PBS with AFS

Steven Timm timm at fnal.gov
Thu Nov 16 09:34:06 EST 2000


This sounds like very interesting software.  Are there any plans
to make it work with kerberos 5 tokens?

Steve Timm


------------------------------------------------------------------
Steven C. Timm (630) 840-8525  timm at fnal.gov  http://home.fnal.gov/~timm/
Fermilab Computing Division/Operating Systems Support
Scientific Computing Support Group--Computing Farms Operations

On Wed, 15 Nov 2000, Jeff Squyres wrote:

> The Laboratory for Scientific Computing at the University of Notre Dame is
> pleased to release version 1.1 of the Password Storage and Retrieval (PSR)
> package.  PSR allows PBS jobs to run with AFS authentication, and will
> guarantee that the AFS authentication remains valid for the entire
> duration of the PBS job (even if the job lasts longer than the default
> life of the user's AFS token).
> 
> Version 1.1 of PSR can be downloaded from its official home page:
> 
> 	http://www.mpi.nd.edu/lam/software/psr/
> 
> PSR uses strong public-key encryption to store and retrieve user's
> passwords.  When a PBS job is submitted, the user's password is decrypted
> and used to obtain an AFS token.  A "shepherd" process is forked into the
> background and will wake up one hour before it expires in order to renew
> the token.  This process repeats until the job has completed.
> 
> PSR includes a short patch to enable it to automatically work with OpenPBS
> versions 2.3 and 2.3.2.  However, PSR's store/retrieve scheme is general
> enough such that it can be extended to just about any automated job system
> where passwords are required for authentication/authorization.
> 
> See the web site for full documentation of the PSR package, as well as a
> longer explanation of how the package works.
> 
> Since one of the primary purposes of PSR is to run with AFS
> authentication, its programs must be compiled against AFS development
> libraries.  Either the Transarc proprietary AFS development libraries or
> the krb4 freeware AFS libraries may be used.  Additionally, the RSAREF
> library is used for encryption/decryption of user passwords.  
> References/links to obtain these libraries are available on the web site.
> 
> This is the first official release of the PSR package.  Questions,
> comments, and suggestions are welcome.  Please submit them to the LAM/MPI
> user's mailing list (we monitor the PBS list as well, but not nearly as
> much as our own list :-).  See:
> 
> 	http://www.mpi.nd.edu/lam/contact.php3#lam-mailing-list
> 
> ---
> 
> PSR was originally written by Dale Southard of the University of Notre
> Dame in order to be able to run PBS jobs with AFS authentication.  Dale
> has since left the University, and he bequeathed the code base to the
> LAM/MPI developers.  We have updated the code for OpenPBS, fixed a few
> bugs, cleaned up the build/install process, and renamed the package to be
> "Password Storage and Retrieval".
> 
> {+} Jeff Squyres
> {+} squyres at cse.nd.edu
> {+} Perpetual Obsessive Notre Dame Student Craving Utter Madness
> {+} "I came to ND for 4 years and ended up staying for a decade"
> 
> 
> 
> _______________________________________________
> Beowulf mailing list
> Beowulf at beowulf.org
> http://www.beowulf.org/mailman/listinfo/beowulf
> 
> 


_______________________________________________
Beowulf mailing list
Beowulf at beowulf.org
http://www.beowulf.org/mailman/listinfo/beowulf



More information about the Beowulf mailing list