Hi Sched, We are looking into using kerberos authentication for users launching Slurm jobs. Slurm documentation https://slurm.schedmd.com/download.html lists AUKS as a mechanism for the application to manage Kerberos credentials to non-interactive applications, like Slurm batch jobs. We wanted to confirm if AUKS is the recommended solution for using Kerberos with Slurm or if there are other options.
Apologies if this is a duplicate request - please CC acontois@penguincomputing.com, kwhetham@penguincomputing.com if so. Thanks
I took a look internally and AUKS is the only thing that really interacts with kerberos that we are aware of. AUKS is an external tool that has a plugin for Slurm, so its not something we generally test though. What is your use case for kerberos authentication along with Slurm jobs? Its not something we've found a lot of sites asking about, so I'm curious about the use case you have for it. Thanks! --Tim
We are exploring ways to use kerberized NFS shares with Slurm and hence the need for AUKS or something like it. If you have some other suggestion that could work better than AUKS for using kerberized NFS shares with Slurm, say with SchedMD support even, please let us know. We are open to a follow up call to discuss. Thank you for your time.
Hi Tim, Any update here?
It seems that the AUKS plugin is the only one we are aware of that will help deal with kerberos directly, and I've been unable to come up with a clever idea to make it work without something like it. At this point, if the AUKS solution doesn't work, I think this would be a feature request and you would want to chat with Tim Wickberg et al. about the possibility of adding support directly. Thanks! --Tim
