[slurm-users] slurmrestd configuration

[Simone Riggi]

Hi again,
I think I managed to make it working with:

$ slurmrestd -f /etc/slurm/slurmrestd.conf -a rest_auth/jwt -s
openapi/v0.0.36 -vvv 0.0.0.0:6820

Sample request:
$ curl -H "X-SLURM-USER-NAME:riggi" -H "X-SLURM-USER-TOKEN:${SLURM_JWT}"
http://localhost:6820/slurm/v0.0.36/ping

{
   "meta": {
     "plugin": {
       "type": "openapi\/v0.0.36",
       "name": "REST v0.0.36"
     },
     "Slurm": {
       "version": {
         "major": 20,
         "micro": 5,
         "minor": 11
       },
       "release": "20.11.5"
     }
   },
   "errors": [
   ],
   "pings": [
     {
       "hostname": "XXXX",
       "ping": "UP",
       "status": 0,
       "mode": "primary"
     }
   ]

where SLURM_JWT was generated with:

$ scontrol token lifespan=7200 username=riggi

How can I configure and test the other auth method (local)? I am using jwt
at the moment.
I would like a user to be always authorized to use the rest API.

Thanks,

Simone

****************************************************************
Simone Riggi, PhD
INAF, Osservatorio Astrofisico di Catania
Via S. Sofia 78
95123, Catania - Italy
phone:  +39 095 7332 extension 282 (or 310)
e-mail: simone.riggi at gmail.com,
            sriggi at inaf.it <sriggi at oact.inaf.it>,
            sriggi at pec.it <simone.riggi at ct.infn.it>
skype: simone.riggi
****************************************************************


On Thu, 8 Apr 2021 at 21:15, Simone Riggi <simone.riggi at gmail.com> wrote:

> Ok,
> I think I have found the plugins in:
>
> /root/rpmbuild/BUILD/slurm-20.11.5/src/slurmrestd/plugins/openapi/
>
> I did:
>
> make
> make install
>
> and now I have:
>
> $ slurmrestd -s list
> slurmrestd: Possible OpenAPI plugins:
> slurmrestd: openapi/v0.0.35
> slurmrestd: openapi/v0.0.36
> slurmrestd: openapi/dbv0.0.36
>
> Last one is not working:
>
> $ slurmrestd -f /etc/slurm/slurmrestd.conf 0.0.0.0:6820 -a jwt -s
> openapi/dbv0.0.36
> slurmrestd: fatal: slurm_openapi_p_init: slurm not configured with slurmdbd
>
> The second one is apparently running but I do not see any logs:
>
> $ slurmrestd -f /etc/slurm/slurmrestd.conf 0.0.0.0:6820 -a jwt -s
> openapi/v0.0.36
>
> Besides I have no idea at the moment of what plugins to choose and what
> they do.
> How can I test (e.g. an endpoint with curl) if the rest API is working
> including authentication?
>
> Cheers,
>
> Simone
>
>
> ****************************************************************
> Simone Riggi, PhD
> INAF, Osservatorio Astrofisico di Catania
> Via S. Sofia 78
> 95123, Catania - Italy
> phone:  +39 095 7332 extension 282 (or 310)
> e-mail: simone.riggi at gmail.com,
>             sriggi at inaf.it <sriggi at oact.inaf.it>,
>             sriggi at pec.it <simone.riggi at ct.infn.it>
> skype: simone.riggi
> ****************************************************************
>
>
> On Thu, 8 Apr 2021 at 20:47, Simone Riggi <simone.riggi at gmail.com> wrote:
>
>> Thanks very much.
>> I found both files under:
>>
>>
>> /root/rpmbuild/BUILD/slurm-20.11.5/src/slurmrestd/plugins/auth/jwt/.libs/rest_auth_jwt.so
>>
>> /root/rpmbuild/BUILD/slurm-20.11.5/src/slurmrestd/plugins/auth/local/.libs/rest_auth_local.so
>>
>> It seems they weren't installed (any hints why?). By the way I tried to
>> copy both in the /usr/lib64 and now slurmrestd returns:
>>
>> $ slurmrestd -a list
>> slurmrestd: Possible REST authentication plugins:
>> slurmrestd: rest_auth/local
>> slurmrestd: rest_auth/jwt
>>
>> However when I try to run it (slurmrestd -a rest_auth/local or slurmrestd
>> -a rest_auth/local) I get:
>>
>> slurmrestd: fatal: No OAS plugins to load. Nothing to do
>>
>> Some other plugins to be built and installed?
>>
>> Thanks again,
>>
>> Simone
>>
>>
>> ****************************************************************
>> Simone Riggi, PhD
>> INAF, Osservatorio Astrofisico di Catania
>> Via S. Sofia 78
>> 95123, Catania - Italy
>> phone:  +39 095 7332 extension 282 (or 310)
>> e-mail: simone.riggi at gmail.com,
>>             sriggi at inaf.it <sriggi at oact.inaf.it>,
>>             sriggi at pec.it <simone.riggi at ct.infn.it>
>> skype: simone.riggi
>> ****************************************************************
>>
>>
>> On Thu, 8 Apr 2021 at 17:07, Ward Poelmans <ward.poelmans at vub.be> wrote:
>>
>>> Hi Simone,
>>>
>>> On 8/04/2021 15:53, Simone Riggi wrote:
>>>
>>> > - I see effectively that --with jwt is not listed. I wonder how to
>>> build
>>> > (using rpmbuild) slurm auth plugins?
>>> >   In general I didn't understand from the doc what plugins slurmrestd
>>> > expects by default and where it searches it. From -a option it seems it
>>> > searches libraries inside a directory rest_auth/[PLUGIN_LIB_NAME]. But
>>> > it seems these plugins are not built by rpmbuild or are not installed
>>> or
>>> > are installed in a non-standard directory.
>>>
>>> I see 'slurmrestd -a list' do stat on all libraries under
>>> /usr/lib64/slurm and it opens two files:
>>> /usr/lib64/slurm/rest_auth_local.so
>>> /usr/lib64/slurm/rest_auth_jwt.so
>>>
>>> Both of these come from the slurm RPM in my case
>>> (slurm-20.11.5-1.el7.x86_64)
>>>
>>> Ward
>>>
>>>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.schedmd.com/pipermail/slurm-users/attachments/20210408/2d367d10/attachment-0001.htm>