Disable Regular User Login
This section provides guidelines to disable the ability for those with the USER level of privilege to log onto selected tasker machines. Most often, for better throughput, this is applied to use selected machines as part of a computing resource pool exclusively through Accelerator.
Note: Disabling the login to a vovtasker is not a
normal or supported use of VOV functionality.
Disabling user login to the selected tasker machines is done in two phases:
- Disable user logins
- Set up vovtsd
Phase 1
- Disable all user logins except for the superuser or root on the selected machine.
-
Create the file /etc/nologin. The content of the file will
be the message the users receive when they try to login.
An example of /etc/nologin on host
h01
is shown below:% cat /etc/nologin Login disabled. Contact admin for help.
When a regular (non-root) user tries to login, the message shown to the user will be as follows:% rlogin -l john h01 john's Password: Login disabled. Contact admin for help. login:
Phase 2: Set Up vovtsd When
login is disabled for the USER level and VOV ADMIN is typically not a root user, it
is not possible to use rsh or ssh to either start or stop taskers from remote machines, such using the command vovtaskermgr. In this
scenario, vovtsd can be used to manage the
tasker machines remotely.
-
Log onto the machine as
root
, switch toVOV ADMIN
and then start vovtsd. -
From a remote machine, start or stop a tasker on this
machine using a previously used method, such as using the command vovtaskermgr or
ncmgr reset
, the GUI or a browser.% su - vncadmin % vovtsd -normal
-
Step 4 assumes that the shell for user "vncadmin" is set up to run the VOV
software. Some accounts do not have this setup. In that case, the
vovboot script could be used to start vovtsd.
% su - root % /full/path/to/vov/installation/common/scripts/vovboot vovtsd -normal
To start vovtsd at boot time, consider deployment of the S99vovtsd script, a copy of which can be found in the directory $VOVDIR/etc/boot/S99vovtsd. Copy this script into /etc/rc3.d/S99vovtsd and customize it to fit the installation requirements.
- Ensure that vovtsd is running.
- Automatically restart vovtsd on reboot of the machine. This enables the machine to provide continuous computing power without having to log in as root and manually start vovtsd.
Note: If vovtsd is already running on a host and starting
another host is tried, that second host will not start because the port is
already occupied; starting vovtsd on a regular basis is a
good way to ensure it is always running. Keeping the host running can be done
with a cron job as shown in the example
below:
% su - vncadmin% crontab -e
# Start vovtsd every thirty minutes
1,31 * * * * /full/path/to/VOV/common/scripts/vovboot vovtsd -normal > /dev/null 2>&1