Bug 4461 - Configuring GRAM RM interface to use SSH or RSH
: Configuring GRAM RM interface to use SSH or RSH
Status: NEW
: Documentation
Execution Management
: 4.0
: Macintosh All
: P3 normal
: ---
Assigned To:
:
:
:
:
  Show dependency treegraph
 
Reported: 2006-05-31 10:38 by
Modified: 2007-09-19 11:38 (History)


Attachments


Note

You need to log in before you can comment on or make changes to this bug.


Description From 2006-05-31 10:38:08
This would be good documentation to have for 4.0.  Describe how RSH or SSH is
used by gram and give some steps/examples of how SSH can be configured and
tested.  Then we can simply reply to this type of question with a link to our
documentation.

-Stu

Peter G Lane wrote:
Are your nodes able to ssh to each other without passwords? If not, try
changing the pbs.pm adapter module to use rsh instead (assuming you have
that enabled). If you don't want to use rsh, you'll have to configure
ssh to allow passwordless connections between cluster nodes. 
Does this mean that every "grid" user  should configure his ssh to allow
passwordless connection?
Is there another way to do this for all user as admin?

Yes, and that's actually what I meant. You have to enable host-based
authentication. Here are the steps I've used to enable this on my
machines. Hopefully that will work for you too.

1) Set "EnableSSHKeysign yes" in /etc/ssh/ssh_config.
2) Set "HostbasedAuthentication yes" in ~/.ssh/config.
3) Make sure all client hosts are properly listed in ~/.ssh/known_hosts.
4) Add IPs of allowed clients in ~/.shosts.
5) Set "HostbasedAuthentication yes" in /etc/ssh/sshd_config.
6) Set "IgnoreRhosts no" in /etc/ssh/sshd_config.

Some of these steps are for enabling the outbound connections and some
are for the inbound connections, so apply this to all machines involved.

Peter
------- Comment #1 From 2007-09-19 11:38:00 -------
Reassigning to current GRAM developer to close/fix as appropriate.