Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

need a way to lookup local-uri for child instance on a node #6491

Open
grondo opened this issue Dec 7, 2024 · 1 comment
Open

need a way to lookup local-uri for child instance on a node #6491

grondo opened this issue Dec 7, 2024 · 1 comment

Comments

@grondo
Copy link
Contributor

grondo commented Dec 7, 2024

The Flux PAM module needs to take the following steps to allow use of multi-user subinstances by an arbitrary guest:
(step 1 is the part that is implemented now)

  1. Permit access if user has an active job in the root instance on the current node
  2. else If there is an active job for user flux on the current node and this is rank 0 of that job: permit access
  3. else open a handle to the child instance and read configuration, if access.allow-guest-user=false: deny access
  4. else goto 1 using the child instance handle

We can currently only accomplish steps 1,2 here, since the PAM module has no way to discover the local-uri for a subinstance on an arbitrary rank of the job.

I wonder if there's some simple way subinstances with the same userid as their parent can publish their local-uri such that the PAM module can fetch it?

@grondo
Copy link
Contributor Author

grondo commented Dec 7, 2024

else If there is an active job for user flux on the current node and this is rank 0 of that job: permit access

Actually, probably should always check for access.allow-guest-user, but you get the idea (checking for rank 0 is what we can do now)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant