<div dir="ltr"><div>I hope UsePAM won't get deprecated. I can understand the dangers, and indeed to use it for limits seems weird (nowadays), but it's a nice hook to have and we use it for other purposes: pam_setquota for /tmp quota per user; Setting the per user /run/user/ directory (usually systemd sets this up, but systemd doesn't play nicely with slurm); Fixing some cgroup mess we have in our system; And calling pam_loginuid.</div><div><br></div><div>For a different solution - maybe calling keyctl in a TaskProlog can solve this issue.</div><div><br></div><div><br></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Thu, 25 Aug 2022 at 12:37, Ole Holm Nielsen <<a href="mailto:Ole.H.Nielsen@fysik.dtu.dk">Ole.H.Nielsen@fysik.dtu.dk</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">On 8/25/22 11:15, Matthias Leopold wrote:<br>
> Thanks for the hint. I wasn't aware of UsePAM. At first it looks tempting, <br>
> but then I read some bug reports and saw that it's an "alternative way of <br>
> enforcing resource limits" and is considered an "older deprecated <br>
> functionality".<br>
> <br>
> <a href="https://bugs.schedmd.com/show_bug.cgi?id=4098" rel="noreferrer" target="_blank">https://bugs.schedmd.com/show_bug.cgi?id=4098</a><br>
<br>
Warning: Do NOT configure UsePAM=1 in slurm.conf (this advice can be found <br>
on the net). See<br>
<a href="https://wiki.fysik.dtu.dk/niflheim/Slurm_configuration#configure-prologflags" rel="noreferrer" target="_blank">https://wiki.fysik.dtu.dk/niflheim/Slurm_configuration#configure-prologflags</a><br>
<br>
/Ole<br>
<br>
</blockquote></div><br clear="all"><br>-- <br><div dir="ltr" class="gmail_signature"><div dir="ltr">
<div>
<pre style="font-family:monospace"> <span style="color:rgb(133,12,27)">/|</span> |
<span style="color:rgb(133,12,27)">\/</span> | <span style="color:rgb(51,88,104);font-weight:bold">Yair Yarom </span><span style="color:rgb(51,88,104)">| System Group (DevOps)</span>
<span style="color:rgb(92,181,149)">[]</span> | <span style="color:rgb(51,88,104);font-weight:bold">The Rachel and Selim Benin School</span>
<span style="color:rgb(92,181,149)">[]</span> <span style="color:rgb(133,12,27)">/\</span> | <span style="color:rgb(51,88,104);font-weight:bold">of Computer Science and Engineering</span>
<span style="color:rgb(92,181,149)">[]</span><span style="color:rgb(0,161,146)">//</span><span style="color:rgb(133,12,27)">\</span><span style="color:rgb(133,12,27)">\</span><span style="color:rgb(49,154,184)">/</span> | <span style="color:rgb(51,88,104)">The Hebrew University of Jerusalem</span>
<span style="color:rgb(92,181,149)">[</span><span style="color:rgb(1,84,76)">/</span><span style="color:rgb(0,161,146)">/</span> <span style="color:rgb(41,16,22)">\</span><span style="color:rgb(41,16,22)">\</span> | <span style="color:rgb(51,88,104)">T +972-2-5494522 | F +972-2-5494522</span>
<span style="color:rgb(1,84,76)">//</span> <span style="color:rgb(21,122,134)">\</span> | <span style="color:rgb(51,88,104)"><a href="mailto:irush@cs.huji.ac.il" target="_blank">irush@cs.huji.ac.il</a></span>
<span style="color:rgb(127,130,103)">/</span><span style="color:rgb(1,84,76)">/</span> |
</pre>
</div>
</div></div>