View Single Post

  #2 (permalink)  
Old 08-26-2004
P Gentry
 
Posts: n/a
Default Re: Secure clustering: kerberos issues

Sensei <noone@nowhere.org> wrote in message news:<2p3t1dFg7v8hU1@uni-berlin.de>...
> Hi. I've set up a secure cluster, but now I'm facing some issues about
> kerberos 5 / AFS and ssh: simply, ticket/token forwarding with
> passwordless login doesn't work... so I'm looking for a different solution.
>
> I have a central server A and 8 clients A1 .. A8. A is on a public ip
> and A? are on a private network, unreachable from outside the network.
> I'd like to use ssh for parallel calculus but since it doesn't work,
> would you enable kerberized versions of rlogin, rsh, telnet and rcp?
> Anyway, those applications are secure? Or, in other words, are the
> password sent in some crypted way or better they use directly kerberos
> authentication?


Your present setup and your needs are somewhat vague at my end -- I'm
cluster challenged ...

It sounds like you want secure, remote access to the cluster.
Especially if you know where the remote access will be from, I think
you need to look at VPN -- it's not restricted to use across the
internet ;-)

You might look at this (dated) article where VPN is used to
connect/combine two clusters.
http://www.linuxjournal.com/article.php?sid=6142

Googling showed a number of setups using VPN for remotely
combining/accessing clusters -- all very specific, so you should look
for yourself.

Kerborizng a setup/app on your own is "challenging" and time
consuming. If ssh doesn't give you what you need then Kerborized
versions of the others won't either. They all work at the app level
-- the nice thing about VPN is that it connects _networks_ securely
and allows you to use whatever apps you need.

Google provides:
52,100 English pages for
linux vpn cluster

7,240 English pages for
linux vpn parallel cluster

Refine as needed ...

hth,
prg
email above disabled
Reply With Quote