LSF Version 7.3 - Administering Platform LSF

Authorization options
676 Administering Platform LSF
All external executables invoked by the LSF daemons, such as esub, eexec, elim,
eauth, and pre- and post-execution commands, run under the lsfadmin user
account.
Windows
passwords
Windows users must register their Windows user account passwords with LSF by
running the command
lspasswd. If users change their passwords, they must use
this command to update LSF. A Windows job does not run if the password is not
registered in LSF. Passwords must be 31 characters or less.
For Windows password authorization in a non-shared file system environment, you
must define the parameter
LSF_MASTER_LIST in lsf.conf so that jobs run with
correct permissions. If you do not define this parameter, LSF assumes that the
cluster uses a shared file system environment.
LSF authorization
As an LSF administrator, you have the following authorization options:
◆ Enable one or more types of user account mapping
◆ Specify the user account used to run eauth and eexec executables or pre- and
post-execution commands
◆ Control user access to LSF resources and functionality
Enabling user account mapping
You can configure different types of user account mapping so that a job or
command submitted by one user account runs on the remote host under a different
user account.
For a detailed description of the user account mapping features and how to
configure them, see the Platform LSF Configuration Reference.
Type of account
mapping
Description
Between-host Enables job submission and execution within a cluster that has
different user accounts assigned to different hosts. Using this
feature, you can map a local user account to a different user
account on a remote host.
Cross-cluster Enables cross-cluster job submission and execution for a
MultiCluster environment that has different user accounts
assigned to different hosts. Using this feature, you can map user
accounts in a local cluster to user accounts in one or more
remote clusters.
UNIX/Windows Enables cross-platform job submission and execution in a mixed
UNIX/Windows environment. Using this feature, you can map
Windows user accounts, which include a domain name, to UNIX
user accounts, which do not include a domain name, for user
accounts with the same user name on both operating systems.