On 4/8/26 8:44 pm, Ratnasamy, Fritz via slurm-users wrote:

 We have blocked ssh to nodes where users do not have a running job. However, when there is a running job, a user can ssh to that node and use more than the slurm resources allocated on that node. Am I missing something?

Are you using pam_slurm_adopt? Is your Slurm configured to use cgroups? [...]

Additionally, if I end my interactive session, the ssh connection still lives which I believe should not happen.

We don't see this problem with pam_slurm_adopt, the ssh session is killed when the job ends. All the best, Chris -- Chris Samuel : http://www.csamuel.org/ : Philadelphia, PA, USA

Hi Fritz, This Wiki page gives a discussion of how to configure pam_slurm_adopt correctly: https://wiki.fysik.dtu.dk/Niflheim_system/Slurm_configuration/#pam-module-re... IHTH, Ole On 4/9/26 05:44, Ratnasamy, Fritz via slurm-users wrote:

Hi,

 We have blocked ssh to nodes where users do not have a running job. However, when there is a running job, a user can ssh to that node and use more than the slurm resources allocated on that node. Am I missing something? I usually request an interactive session of 2GB. I then open another terminal and ssh to the node where the interactive session runs. I allocated a 4GB R variable on the node where I just ssh but this does not error out. Additionally, if I end my interactive session, the ssh connection still lives which I believe should not happen.

-- Ole Holm Nielsen PhD, Senior HPC Officer Department of Physics, Technical University of Denmark