Platform LSF Reference Version 6.2

lsf.conf
Platform LSF Reference
537
LSF_AUTH
Syntax
LSF_AUTH=eauth
| ident
Description
Optional. Determines the type of authentication used by LSF.
External user authentication is configured automatically during installation
(LSF_AUTH=eauth). If LSF_AUTH is not defined, privileged ports (setuid)
authentication is used. This is the mechanism most UNIX remote utilities use.
External authentication is the only way to provide security for clusters that contain
Windows hosts.
If this parameter is changed, you must shut down and restart all LSF daemons by
running
lsf_daemons start on each LSF server host so that all daemons use the
new authentication method.
When LSF uses privileged ports for user authentication, LSF commands must be
installed as setuid programs owned by root to operate correctly. If the commands are
installed in an NFS-mounted shared file system, the file system must be mounted with
setuid execution allowed (that is, without the
nosuid option). See the man page for the
mount command for more details.
Windows does not have the concept of setuid binaries and does not restrict access to
privileged ports, so the undefined method does not provide any security on Windows.
Valid values ◆ eauth
For site-specific external authentication.
◆ ident
For authentication using the RFC 931/1413/1414 protocol to verify the identity of
the remote client.
If LSF_AUTH is defined as
ident, RES uses the RFC 1413 identification protocol
to verify the identity of the remote user. RES is also compatible with the older RFC
931 authentication protocol. The name,
ident, must be registered in the system
services database.
setuid is not a valid value for LSF_AUTH. For privileged ports authentication,
LSF_AUTH must not be defined at all in lsf.conf.
Default
eauth
(configured automatically during installation)
LSF_AUTH_DAEMONS
Syntax
LSF_AUTH_DAEMONS=
any_value
Description
Enables daemon authentication, as long as LSF_AUTH in lsf.conf is set to eauth.
Daemons will call
eauth to authenticate each other.
Default
Undefined
LSF_BINDIR
Syntax
LSF_BINDIR=
dir
Description
Directory in which all LSF user commands are installed.