Can kerberos client programs not co-exist with non-kerberos programs

[Manish Chopra]

Hi Lokesh and others,

I am working on LAM/MPI for HPC and came across some problems. Since I
am currently a member of this group, hence thought of posting the
issue here.

RHEL5 comes with various "kerberos-clients" installed, like telnet,
rsh etc. Following is a snippit of the entire issue :
------------------------------------------------------------------------------------------------------------
[lam@node1 ~]$ lamboot -v -ssi boot rsh hostfile

LAM 7.1.4/MPI 2 C++/ROMIO - Indiana University

n-1<9684> ssi:boot:base:linear: booting n0 (node1.example.com)
n-1<9684> ssi:boot:base:linear: booting n1 (node2.example.com)
ERROR: LAM/MPI unexpectedly received the following on stderr:
node2.example.com: Connection refused
-----------------------------------------------------------------------------
LAM failed to execute a process on the remote node
"node2.example.com".

LAM tried to use the remote agent command "rsh"
to invoke "echo $SHELL" on the remote node.

*** PLEASE READ THIS ENTIRE MESSAGE, FOLLOW ITS SUGGESTIONS, AND
*** CONSULT THE "BOOTING LAM" SECTION OF THE LAM/MPI FAQ
*** (http://www.lam-mpi.org/faq/) BEFORE POSTING TO THE LAM/MPI USER'S
*** MAILING LIST.

This usually indicates an authentication problem with the remote
agent, some other configuration type of error in your .cshrc or
.profile file, or you were unable to executable a command on the
remote node for some other reason. The following is a list of items
that you should check on the remote node:

- You have an account and can login to the remote machine
- Incorrect permissions on your home directory (should
probably be 0755)
- Incorrect permissions on your $HOME/.rhosts file (if you are
using rsh -- they should probably be 0644)
- You have an entry in the remote $HOME/.rhosts file (if you
are using rsh) for the machine and username that you are
running from
- Your .cshrc/.profile must not print anything out to the
standard error
- Your .cshrc/.profile should set a correct TERM type
- Your .cshrc/.profile should set the SHELL environment
variable to your default shell

Try invoking the following command at the unix command line:

rsh node2.example.com -n 'echo $SHELL'


You will need to configure your local setup such that you will *not*
be prompted for a password to invoke this command on the remote node.
No output should be printed from the remote node before the output of
the command is displayed.

When you can get this command to execute successfully by hand, LAM
will probably be able to function properly.
-----------------------------------------------------------------------------
n-1<9689> ssi:boot:base:linear: Failed to boot n1 (node2.example.com)
n-1<9689> ssi:boot:base:linear: aborted!
lamboot did NOT complete successfully
[lam@node1 ~]$ rlogin node2
node2.example.com: Connection refused
------------------------------------------------------------------------------------------------------------

For the above error output, the rsh client program is the cause.
Uninstalling krb5-workstation rpm package solved the issue.

Now the question is, "Can kerberos client programs not co-exist with
non-kerberos programs, just like Sendmail and Postfix MDAs. Is there a
way to switch over to using traditional non-kerberos programs without
removing the krb5-workstation package."

Thanks and Regards,
Manish

[Rajesh Singh]

Hello,

Anyone are active in this group.

Thanks
Rajesh