On 6/11/25 06:46, Ratnasamy, Fritz via slurm-users wrote:
We wanted to block users from ssh to a node where there are no jobs
running however it looks like users are able to do so. We have installed
the slurm_pam_adopt_module and set up the slurm.conf accordingly (the same
way we did on our first cluster where the pam module denies ssh access
correctly).
We have PrologFlags=contain in slurm.conf and inside /etc/pam.d/sshd, we
set the last row to :
account sufficient pam_slurm_adopt.so action_no_jobs=deny
action_unknown=newest action_adopt_failure=deny action_generic_failure=deny
Are we missing anything?
Perhaps you can check the description in this Wiki page:
https://wiki.fysik.dtu.dk/Niflheim_system/Slurm_configuration/#pam-module-restrictions
IHTH, Ole
--
slurm-users mailing list -- slurm-users@lists.schedmd.com
To unsubscribe send an email to slurm-users-le...@lists.schedmd.com
