Restricting who can log in to IBM Spectrum LSF Application Center

To control which users can log in and use IBM Spectrum LSF Application Center, set the parameter ALLOW_UNKNOWN_USER=N in the configuration file pmc.conf. Only users that you specify can log on, and all other users are denied access. Also, set ENABLE_USER_GROUP=N in pmc.conf so that users and user groups are not automatically loaded from LSF.

About this task

1. As root, log on to the IBM Spectrum LSF Application Center server.
2. Set your IBM Spectrum LSF Application Center environment:

   For example:

   • For csh or tcsh:

     % source /opt/pac/cshrc.platform

   • For sh, ksh, or bash:

     $ . /opt/pac/profile.platform

3. Edit the configuration file $GUI_CONFDIR/pmc.conf and set the parameter ALLOW_UNKNOWN_USER=N and ENABLE_USER_GROUP=N.
4. Restart IBM Spectrum LSF Application Center services.

   perfadmin stop all
   pmcadmin stop
   perfadmin start all
   pmcadmin start

5. Add users to the database by selecting System & Settings tab, Settings > Users > Users & Groups, and click the Add button.

   The users that are listed are allowed to log in and use IBM Spectrum LSF Application Center. All other users are denied access.

   The user account must be an operating system user on the IBM Spectrum LSF Application Center server or a user that can be validated with the authentication mechanism used such as LDAP, NIS, Active Directory.