[Beowulf] Kerberos + HPC

[Prentice Bisbal]

Perry E. Metzger wrote:
> Prentice Bisbal <prentice at ias.edu> writes:
>> John Hearns wrote:
>>> On Fri, 2008-08-01 at 15:37 +1000, Chris Samuel wrote:
>>>
>>>> We'd prefer to steer clear of Kerberos, it introduces
>>>> arbitrary job limitations through ticket lives that
>>>> are not tolerable for HPC work.
>>> Kerberos is heavily used at CERN. They have a solution for that issue -
>>> the job can ask for an extension to the tickets.
>>> Sorry, I don't have a reference handy but its worth documenting this for
>>> the list.
>> If ANYONE has more information on how this is done at CERN, I'd be very
>> interested in hearing about it. I know, I know... GIYF...
> 
> I doubt they're dong anything unusual -- this is a completely normal
> thing any Kerberos setup deals with. You just stash the private key on
> the server, request a long ticket lifetime and refresh reasonably
> tickets frequently.  Standard documentation can tell you how to do
> it -- just read the manuals.
> 
> Perry

I don't believe it. It sounds way to simple!

-- 
Prentice