Ticket 22353 - PrivateData
Summary: PrivateData
Status: OPEN
Alias: None
Product: Slurm
Classification: Unclassified
Component: Accounting (show other tickets)
Version: 24.05.5
Hardware: Linux Linux
: 3 - Medium Impact
Assignee: Ricard Zarco Badia
QA Contact:
URL:
Depends on:
Blocks:
 
Reported: 2025-03-13 20:40 MDT by kmorimoto
Modified: 2025-03-31 08:06 MDT (History)
1 user (show)

See Also:
Site: Pacificteck
Alineos Sites: ---
Atos/Eviden Sites: ---
Confidential Site: ---
Coreweave sites: ---
Cray Sites: ---
DS9 clusters: ---
HPCnow Sites: ---
HPE Sites: ---
IBM Sites: ---
NOAA SIte: ---
NoveTech Sites: ---
Nvidia HWinf-CS Sites: ---
OCF Sites: ---
Recursion Pharma Sites: ---
SFW Sites: ---
SNIC sites: ---
Tzag Elita Sites: ---
Linux Distro: ---
Machine Name:
CLE Version:
Version Fixed:
Target Release: ---
DevPrio: ---
Emory-Cloud Sites: ---


Attachments

Note You need to log in before you can comment on or make changes to this ticket.
Description kmorimoto 2025-03-13 20:40:40 MDT
Hi, SchedMD,

We are trying to hide any user statistic information for each user with following setting.


# grep ^Private /etc/slurm/slurmdbd.conf
PrivateData=accounts,events,jobs,usage


It seems to work for sacct command.


[test-user@login2 ~]$ SACCT_FORMAT="jobid,user%20" sacct -X --starttime=2025-01-01 --allusers | awk '{print$2}' | sort -u
User
test-user


However, it does not work for sreport command. The following command shows all information along to all users.

[test-user@login2 ~]$ sreport cluster AccountUtilizationByUser start=2025-01-01

Is it available to restrict to see the other's information for sreport?

Best regards,
Kenji
Comment 1 Ricard Zarco Badia 2025-03-14 09:00:30 MDT
Hello Kenji,

I have tried your settings and produced the report with two different users (one normal and another with privileges, from different unrelated slurm accounts). I am not able to produce the behavior you are describing.

See my testing:

>> $ sacctmgr show user
>>       User   Def Acct     Admin 
>> ---------- ---------- --------- 
>>       root       root Administ+ 
>>     rzarco     rzarco      None 
>> rzarco_te+ rzarco_te+      None 

Report from privileged user (rzarco)
>> $ sreport cluster AccountUtilizationByUser start=2025-01-01 end=now
>> --------------------------------------------------------------------------------
>> Cluster/Account/User Utilization 2025-01-01T00:00:00 - 2025-03-14T15:59:59 (6278400 secs)
>> Usage reported in CPU Minutes
>> --------------------------------------------------------------------------------
>>   Cluster         Account     Login     Proper Name     Used   Energy 
>> --------- --------------- --------- --------------- -------- -------- 
>>   cluster            root                               4801        0 
>>   cluster          rzarco                               1921        0 
>>   cluster          rzarco    rzarco          Ricard     1921        0 
>>   cluster     rzarco_test                               2880        0 
>>   cluster     rzarco_test rzarco_t+  Ricard Zarco 2     2880        0 


Same report from unprivileged user (rzarco_test)
>> $ sreport cluster AccountUtilizationByUser start=2025-01-01 end=now
>> --------------------------------------------------------------------------------
>> Cluster/Account/User Utilization 2025-01-01T00:00:00 - 2025-03-14T15:59:59 (6278400 secs)
>> Usage reported in CPU Minutes
>> --------------------------------------------------------------------------------
>>   Cluster         Account     Login     Proper Name     Used   Energy
>> --------- --------------- --------- --------------- -------- --------
>>   cluster     rzarco_test rzarco_t+  Ricard Zarco 2     2880        0

Does your test user have privileges of any kind? Could I get a real example? We can privatize the ticket if that is a concern.

Best regards, Ricard.
Comment 2 kmorimoto 2025-03-14 20:46:20 MDT
Hi, Ricard,

Thank you for your effort.

But both your users' privileges seem to be set to None.

>> $ sacctmgr show user
>>       User   Def Acct     Admin 
>> ---------- ---------- --------- 
>>       root       root Administ+ 
>>     rzarco     rzarco      None 
>> rzarco_te+ rzarco_te+      None 

What do you mean 'privileged'?

Regards,
Kenji
Comment 3 Ricard Zarco Badia 2025-03-17 02:22:48 MDT
Hello Kenji,

That output was just meant to illustrate that both users are from different accounts and are not related. "rzarco" is the SlurmUser for this test cluster.

By privileged I mean having the user with an AdminLevel of Operator/Admin/Coordinator. I am assuming that you are not using the cluster's SlurmUser for your tests.

Best regards, Ricard.
Comment 4 Ricard Zarco Badia 2025-03-21 08:44:58 MDT
Hello Kenji,

Are there any updates with this? Did you manage to get the desired behavior or do you still need further diagnostics for this issue?

Best regards, Ricard.
Comment 5 kmorimoto 2025-03-24 20:31:48 MDT
Hi,

After they add the "user" to the PrivateData, it works as expected.
Is it required?
Comment 6 Ricard Zarco Badia 2025-03-25 05:13:31 MDT
Hello Kenji,

I did not need it for the example I provided. Do you have a concrete example showing the relationship between the users and the differences (if any) between their sreport outputs?

Best regards, Ricard.
Comment 7 Ricard Zarco Badia 2025-03-25 05:26:11 MDT
Hello Kenji,

Ignore my previous message, I have reproduced your original case just now. I had my slurm.conf PrivateData adapted but not its slurmdbd.conf counterpart. I will investigate this.

Best regards, Ricard.
Comment 13 Ricard Zarco Badia 2025-03-31 08:06:46 MDT
Hello Kenji,

I have proposed a fix for this to the review team, I will let you know the outcome as soon as the QA process finishes.

Best regards, Ricard.