We disable this feature at Fermilab and I would strongly suggest that any
other cluster do the same, it is an uncontrollable access hole. If you care
about security at all don't turn it on.
From: HTCondor-users [htcondor-users-bounces@xxxxxxxxxxx] on behalf of Keith Brown [keith6014@xxxxxxxxx]
Sent: Wednesday, August 13, 2014 7:13 AM
To: HTCondor-Users Mail List
Subject: Re: [HTCondor-users] condor_ssh_to_job
so, what is the point of condor_ssh_job? if a user can start hundreds of processes he can just ssh into his job and occupy slots indefinitely. there must be a way for an administrator to control access to condor_ssh_job.
On Tue, Aug 12, 2014 at 10:32 PM, Rich Pieri <ratinox@xxxxxxx> wrote: