Hi folks,
I’ve created one queue and enabled acl_groups to make that queue should be accessed by only group members, but groups members are unable to access the queue and saying unauthorized requests. I’ve added a user into the group then also unable to access, for reference see the queue configuration details.
Queue: Testing
queue_type = Execution
total_jobs = 0
state_count = Transit:0 Queued:0 Held:0 Waiting:0 Running:0 Exiting:0 Begun
:0
resources_max.ncpus = 512
resources_max.nodect = 40
resources_max.walltime = 24:00:00
resources_min.ncpus = 1
resources_min.nodect = 1
acl_group_enable = True
acl_groups = +pbstesting
default_chunk.Qlist = qte
enabled = True
started = True
Any help would be appreciated.
My guess is that you typed acl_groups=+pbstesting when you meant to type acl_groups+=pbstesting?
I’ve added only one group entry into acl_groups that is pbstesting and below is the configuration.
create queue Testing
set queue Testing queue_type = Execution
set queue Testing resources_max.ncpus = 512
set queue Testing resources_max.nodect = 40
set queue Testing resources_max.walltime = 24:00:00
set queue Testing resources_min.ncpus = 1
set queue Testing resources_min.nodect = 1
set queue Testing acl_group_enable = True
set queue Testing acl_groups = pbstesting
set queue Testing default_chunk.Qlist = qte
set queue Testing enabled = True
set queue Testing started = True
First, what version of PBS are you running? And what OS are you on?
So I am a little confused by your output, but maybe that is just the server.
The first output looks like a qstat -f and it shows +pbstesting.
Your second output looks like the output of print server, but it does not show the plus sign.
When using acl_users you do use (or at least can, it isn’t clear to me if it is required) a plus sign like this acl_users=+username@hostname or you can use a minus sign to exclude specific users. There is an example in the manual showing a plus sign on the group, so it seems it should be valid.
For lack of anything better, I suggest you do this:
First, assuming you are on Linux, verify the group is as you expect it: getent group pbstesting Make sure it is spelled right and has the users you expect in it.
Then do this:
qmgr -c "set queue Testing acl_groups = +pbstesting"
qmgr -c "print queue Testing"
qstat -fQ Testing
Assuming the problem does not resolve itself, post the commands and the output, along with the version and OS. That way we know exactly what we are working with. Sorry if that isn’t any help.
I’ve fixed this issue with the option acl_users.
Thanks all