---
name: "pam_sge_authorize"
section: "8"
platform: "linux"
package: "gridengine-exec"
version: "8.1.9+dfsg-13.1"
release: "Debian 13 (Trixie)"
platforms: ["linux"]
url: "https://new.carta.tech/pam_sge_authorize"
---

# pam\_sge\_authorize(8)

PAM module to control access to SGE hosts

## NAME

pam\_sge\_authorize - PAM module to control access to SGE hosts

## SYNOPSIS

**pam\_sge\_authorize** \[*options*\]

## DESCRIPTION

This PAM module limits access via [*ssh*(1)](/ssh/1.md) etc. to Grid Engine hosts only to users who currently have a job running on the host.  The expectation is that this limits their impact on any other users of the host.

## OPTIONS

**execd\_spool\_dir=***dir*

Specify the spool directory in which to find the  **active\_jobs** directory as *dir***/***hostname***/active\_jobs.** Default: **/opt/sge/default/spool**.

**bypass\_users=***user\_list*

The module ignores access by users with unames in the comma-separated *user\_list*. There is a limit of 30 users.  root is always allowed access.

**max\_sleep=***max\_sleep*

A non-zero *max\_sleep* allows desynchronization of accesses to the spool directory.  The module sleeps for a random period *t*, where 0\<=*t*\<=*max\_sleep* microseconds before accessing the spool directory.  This probably isn't useful. Default: 0.

**debug**

Send debugging information to syslog.

## EXAMPLE

On a typical GNU/Linux system, add something like the following to **/etc/pam.d/sshd**, e.g. at the top.

```
account required /opt/sge/lib/lx-amd64/pam_sge_authorize.so \
  bypass_users=foo,bar,baz,qux spool_dir=/opt/sge/execd_spool
```

On some systems it might be necessary to copy pam\_sge\_authorize.so into, say, **/lib/security**, and instead use it as

auth required pam\_sge\_authorize.so

## SEE ALSO

[*ssh*(1)](/ssh/1.md), [*pam*(7)](/pam/7.md), *pam.conf*(4).

## AUTHOR

TACC.  Man page by Dave Love, based on material from Bill Barth, TACC.