Hi,

The current code of Slurm does not provide with the ability to specify credentials when sending a REST resquest for indexing jobs to the elasticsearch index 'slurm'. 

This morning I've been doing some tests with the X-Pack Security plugin for Elasticsearch, and found two solutions for this problem.

1. Workaround with no change in the code:

Following these guidelines:

https://www.elastic.co/guide/en/x-pack/current/security-getting-started.html

You could setup a role to access a specific index pattern to a specific user. Then following these other guidelines:

https://www.elastic.co/guide/en/x-pack/current/anonymous-access.html

You could enable anonymous access (meaning no authentication token can be extracted from the incoming request) to specific users.

So what I did following these guidelines is to create a role to grant 'all' privileges to index 'slurm' and then enabled anonymous access to SlurmUser to that role. That way REST requests without credential can access the 'slurm' index for that user.

2. Another option is to reclassify this as a Sev-5 enhancement request. Absent some customer willing to sponsor development of such code refactor, or a contributed patch providing this expansion, I cannot say when or if this will be addressed. If Harvard is interested in discussing that further please let me know, and we can talk about that outside Bugzilla.

Regarding the design for that change, most probably it wouldn't be a big thing. Looking at the code I think it would require the addition of a new JobCompParams option to specify the credentials. Then from within the plugin we should check if the credentials are specified and if so, then use the libcurl library to setup authentication options to the REST request. Most probably through these opts:

https://curl.haxx.se/libcurl/c/CURLOPT_USERNAME.html
https://curl.haxx.se/libcurl/c/CURLOPT_PASSWORD.html

Please, let us know whether workaround 1) is enough to satisfy your needs, or if you want to discuss the Sev-5 option further otherwise. Thanks.

Alex,

I configured using method 1 you mentioned
you can resolve this request


Thanks,
Bhanu

(In reply to Research Computing from comment #4)
> Alex,
> 
> I configured using method 1 you mentioned
> you can resolve this request
> 
> 
> Thanks,
> Bhanu

Great, thanks for the feedback.