<span style=" font-size:10pt;font-family:sans-serif">Hello,</span><br><br><span style=" font-size:10pt;font-family:sans-serif">Unfortunately,
to allow bidirectional passwordless ssh between Linux/Windows (for sole
purpose of mm* commands), the literal username 'root' is a requirement.
Here are a few variations.</span><br><br><span style=" font-size:10pt;font-family:sans-serif">1. Use domain
account 'root', where 'root' belongs to "Domain Admins" group.
This is the easiest 1-step and the recommended way.</span><br><span style=" font-size:10pt;font-family:sans-serif">
or</span><br><span style=" font-size:10pt;font-family:sans-serif">2. Use domain
account 'root', where 'root' does NOT belong to "Domain Admins"
group. In this case, on each and every GPFS Windows node, add this 'domain\root'
account to local "Administrators" group.</span><br><span style=" font-size:10pt;font-family:sans-serif">
or</span><br><span style=" font-size:10pt;font-family:sans-serif">3. On each
and every GPFS Windows node, create a local 'root' account as a member
of local "Administrators" group.</span><br><br><span style=" font-size:10pt;font-family:sans-serif">(1) and (2) work
well reliably with Cygwin. I have seen inconsistent results with approach
(3) wherein Cygwin passwordless ssh in incoming direction (linux->windows)
sometimes breaks and prompts for password. Give it a try to see if you
get better results.</span><br><br><span style=" font-size:10pt;font-family:sans-serif">If you cannot
get around the 'root' literal username requirement, the suggested alternative
is to use GPFS multi-clustering. Create a separate cluster of all Windows-only
nodes (using mmwinrsh/mmwinrcp instead of ssh/scp... so that 'root' requirement
is eliminated). And then remote mount from the Linux cluster (all non-Windows
nodes) via mmauth, mmremotecluster and mmremotefs et al.</span><br><span style=" font-size:10pt;font-family:sans-serif">Regards, The Spectrum
Scale (GPFS) team<br><br>------------------------------------------------------------------------------------------------------------------<br>If you feel that your question can benefit other users of Spectrum
Scale (GPFS), then please post it to the public IBM developerWroks Forum
at </span><a href="https://www.ibm.com/developerworks/community/forums/html/forum?id=11111111-0000-0000-0000-000000000479"><span style=" font-size:10pt;font-family:sans-serif">https://www.ibm.com/developerworks/community/forums/html/forum?id=11111111-0000-0000-0000-000000000479</span></a><span style=" font-size:10pt;font-family:sans-serif">.
<br><br>If your query concerns a potential software error in Spectrum Scale (GPFS)
and you have an IBM software maintenance contract please contact 1-800-237-5511
in the United States or your local IBM Service Center in other countries.
<br><br>The forum is informally monitored as time permits and should not be used
for priority messages to the Spectrum Scale (GPFS) team.</span><br><br><br><br><span style=" font-size:9pt;color:#5f5f5f;font-family:sans-serif">From:
</span><span style=" font-size:9pt;font-family:sans-serif">"Grunenberg,
Renar" <Renar.Grunenberg@huk-coburg.de></span><br><span style=" font-size:9pt;color:#5f5f5f;font-family:sans-serif">To:
</span><span style=" font-size:9pt;font-family:sans-serif">"gpfsug-discuss@spectrumscale.org"
<gpfsug-discuss@spectrumscale.org></span><br><span style=" font-size:9pt;color:#5f5f5f;font-family:sans-serif">Date:
</span><span style=" font-size:9pt;font-family:sans-serif">12/06/2018
09:05 AM</span><br><span style=" font-size:9pt;color:#5f5f5f;font-family:sans-serif">Subject:
</span><span style=" font-size:9pt;font-family:sans-serif">[gpfsug-discuss]
Spectrum Scale for Windows Domain -User Requirements</span><br><span style=" font-size:9pt;color:#5f5f5f;font-family:sans-serif">Sent
by: </span><span style=" font-size:9pt;font-family:sans-serif">gpfsug-discuss-bounces@spectrumscale.org</span><br><hr noshade><br><br><p style="margin-top:0px;margin-Bottom:0px"><span style=" font-size:12pt;font-family:Arial">Hallo
All,</span></p><p style="margin-top:0px;margin-Bottom:0px"><span style=" font-size:12pt;font-family:Arial"> </span></p><p style="margin-top:0px;margin-Bottom:0px"><span style=" font-size:12pt;font-family:Arial">i
had a question about the domain-user root account on Windows. We have some
requirements to restrict these level of authorization and found no info
what is possible to change here.</span></p><p style="margin-top:0px;margin-Bottom:0px"><span style=" font-size:12pt;font-family:Arial">Two
questions:</span></p><p style="margin-top:0px;margin-Bottom:0px"><span style=" font-size:12pt;font-family:Arial">1.
