# Configuring Password-Based Authentication for Job Submission in Open OnDemand

**URL:** <https://discourse.openondemand.org/t/configuring-password-based-authentication-for-job-submission-in-open-ondemand/3976>\
**Category:** Get Help\
**Created:** [January 22, 2025, 5:40pm UTC](https://discourse.openondemand.org/t/configuring-password-based-authentication-for-job-submission-in-open-ondemand/3976 "2025-01-22T17:40:01Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![rishabhs002](https://sea1.discourse-cdn.com/flex015/user_avatar/discourse.openondemand.org/rishabhs002/32/2567_2.png) [@rishabhs002](https://discourse.openondemand.org/u/rishabhs002)\
**Post date:** [January 22, 2025, 5:40pm UTC](https://discourse.openondemand.org/t/configuring-password-based-authentication-for-job-submission-in-open-ondemand/3976/1 "2025-01-22T17:40:01Z")

</div>

We would like to configure the Open OnDemand job submission workflow to use password-based authentication instead of public-private key authentication. Currently, the platform seems to default to public-private key-based mechanisms, and there is no prompt for users to provide their passwords during job submission.  
Our desired workflow is as follows:

1. Users submitting jobs through Open OnDemand should be prompted to enter their password.
2. The authentication mechanism should respect the `auth: password` setting in the configuration.
3. Any relevant configuration files or options should ensure password-based authentication is enforced without relying on public-private keys.

Here is my cluster.yml inside cluster.d directory-

```auto
---
v2:
  metadata:
    title: "HPC Cluster"
  login:
    host: "10.20.1.2"
    user: "%{user}"
    default: true
    auth: "password"
    forward_ssh_key: false
  job:
    submit_host: 'localhost'
    adapter: "slurm"
    cluster: "hpc-cluster"
    bin: "/opt/slurm/bin"
    conf: "/opt/slurm/etc/slurm.conf"
    strict_host_checking: false
    ssh:
      UsePAM: true
    auth: "password"
    forward_ssh_key: false

```

getting this error at the moment-

 ![Screenshot 2025-01-22 at 11.09.28 PM](https://us1.discourse-cdn.com/flex015/uploads/osc/original/2X/6/647fcffb9135be179e01a9cb34b979fccd4454b9.png)

---

<div class="post-metadata">

**Author:** ![jeff.ohrstrom](https://sea1.discourse-cdn.com/flex015/user_avatar/discourse.openondemand.org/jeff.ohrstrom/32/136_2.png) [@jeff.ohrstrom](https://discourse.openondemand.org/u/jeff.ohrstrom)\
**Post date:** [January 22, 2025, 5:46pm UTC](https://discourse.openondemand.org/t/configuring-password-based-authentication-for-job-submission-in-open-ondemand/3976/2 "2025-01-22T17:46:22Z")

</div>

If you’re using `localhost` to submit jobs, you don’t need ssh. remove the `submit_host: 'localhost'` and we’ll use the command directly on the localhost.

ssh, auth and forward\_ssh\_key don’t do anything here.

---

<div class="post-metadata">

**Author:** ![jeff.ohrstrom](https://sea1.discourse-cdn.com/flex015/user_avatar/discourse.openondemand.org/jeff.ohrstrom/32/136_2.png) [@jeff.ohrstrom](https://discourse.openondemand.org/u/jeff.ohrstrom)\
**Post date:** [January 22, 2025, 5:47pm UTC](https://discourse.openondemand.org/t/configuring-password-based-authentication-for-job-submission-in-open-ondemand/3976/3 "2025-01-22T17:47:44Z")

</div>

Also hi and welcome!

---

<div class="post-metadata">

**Author:** ![rishabhs002](https://sea1.discourse-cdn.com/flex015/user_avatar/discourse.openondemand.org/rishabhs002/32/2567_2.png) [@rishabhs002](https://discourse.openondemand.org/u/rishabhs002)\
**Post date:** [January 23, 2025, 7:16am UTC](https://discourse.openondemand.org/t/configuring-password-based-authentication-for-job-submission-in-open-ondemand/3976/4 "2025-01-23T07:16:36Z")

</div>

That seems to have done the trick!!  
But if in future we decide to use a different host machine for submitting the job. Will it be possible to use password based authentication rather than pub-private key based?

---

<div class="post-metadata">

**Author:** ![jeff.ohrstrom](https://sea1.discourse-cdn.com/flex015/user_avatar/discourse.openondemand.org/jeff.ohrstrom/32/136_2.png) [@jeff.ohrstrom](https://discourse.openondemand.org/u/jeff.ohrstrom)\
**Post date:** [January 23, 2025, 2:06pm UTC](https://discourse.openondemand.org/t/configuring-password-based-authentication-for-job-submission-in-open-ondemand/3976/5 "2025-01-23T14:06:41Z")

</div>

No I don’t think so. You could use `HostBasedAuthentication` though.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex015/uploads/osc/original/2X/b/bae70bd0ed39a3ae769c2108155f4cb3e9da8385.png) [@system](https://discourse.openondemand.org/u/system)\
**Post date:** [July 22, 2025, 2:07pm UTC](https://discourse.openondemand.org/t/configuring-password-based-authentication-for-job-submission-in-open-ondemand/3976/6 "2025-07-22T14:07:02Z")

</div>

This topic was automatically closed 180 days after the last reply. New replies are no longer allowed.