X-Spam-Check-By:	sourceware.org
From:	"Andy Keane" <Andy DOT Keane AT soton DOT ac DOT uk>
To:	<cygwin AT cygwin DOT com>
Subject:	FW: Windows 2003 Server, Cygwin sshd and mpiexec
Date:	Fri, 11 Aug 2006 14:11:33 +0100
Message-ID:	<!~!UENERkVCMDkAAQACAAAAAAAAAAAAAAAAABgAAAAAAAAA7xGTebFrMkaHeSSAR3i97sKAAAAQAAAATjWrvhUZwEyWHEOSno5CqAEAAAAA@soton.ac.uk>
MIME-Version:	1.0
X-Mailer:	Microsoft Outlook, Build 10.0.6626
X-ISS-MailScanner-Information:	Please contact the ISP for more information
X-ISS-MailScanner:	Found to be clean
X-ISS-MailScanner-SpamCheck:	not spam
X-ISS-MailScanner-From:	ajk AT soton DOT ac DOT uk
Mailing-List:	contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Subscribe:	<mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive:	<http://sourceware.org/ml/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender:	cygwin-owner AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
Delivered-To:	mailing list cygwin AT cygwin DOT com
X-MIME-Autoconverted:	from quoted-printable to 8bit by delorie.com id k7BDEXm8017003

Corinna

I am try to give linux users access to our parallel windows 2003 server pack
cluster via the OpenSSH daeom of cygwin.

I have tried the standard install with ssh-host-config and all works fine
and users can log in with passwords or with certificates to cygwin on the
cluster. However when they try and run an mpi job with mpiexec we get:

ajk AT headnode-10 /cygdrive/h/hydra
$ mpiexec -n 2 mpipi
unable to read authorization result from headnode-10. generic socket
failure, error stack:
ReadFailed(1538):  (errno -1073741508)

Aborting: Access denied by manager (1) on node 'headnode-10'.
A common cause: mpiexec and the root smpd daemon running on that node are
using different user accounts.

ajk AT headnode-10 /cygdrive/h/hydra
$ ps -le
      PID    PPID    PGID     WINPID  TTY  UID    STIME COMMAND
I    4756       1    4756       5764    3 11155   Aug  8 /usr/bin/bash
I    5932       1    5932       5932  con 11155 11:04:45 /usr/bin/bash
     4736       1    4736       4736  con 2721 12:40:09 /usr/bin/cygrunsrv
     4904    4736    4904       6480  con 2721 12:40:09 /usr/sbin/sshd
     6336    4904    6336       7868    ? 2721 12:40:38 /usr/sbin/sshd
     7260    6336    7260       7268    4 11155 12:40:39 /usr/bin/bash
     2892    7260    2892        516    4 11155 13:50:24 /usr/bin/ps

ajk AT headnode-10 /cygdrive/h/hydra


If however I simply log in using a remote desktop and start cygwin locally
the same command works fine - clearly the ssh log in ends up looking
different to the system than the non-ssh one. I have even tried:

net localgroup Administrators sshd_server /add
editrights -a SeAssignPrimaryTokenPrivilege -u sshd_server
editrights -a SeCreateTokenPrivilege -u sshd_server
editrights -a SeIncreaseQuotaPrivilege -u sshd_server
editrights -a SeServiceLogonRight -u sshd_server
mkpasswd -l -u sshd_server >> /etc/passwd
editrights -a SeDenyInteractiveLogonRight -u sshd_server
editrights -a SeDenyNetworkLogonRight -u sshd_server
editrights -a SeDenyRemoteInteractiveLogonRight -u sshd_server
cygrunsrv --stop sshd
cygrunsrv --remove sshd
cygrunsrv -I sshd -p /usr/sbin/sshd -a -D -u sshd_server -w <password>
net start sshd

and I still get the same problems, though login still works fine over sshd.
It does not seem to matter if I use privilege separation or not.

Regards

Andy

Prof. Andy Keane,
School of Engineering Sciences, University of Southampton, Highfield,
Southampton, SO17 1BJ, UK.
Tel +44(0)2380 592944, Fax +44(0)2380 594813, Mob +44(0)7802 422728
http://www.soton.ac.uk/~ajk
See our new book at http://www.aerospacedesign.org
 
 









--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/

- Raw text -