It is possible to define a other Domain-Account other than as root for
this.</span></p><p style="margin-top:0px;margin-Bottom:0px"><span style=" font-size:12pt;font-family:Arial">2.
If not, is it possible to define a local account as root on Windows-Clients?</span></p><p style="margin-top:0px;margin-Bottom:0px"><span style=" font-size:12pt;font-family:Arial"> </span></p><p style="margin-top:0px;margin-Bottom:0px"><span style=" font-size:12pt;font-family:Arial">Any
hints are appreciate. </span></p><p style="margin-top:0px;margin-Bottom:0px"><span style=" font-size:12pt;font-family:Arial">Thanks
Renar</span></p><br><span style=" font-size:12pt;font-family:Arial">Renar Grunenberg<br>Abteilung Informatik – Betrieb<br><br>HUK-COBURG<br>Bahnhofsplatz<br>96444 Coburg</span><table width=304 style="border-collapse:collapse;"><tr height=8><td width=56 style="border-style:none none none none;border-color:#000000;border-width:0px 0px 0px 0px;padding:1px 1px;"><span style=" font-size:12pt;font-family:Arial">Telefon:</span><td width=244 style="border-style:none none none none;border-color:#000000;border-width:0px 0px 0px 0px;padding:1px 1px;"><span style=" font-size:12pt;font-family:Arial">09561
96-44110</span><tr height=8><td width=56 style="border-style:none none none none;border-color:#000000;border-width:0px 0px 0px 0px;padding:1px 1px;"><span style=" font-size:12pt;font-family:Arial">Telefax:</span><td width=244 style="border-style:none none none none;border-color:#000000;border-width:0px 0px 0px 0px;padding:1px 1px;"><span style=" font-size:12pt;font-family:Arial">09561
96-44104</span><tr height=8><td width=56 style="border-style:none none none none;border-color:#000000;border-width:0px 0px 0px 0px;padding:1px 1px;"><span style=" font-size:12pt;font-family:Arial">E-Mail:</span><td width=244 style="border-style:none none none none;border-color:#000000;border-width:0px 0px 0px 0px;padding:1px 1px;"><span style=" font-size:12pt;font-family:Arial">Renar.Grunenberg@huk-coburg.de</span><tr height=8><td width=56 style="border-style:none none none none;border-color:#000000;border-width:0px 0px 0px 0px;padding:1px 1px;"><span style=" font-size:12pt;font-family:Arial">Internet:</span><td width=244 style="border-style:none none none none;border-color:#000000;border-width:0px 0px 0px 0px;padding:1px 1px;"><a href="www.huk.de"><span style=" font-size:12pt;font-family:Arial">www.huk.de</span></a></table><br><hr><span style=" font-size:8pt;font-family:Arial">HUK-COBURG Haftpflicht-Untersttzungs-Kasse
kraftfahrender Beamter Deutschlands a. G. in Coburg<br>Reg.-Gericht Coburg HRB 100; St.-Nr. 9212/101/00021<br>Sitz der Gesellschaft: Bahnhofsplatz, 96444 Coburg<br>Vorsitzender des Aufsichtsrats: Prof. Dr. Heinrich R. Schradin.<br>Vorstand: Klaus-Jrgen Heitmann (Sprecher), Stefan Gronbach, Dr. Hans Olav
Hery, Dr. Jrg Rheinlnder (stv.), Sarah Rssler, Daniel Thomas.</span><span style=" font-size:12pt;font-family:Arial"><br></span><hr><span style=" font-size:8pt;font-family:Arial">Diese Nachricht enthlt
vertrauliche und/oder rechtlich geschtzte Informationen.<br>Wenn Sie nicht der richtige Adressat sind oder diese Nachricht irrtmlich
erhalten haben,<br>informieren Sie bitte sofort den Absender und vernichten Sie diese Nachricht.<br>Das unerlaubte Kopieren sowie die unbefugte Weitergabe dieser Nachricht
ist nicht gestattet.<br><br>This information may contain confidential and/or privileged information.<br>If you are not the intended recipient (or have received this information
in error) please notify the<br>sender immediately and destroy this information.<br>Any unauthorized copying, disclosure or distribution of the material in
this information is strictly forbidden.</span><span style=" font-size:12pt;font-family:Arial"><br></span><hr><br><tt><span style=" font-size:10pt">_______________________________________________<br>gpfsug-discuss mailing list<br>gpfsug-discuss at spectrumscale.org<br></span></tt><a href="http://gpfsug.org/mailman/listinfo/gpfsug-discuss"><tt><span style=" font-size:10pt">http://gpfsug.org/mailman/listinfo/gpfsug-discuss</span></tt></a><tt><span style=" font-size:10pt"><br></span></tt><br><br><BR>