Download Building and Improving a Linux Cluster

Transcript
all the accounts and passwords for each user. The files containing the account names, group
names, passwords and home directories of each user is then mounted to each computer
in the cluster using NIS. The NIS method allows for the administrator to create one user
account on the master, and mount it using NIS to the other nodes. This allows users to
access their information on every computer node, as well as use MPICH which requires that
type of consistency throughout the cluster.
The last authentication method is Lightweight Directory Access Protocol, or LDAP.
After the industry standard NIS was used for many years, a bug was found in the system.
Users could access the passwords folder on a cluster using NIS, by copying previous command history into a terminal window. This would allow anyone who is logging into the
computer (users, administrators, and hackers) to access any account and any file on the
machine. LDAP was created as the alternative to NIS. LDAP uses a Data Interchange File
(LDIF) to create and maintain user authentication. The LDIF file is shared throughout the
network and mounted similarly to NIS, but without sacrificing the security of the network.
The BYU-Idaho Cluster was designed so many students could access and use the cluster.
Each node in the cluster was designed to act as a single computer by itself as well. Because
of the large number of students who where anticipated to use the cluster, NIS authentication
was setup. Shortly after NIS was up and running, an error occurred and NIS is no longer
running properly. The Cluster currently runs regular authentication, however script files
have been written to help administrators setup and maintain the cluster status.
9