From b9bec14b98458f8f5c10589ee0c2932ef03a0370 Mon Sep 17 00:00:00 2001 From: Moe Jette <jette1@llnl.gov> Date: Tue, 16 Mar 2004 23:10:12 +0000 Subject: [PATCH] Emphasize that openssl rather than ssh-genkey must be used to generate SLURM credentials. --- doc/html/quickstart_admin.html | 13 +++++++++---- 1 file changed, 9 insertions(+), 4 deletions(-) diff --git a/doc/html/quickstart_admin.html b/doc/html/quickstart_admin.html index 105533c2179..329b2df576e 100644 --- a/doc/html/quickstart_admin.html +++ b/doc/html/quickstart_admin.html @@ -177,10 +177,15 @@ NodeName=mcr[0-1151] NodeAddr=emcr[0-1151] # PartitionName=DEFAULT State=UP PartitionName=pdebug Nodes=mcr[0-191] MaxTime=30 MaxNodes=32 Default=YES -PartitionName=pbatch Nodes=mcr[192-1151] </pre> <p>You will should create unique job credential keys for your site -using the program <a href="http://www.openssl.org/">openssl</a>. An example of -how to do this is shown below. Specify file names that match the values of JobCredentialPrivateKey -and JobCredentialPublicCertificate in your configuration file. The JobCredentialPrivateKey +PartitionName=pbatch Nodes=mcr[192-1151] +</pre> +<h3>Security</h3> +<p>You will should create unique job credential keys for your site +using the program <a href="http://www.openssl.org/">openssl</a>. +<b>You must use openssl and not ssh-genkey to construct these keys.</b> +An example of how to do this is shown below. Specify file names that +match the values of JobCredentialPrivateKey and JobCredentialPublicCertificate +in your configuration file. The JobCredentialPrivateKey file must be readable only by SlurmUser. The JobCredentialPublicCertificate file must be readable by all users. </p> <p class="commandline" style="margin-left:.2in">openssl genrsa -out /usr/local/etc/slurm.key -- GitLab