Trasparent SSO Kerberos with HPC web portal

[Elia Pinto]

Hello

A client of mine asked me how it can be complex if not impossible to find a
WORKING  HPC web Job Scheduler
(http://en.wikipedia.org/wiki/Job_scheduler) that
supports trasparent SSO in a mixed windows / linux env with an AD as domain
dontroller (KERBEROS master KDC ). This web HPC job schedular should be
installed on a Linux OS.

In particular, it is expected that such a web portal HPC should make
possible:


1) authenticate the user to the portal platform  without reproviding
credentials (user, password), in what has already been provided for logging
to the end user PC , based on windows integrated in AD

2) that the Kerberos ticket (which comes to the web portal server after the
HTTP/SPNEGO negotation) should be propagated to the application (that you
can select from the portal) that will be launched on the computational node
by the scheduler

3) the the kerberos ticket will be available on the HPC node. and should be
forwardable to other HPC nodes


Maybe someone here has more experience with something similar. From my
experience on other products this should be definitely possible, but it is
always better to share knowledge on the topic.

Thank you in advance.

Best Regards