<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
font-size:11.0pt;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-GB" link="#0563C1" vlink="#954F72" style="word-wrap:break-word">
<div class="WordSection1">
<p class="MsoNormal">Hello,<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">We’re facing a really weird issue that unfortunately we are completely stuck on. It appears that when users are running a job through SLURM they don’t have the systems local groups applied to their user. They DO have the local groups if
I ‘su’ to the user on the compute node. They also DO have the local groups if I do `id user1` when logged in as that user – but as far as the system is concerned they don’t have these groups for reading/writing files etc.
<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I have read through the thread here: <a href="https://groups.google.com/g/slurm-users/c/r4DyJqgduAc">
<span style="color:windowtext">https://groups.google.com/g/slurm-users/c/r4DyJqgduAc</span></a> which is exactly the same issue as mine but I can’t see that it was resolved unfortunately. If anyone has any ideas of what I could try (I’ve tried initgroups as
shown here as well with no luck: <a href="https://groups.google.com/g/slurm-users/c/ZTyIO_lYxac/m/4PAd_ykTAgAJ">
https://groups.google.com/g/slurm-users/c/ZTyIO_lYxac/m/4PAd_ykTAgAJ</a>) that would be very much appreciated please!<o:p></o:p></p>
<p class="MsoNormal"><br>
The groups that _<i>are</i>_ shown are from Active Directory, through SSSD. Below I show some sample output that may assist with debugging and help explain my issue,<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">[user1@ui-host~]$ salloc<o:p></o:p></p>
<p class="MsoNormal">salloc: Granted job allocation 530<o:p></o:p></p>
<p class="MsoNormal">bash-4.2$ id<o:p></o:p></p>
<p class="MsoNormal">uid=1003353(user1) gid=1003353 groups=1003353,1851018(SCARFFILEASR92),1851500(adhoc_storage),1851501(analysis_computers),1851502(fileserver),1851504(node_provisioning)<o:p></o:p></p>
<p class="MsoNormal">bash-4.2$ hostname<o:p></o:p></p>
<p class="MsoNormal">octocn01.nubes.stfc.ac.uk<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Interestingly, if I do `id user1` here then I DO get the output below. !?<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">[root@octocn01 ~]# su user1<o:p></o:p></p>
<p class="MsoNormal">bash-4.2$ id<o:p></o:p></p>
<p class="MsoNormal">uid=1003353(user1) gid=1003353 groups=1003353,1001(octopus_scarf_rwR92),9999(will_test),1851018(SCARFFILEASR92),1851500(adhoc_storage),1851501(analysis_computers),1851502(fileserver),1851504(node_provisioning)<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">cat /etc/group on octocn01<o:p></o:p></p>
<p class="MsoNormal">octopus_scarf_rwR92:x:1001:user1<o:p></o:p></p>
<p class="MsoNormal">will_test:x:9999:user1<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Thank you very much,<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Will Furnell.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<p><span style="font-size: 6pt;">This email and any attachments are intended solely for the use of the named recipients. If you are not the intended recipient you must not use, disclose, copy or distribute this email or any of its attachments and should notify the sender immediately and delete this email from your system. UK Research and Innovation (UKRI) has taken every reasonable precaution to minimise risk of this email or any attachments containing viruses or malware but the recipient should carry out its own virus and malware checks before opening the attachments. UKRI does not accept any liability for any losses or damages which the recipient may sustain due to presence of any viruses. </span></p></body>
</html>