[slurm-users] pam_slurm_adopt not working for all users

[Marcus Wagner]

Hi Loris,

pam slurm adopt just allows or disallows a user to login to a node, 
depending if a job runs or not.
Yet you have to do something, that the user can login passwordless, e.g. 
through host-based authentication.

Best
Marcus

Am 21.05.2021 um 14:53 schrieb Loris Bennett:
> Hi,
>
> We have set up pam_slurm_adopt using the official Slurm documentation
> and Ole's information on the subject.  It works for a user who has SSH
> keys set up, albeit the passphrase is needed:
>
>    $ salloc --partition=gpu --gres=gpu:1 --qos=hiprio --ntasks=1 --time=00:30:00 --mem=100
>    salloc: Granted job allocation 7202461
>    salloc: Waiting for resource configuration
>    salloc: Nodes g003 are ready for job
>
>    $ ssh g003
>    Warning: Permanently added 'g003' (ECDSA) to the list of known hosts.
>    Enter passphrase for key '/home/loris/.ssh/id_rsa':
>    Last login: Wed May  5 08:50:00 2021 from login.curta.zedat.fu-berlin.de
>
>    $ ssh g004
>    Warning: Permanently added 'g004' (ECDSA) to the list of known hosts.
>    Enter passphrase for key '/home/loris/.ssh/id_rsa':
>    Access denied: user loris (uid=182317) has no active jobs on this node.
>    Access denied by pam_slurm_adopt: you have no active jobs on this node
>    Authentication failed.
>
> If SSH keys are not set up, then the user is asked for a password:
>
>    $ squeue --me
>                 JOBID PARTITION     NAME     USER ST       TIME  NODES NODELIST(REASON)
>               7201647      main test_job nokeylee  R    3:45:24      1 c005
>               7201646      main test_job nokeylee  R    3:46:09      1 c005
>    $ ssh c005
>    Warning: Permanently added 'c005' (ECDSA) to the list of known hosts.
>    nokeylee at c005's password:
>
> My assumption was that a user should be able to log into a node on which
> that person has a running job without any further ado, i.e. without the
> necessity to set up anything else or to enter any credentials.
>
> Is this assumption correct?
>
> If so, how can I best debug what I have done wrong?
>
> Cheers,
>
> Loris
>