Platform LSF Administration Guide Version 6.2

Chapter 40
Authentication
Administering Platform LSF
573
LSF in Multiple Authentication Environments
In some environments, such as a UNIX system or a Windows domain, you can have one
user account that works on all hosts. However, when you build an LSF cluster in a
heterogeneous environment, you can have a different user account on each system, and
each system does its own password authentication.
This means that LSF cannot always use the submission account to run a job, because the
job will fail if the execution host cannot validate the password of the account you used
on the submission host.
In an environment of multiple authentication systems, user mapping determines which
account LSF uses when it runs your job. User mapping can be defined all of the
following ways:
◆ For clusters containing Windows hosts, LSF default user mapping
(LSF_USER_DOMAIN in
lsf.conf) might be enabled. This should be
configured only once, when you install and set up LSF.
◆ User mapping at the user level (lsb.hosts) is configurable by the user.
◆ User mapping at the system level (lsb.users) is configurable by the
administrator.