hi，please help me, thanks;
chrome brower show as follows
/etc/ood/config/ood_portal.yml
auth:
- 'AuthType Basic'
- 'AuthName "Open OnDemand"'
- 'AuthBasicProvider PAM'
- 'AuthPAMService ood'
- 'Require valid-user'
user_map_match: '.*'
apache access log as follows:
travert
June 23, 2022, 1:53pm
2
Hi and welcome!
What OS are you on?
Did you follow the steps in the docs here: Add PAM Authentication — Open OnDemand 2.0.20 documentation
Mainly, is the module also enabled after the install?
After setting the ood_portal.yml did you issue the update_ood_portal command?
use CentOS-7.6 x64
according to Add PAM Authentication — Open OnDemand 2.0.20 documentation
Apply modifications
apache error log as follows:
I think you don’t actually have an ood user to map too. That is what does id ood return? I think you need to make the local user ood.
That said - you may as well migrate to Dex + LDAP because local users aren’t likely to be able to use your scheduler. And that’s kind of the whole point of Open OnDemand to get interactive jobs on your resources. But these schedulers are generally tied to LDAP and only accept requests from LDAP users, not local users.
Hi,
Following is the content of the file “/opt/ood/ood_auth_map/bin/ood_auth_map.regex” and make sure enabled executable bit for the file.
Note: line 2 is commented here, since we want to use same PAM username during login without domain name. If you want to use PAMusername@doaminname for user login. Uncomment line number2 and comment line no 3 in the below file content.
#!/bin/bash
#REX=“([^@]+)@hpcdomain.local ”
REX=“([^@]+)”
INPUT_USER=“$1”
if [[ $INPUT_USER =~ $REX ]]; then
MATCH=“${BASH_REMATCH[1]}”
echo “$MATCH” | tr ‘[:upper:]’ ‘[:lower:]’
else
logger -t ‘ood-mapping’ “cannot map $INPUT_USER”
exit 1
fi
There are ood users locally，PAM After the error, later switched to ldap.
liu-shaobo:
ondemand-2.0
Versions prior to 2.0 relied on user_map_cmd to do this. Since 2.0 you should use the simpler and faster user_map_match .
system
December 24, 2022, 3:16am
8
This topic was automatically closed 180 days after the last reply. New replies are no longer allowed.