# OOD 2.0.27 and Rocky Linux 8.6 authentications and beyond

**URL:** <https://discourse.openondemand.org/t/ood-2-0-27-and-rocky-linux-8-6-authentications-and-beyond/2214>\
**Category:** Get Help\
**Tags:** doc-request\
**Created:** [August 1, 2022, 4:38pm UTC](https://discourse.openondemand.org/t/ood-2-0-27-and-rocky-linux-8-6-authentications-and-beyond/2214 "2022-08-01T16:38:28Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![luvres](https://sea1.discourse-cdn.com/flex015/user_avatar/discourse.openondemand.org/luvres/32/1211_2.png) [@luvres](https://discourse.openondemand.org/u/luvres)\
**Post date:** [August 1, 2022, 4:38pm UTC](https://discourse.openondemand.org/t/ood-2-0-27-and-rocky-linux-8-6-authentications-and-beyond/2214/1 "2022-08-01T16:38:29Z")

</div>

I’m building a node using ondemand 2.0.27 with Rocky Linux 8.6 and following the documentation I’m having some difficulties in some points about authentication.

I understand that there are three ways of settings, using PAM, DEX and Keycloak. For a login screen to appear for you you need the mod\_auth\_openidc module and mod\_authnz\_pam for PAM

Via PAM I got it without problems. By DEX too, but I haven’t used LDAP yet and only using the example user. Another option is the Keycloak that I couldn’t configure.

Are there other ways to configure authentication? Does the login screen from the customer’s point of view appear only with PAM or Keycloak models?

---

<div class="post-metadata">

**Author:** ![gbyrket](https://sea1.discourse-cdn.com/flex015/user_avatar/discourse.openondemand.org/gbyrket/32/894_2.png) [@gbyrket](https://discourse.openondemand.org/u/gbyrket)\
**Post date:** [August 1, 2022, 7:40pm UTC](https://discourse.openondemand.org/t/ood-2-0-27-and-rocky-linux-8-6-authentications-and-beyond/2214/2 "2022-08-01T19:40:31Z")

</div>

Hi Leonardo.

Thanks for the post, and welcome to the Open OnDemand Community.

We were wondering if there is some authentication system that you already use and want to tie into (i.e., campus wide auth)?

Thanks,  
-gerald

---

<div class="post-metadata">

**Author:** ![luvres](https://sea1.discourse-cdn.com/flex015/user_avatar/discourse.openondemand.org/luvres/32/1211_2.png) [@luvres](https://discourse.openondemand.org/u/luvres)\
**Post date:** [August 1, 2022, 9:15pm UTC](https://discourse.openondemand.org/t/ood-2-0-27-and-rocky-linux-8-6-authentications-and-beyond/2214/3 "2022-08-01T21:15:07Z")

</div>

Thank you, Gerald!

I work on the PUC-Rio campus and am in the process of implementing part of the infrastructure. So I have a freedom to choose what to use for CAS with LDAP or OIDC. I’ve been looking at keycloak and if implementing LDAP I’m leaning towards FreeIPA.  
I’m open to different recommendations.

---

<div class="post-metadata">

**Author:** ![luvres](https://sea1.discourse-cdn.com/flex015/user_avatar/discourse.openondemand.org/luvres/32/1211_2.png) [@luvres](https://discourse.openondemand.org/u/luvres)\
**Post date:** [August 4, 2022, 1:33pm UTC](https://discourse.openondemand.org/t/ood-2-0-27-and-rocky-linux-8-6-authentications-and-beyond/2214/4 "2022-08-04T13:33:34Z")

</div>

At the moment I implemented OOD with authentication via standard PAM with the popup login form. My implementation is in a container for provisioning a warewulf node (4.3.0). I have a warewulf cluster with OpenHPC Slurm.

Now I’m trying to implement Jupyter notebook and configure Jobs in Job Composer. In the “Cluster” dropdown I have ssh access normally.

On node OOD are installed Slurm and Munge is synchronized with all cluster nodes.

My questions are:

- Does slurmd need to be UP or only Munge?
- How to install and configure Jupyter in OOD?

---

<div class="post-metadata">

**Author:** ![luvres](https://sea1.discourse-cdn.com/flex015/user_avatar/discourse.openondemand.org/luvres/32/1211_2.png) [@luvres](https://discourse.openondemand.org/u/luvres)\
**Post date:** [August 6, 2022, 1:45am UTC](https://discourse.openondemand.org/t/ood-2-0-27-and-rocky-linux-8-6-authentications-and-beyond/2214/5 "2022-08-06T01:45:21Z")

</div>

In “Job Composer” in “Copy Template” when saving, I have an error page “The change you wanted was rejected.”

---

<div class="post-metadata">

**Author:** ![luvres](https://sea1.discourse-cdn.com/flex015/user_avatar/discourse.openondemand.org/luvres/32/1211_2.png) [@luvres](https://discourse.openondemand.org/u/luvres)\
**Post date:** [August 8, 2022, 1:23pm UTC](https://discourse.openondemand.org/t/ood-2-0-27-and-rocky-linux-8-6-authentications-and-beyond/2214/6 "2022-08-08T13:23:22Z")

</div>

The error in “Job Composer” was resolved by configuring TLS certificates which is mandatory to work.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex015/uploads/osc/original/2X/b/bae70bd0ed39a3ae769c2108155f4cb3e9da8385.png) [@system](https://discourse.openondemand.org/u/system)\
**Post date:** [February 4, 2023, 1:23pm UTC](https://discourse.openondemand.org/t/ood-2-0-27-and-rocky-linux-8-6-authentications-and-beyond/2214/7 "2023-02-04T13:23:38Z")

</div>

This topic was automatically closed 180 days after the last reply. New replies are no longer allowed.