[StarCluster] ldap user with starcluster

Wed Jun 1 01:26:58 EDT 2016

Hi,
The mail split the word createusers to 2 words, in the configuration it one word.
I will check the logs – Thanks a lot.
I did not add LDAP yet to the AMI, but I install the LDAP on the master, stop it and restart it with new startcluster  configuration.  LDAP is working. 
In my last try, I work with regular users not LDAP.
Thank you very much for your help,
Shlomit

From:  "MacMullan IV, Hugh" <hughmac at wharton.upenn.edu>
Date:  Tuesday, 31 May 2016 at 4:52 PM
To:  Shlomit Afgin <shlomit.afgin at weizmann.ac.il>
Cc:  starcluster <starcluster at mit.edu>
Subject:  RE: [StarCluster] ldap user with starcluster

Good catch, Jacob!

Shlomit:

Did you set up your AMI to use LDAP? You will have to do this before using StarCluster: the generic StarCluster AMIs will not connect to your LDAP service by default. Just to be clear.

-Hugh

From: starcluster-bounces at mit.edu [mailto:starcluster-bounces at mit.edu] On Behalf Of Jacob Barhak
Sent: Monday, May 30, 2016 8:49 AM
To: Shlomit Afgin <shlomit.afgin at weizmann.ac.il>
Cc: starcluster <starcluster at mit.edu>
Subject: Re: [StarCluster] ldap user with starcluster

So Shlomit,

As for error logs, you should find those under the .starcluster folder in your home directory. 

Yet from what you sent, I suspect that you might have added a space in the plugin name. 

Did you try "plugins = createusers" instead of "plugins = create users"

Hopefully this small correction will fix things. 

        Jacob

On May 29, 2016 8:45 AM, "Shlomit Afgin" <shlomit.afgin at weizmann.ac.il> wrote:

Hi,

I  tried adding regular user (not LDAP).

I follow http://web.mit.edu/Star/cluster/docs/latest/plugins/users.html

I start the cluster after I add to the config file the lines:

plugins = create users

[plugin createusers]

setup_class = starcluster.plugins.users.CreateUsers

usernames = ralph, julia, richard

It create the users on the master and on  node.

First I couldn’t login from master to node with no password and suddenly start working.  

But major problem,  it did not build the /opt/sge6 (which needed for submitting jobs) as it did before adding the above lines.

What can cause the problem? Where can I find error log for tracking the problem? 

Thanks,

Shlomit.

From: Jacob Barhak <jacob.barhak at gmail.com>
Date: Wednesday, 25 May 2016 at 5:23 PM
To: Shlomit Afgin <shlomit.afgin at weizmann.ac.il>
Cc: starcluster <starcluster at mit.edu>
Subject: Re: [StarCluster] ldap user with starcluster

So Shlomit,

It seems like you are trying to do something special. And I cannot help you much.

However, I vaguely recall someone on this list trying to run starcluster with many users. If you have time, you may wish to look at the archives - yet this may be a wild goose chase since I do not recall LDAP being brought up.

If you do solve the problem, please send the solution to the list - so we will all have it.

                 Jacob 

On Wed, May 25, 2016 at 2:16 AM, Shlomit Afgin <shlomit.afgin at weizmann.ac.il> wrote:

Hi,

User sgeadmin define as CLUSTER_USER. With sgeadmin I can login from master to node without password.

Did not use plugins or special AMI.

Shlomit

From: Jacob Barhak <jacob.barhak at gmail.com>
Date: Tuesday, 24 May 2016 at 3:16 PM
To: Shlomit Afgin <shlomit.afgin at weizmann.ac.il>
Cc: starcluster <starcluster at mit.edu>
Subject: Re: [StarCluster] ldap user with starcluster

Hi Shlomit,

When you configured the cluster to start, did you define the user?

Can you just SSH the master without a specific user? 

Some plugins define users for you, did you use one?

Also, did you use a special AMI configured a certain way?

Hopefully with some more information it will be possible to figure out what is going on.

              Jacob

On Sun, May 22, 2016 at 8:35 AM, Shlomit Afgin <shlomit.afgin at weizmann.ac.il> wrote:

Hi,

1.  I successfully login to cluster with the command: 

         starcluster sshmaster -u username physicscluster

    if username  is local user but not with ldap user. 

    I get the error: 

    Permission denied (publickey,gssapi-keyex,gssapi-with-mic).
    How can I login to the cluster with the above command as ldap user?

2. How to allow/configure ldap user to submit/run jobs on the cluster?  any documentation?. 

Thanks.

_______________________________________________
StarCluster mailing list
StarCluster at mit.edu
http://mailman.mit.edu/mailman/listinfo/starcluster

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.mit.edu/pipermail/starcluster/attachments/20160601/968f80c5/attachment-0001.html
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4223 bytes
Desc: not available
Url : http://mailman.mit.edu/pipermail/starcluster/attachments/20160601/968f80c5/attachment-0001.bin