<div dir="ltr">Hi Fritz,<div><br></div><div>Purely theoretical and untested solution, but it may work to "cp /usr/bin/sshd /usr/bin/sshd2" and then use that sshd2 binary to run an sshd service on a different port, with a config limiting it to sftp only and a `/etc/pam.d/sshd2` file that does not enforce pam_slurm_adopt. Downside is that users would have to know to use the different port.</div><div><br></div><div>If this is to allow access to the local scratch disk on the node, we've solved this pretty successfully by letting every compute node be an NFS server and having an automount rule that allows mounting that from any other node at a path like `/nodes/${NODENAME}`. Doesn't require a login session on the nodes, permissions and ACLs are honored and it's convenient for things like collecting scattered results, pre-staging reference data, etc.</div><div><br></div><div>griznog</div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Mon, Jul 11, 2022 at 11:54 PM Ratnasamy, Fritz <<a href="mailto:fritz.ratnasamy@chicagobooth.edu">fritz.ratnasamy@chicagobooth.edu</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr">Hello, <br><br> Currently, our cluster does not allow ssh to compute nodes for users unless they have <div>a running job on that compute node. I believe a system admin has set up a PAM module</div><div>that does the block. Whn trying ssh, this is the message returned:<br>Access denied by pam_slurm_adopt: you have no active jobs on this node<br>Connection closed by 10.135.242.188 port 22<br></div><div><br></div><div>However, we would like to allow sftp on a specific compute node for specific users. <br>Any idea on how to do that? <br>Thanks, </div><div><br></div><div><br clear="all"><div><div dir="ltr"><div dir="ltr"><p class="MsoNormal" style="background-image:initial;background-position:initial;background-repeat:initial"><b><span style="font-size:10.5pt;font-family:Arial,sans-serif;color:rgb(156,29,33)">Fritz Ratnasamy</span></b><span style="font-size:10.5pt;font-family:"Helvetica Neue";color:rgb(51,51,51)"></span></p>
<p class="MsoNormal" style="background-image:initial;background-position:initial;background-repeat:initial"><span style="font-size:10.5pt;font-family:Arial,sans-serif;color:rgb(156,29,33)">Data Scientist</span><span style="font-size:10.5pt;font-family:"Helvetica Neue";color:rgb(51,51,51)"></span></p>
<p class="MsoNormal" style="background-image:initial;background-position:initial;background-repeat:initial"><span style="font-size:10.5pt;font-family:Arial,sans-serif;color:rgb(156,29,33)">Information Technology</span><span style="font-size:10.5pt;font-family:"Helvetica Neue";color:rgb(51,51,51)"></span></p>
<p class="MsoNormal" style="background-image:initial;background-position:initial;background-repeat:initial"><span style="color:rgb(103,110,115);font-family:Times,serif;font-size:10.5pt">The University of Chicago</span></p><p class="MsoNormal" style="background-image:initial;background-position:initial;background-repeat:initial"><span style="font-size:10.5pt;font-family:"Helvetica Neue";color:rgb(51,51,51)"></span></p>
<p class="MsoNormal" style="background-image:initial;background-position:initial;background-repeat:initial"><span style="font-size:10.5pt;font-family:Times,serif;color:rgb(103,110,115)">Booth School of Business</span><span style="font-size:10.5pt;font-family:"Helvetica Neue";color:rgb(51,51,51)"></span></p>
<p class="MsoNormal" style="background-image:initial;background-position:initial;background-repeat:initial"><span style="font-size:10.5pt;font-family:Times,serif;color:rgb(103,110,115)">5807 S. Woodlawn</span><span style="font-size:10.5pt;font-family:"Helvetica Neue";color:rgb(51,51,51)"></span></p>
<p class="MsoNormal" style="background-image:initial;background-position:initial;background-repeat:initial"><span style="font-size:10.5pt;font-family:Times,serif;color:rgb(103,110,115)">Chicago,</span><span style="font-size:10.5pt;font-family:"Helvetica Neue";color:rgb(51,51,51)"> </span><span style="font-size:10.5pt;font-family:Times,serif;color:rgb(103,110,115)">Illinois</span><span style="font-size:10.5pt;font-family:"Helvetica Neue";color:rgb(51,51,51)"> </span><span style="font-size:10.5pt;font-family:Times,serif;color:rgb(103,110,115)">60637</span></p>
<p class="MsoNormal" style="background-image:initial;background-position:initial;background-repeat:initial"><span style="font-size:10.5pt;font-family:Times,serif;color:rgb(103,110,115)">Phone: +(1) 773-834-4556</span><span style="font-size:10.5pt;font-family:"Helvetica Neue";color:rgb(51,51,51)"></span></p></div></div></div></div></div>
</blockquote></div>