Harmandeep Singh Kandhari - Configuring Open OnDemand for Multi-Cluster Authentication Support

Get Help
1

Hi Everyone,

I’m Harmandeep Singh Kandhari, owner of A Fitness Centre. Now, We are deploying Open OnDemand in a multi-cluster HPC environment and need guidance on configuring centralized authentication with LDAP/SSO. What are the recommended steps to ensure secure user mapping, seamless cluster switching, and stable job submission workflows across different resource managers?

Thanks,
Harmandeep Singh Kandhari

2

Hello and welcome!

Your question covers several different topics that are all documented in the OOD docs. I’ll point you to the relevant sections:

For authentication (LDAP/SSO):

And the auth solutions we integrate with can be seen here:

This covers all the authentication methods OnDemand supports including LDAP, SAML, OpenID Connect, etc.

For multi-cluster configuration and setting the resource manager to be used:

This explains how to configure multiple clusters in /etc/ood/config/clusters.d/ to be used
for the differing clusters to submit to.

For user mapping:

This covers the user_map_match and the deprecated user_map_cmd options for mapping authenticated users to system users.

If you run into specific issues while following the docs remember to check your logs!

Beyond the initial setup to get more specific help, we’ll need to know:

  • What authentication system are you currently using or planning to use? (LDAP, Active Directory, SAML, etc.)
  • What are the resource managers you are running on your clusters? (Slurm, K8s, etc.)
  • Have you already attempted any configuration? If so, what errors are you encountering?
  • What OS are your OnDemand and cluster systems running?

That will help us provide quick and accurate answers going forward.