Administering Platform LSF - SAS

Chapter 38
Authentication
eauth -c
host_name
eauth -s
When a command is invoked, the client program automatically executes
eauth -c host_name to get the external authentication data, where
host_name is the name of the host running the LSF daemon (for example,
RES) on which the operation will take place. The external user authentication
data is passed to LSF through the standard output of the eauth program.
When the LSF daemon receives the request, it executes eauth -s under the
primary LSF administrator user ID to process the user authentication data.
If your site cannot run authentication under the primary LSF administrator user
ID, configure the parameter LSF_EAUTH_USER in the /etc/lsf.sudoers file.
The LSF daemon expects eauth -s to write to standard output:
◆ 1 if authentication succeeds
◆ 0 if authentication fails
The same eauth -s process can service multiple authentication requests; if
the process terminates, the LSF daemon will re-invoke eauth -s on the next
authentication request.
See the Platform LSF Reference for information about configuring the
lsf.sudoers file.
Standard input stream for the eauth program
User authentication data is passed to eauth -s via its standard input. The
standard input stream to eauth has the following format:
uid gid user_name client_addr client_port user_auth_data_len
user_auth_data
where:
◆ uid is the user ID in ASCII of the client user
◆ gid is the group ID in ASCII of the client user
◆ user_name is the user name of the client user
◆ client_addr is the host address of the client host in ASCII dot notation
◆ client_port is the port number from where the client request is made
◆ user_auth_data_len is the length of the external authentication data in
ASCII passed from the client
◆ user_auth_data is the external user authentication data passed from the
client
Administering Platform LSF 495