Ticket 16897 - scontrol token lifespan max fails softly
Summary: scontrol token lifespan max fails softly
Status: RESOLVED DUPLICATE of ticket 13107
Alias: None
Product: Slurm
Classification: Unclassified
Component: slurmrestd (show other tickets)
Version: 21.08.8
Hardware: Linux Linux
: 4 - Minor Issue
Assignee: Nate Rini
QA Contact:
URL:
Depends on:
Blocks:
 
Reported: 2023-06-06 11:05 MDT by sysadmin
Modified: 2023-06-06 11:46 MDT (History)
2 users (show)

See Also:
Site: Allen Institute
Slinky Site: ---
Alineos Sites: ---
Atos/Eviden Sites: ---
Confidential Site: ---
Coreweave sites: ---
Cray Sites: ---
DS9 clusters: ---
Google sites: ---
HPCnow Sites: ---
HPE Sites: ---
IBM Sites: ---
NOAA SIte: ---
NoveTech Sites: ---
Nvidia HWinf-CS Sites: ---
OCF Sites: ---
Recursion Pharma Sites: ---
SFW Sites: ---
SNIC sites: ---
Tzag Elita Sites: ---
Linux Distro: ---
Machine Name:
CLE Version:
Version Fixed:
Target Release: ---
DevPrio: ---
Emory-Cloud Sites: ---


Attachments

Note You need to log in before you can comment on or make changes to this ticket.
Description sysadmin 2023-06-06 11:05:56 MDT
Happy Tuesday,
Heard reports that someone was getting invalid JWT tokens with a long lifespan (slurm passes a token... but it is not honored on further commands).

I believe that max_token_lifespan could help avoid this error state but wondering if there should be more of a visible note to the user that the lifespan is too long. Unfortunately max_token_lifespan is not available in our slurm version...

Testing scenario:
export $(scontrol token lifespan=999999999999999999)
Result: Token generated, error: "slurm_load_partitions: Zero Bytes were transmitted or received" on sinfo

export $(scontrol token lifespan=99999999999999999)
Result: Token generated, valid response from sinfo

I claim that slurm should not be handing out invalid tokens if they are invalid- any chance an error message can prompt users to be less optimistic about the duration of the earth's lifespan? (yes- I acknowledge that this lifespan is ridiculous... but users like hitting the '9' key... a lot...)

I do want to hear back on how things are going at the expiration of the max token... Has Pangaea re-formed?

Many thanks,
-Nathaniel
Comment 3 Nate Rini 2023-06-06 11:46:39 MDT
The ability to set max token lifespan was added by bug#13107 in Slurm-22.05.0:
> https://github.com/SchedMD/slurm/commit/85516610c0e74887b77a03a97146363921856995

Please upgrade to either of the currently supported releases to use this functionality:
> Slurm-22.05
> Slurm-23.02

Closing out this ticket as duplicate. Please respond if there are any more related questions or issues.

*** This ticket has been marked as a duplicate of ticket 13107 ***