /etc/group file on the node. If they SSH to
                  the node outside of Slurm, both the local and LDAP
                  groups get populated properly.</div>
                <div><br>
                </div>
                <div>How do I resolve this issue and get Slurm to
                  populate the local groups as well?</div>
                <div><br>
                </div>
                <div>Thanks!</div>
              </div>
            </blockquote>
          </div>
        </blockquote>
      </div>
    </blockquote>
  </div>

</blockquote></div>