<html><body><p>The authentication scheme used for GPFS multi-clustering is similar to what other frameworks (e.g. ssh) do for private/public auth: each cluster has a private key and a public key. The key pair only needs to be generated once (unless you want to periodically regenerate it for higher security; this is different from enabling authentication for the very first time and can be done without downtime). The public key can then be exchanged with multiple remote clusters.<br><br>yuri<br><br><img width="16" height="16" src="cid:1__=07BBF5CFDFEE02CA8f9e8a93df938690918c07B@" border="0" alt="Inactive hide details for Damir Krstic ---02/17/2016 01:08:08 PM---In our current environment we have a storage gpfs cluster an"><font color="#424282">Damir Krstic ---02/17/2016 01:08:08 PM---In our current environment we have a storage gpfs cluster and a compute gpfs cluster. We use gpfs re</font><br><br><font size="2" color="#5F5F5F">From: </font><font size="2">Damir Krstic <damir.krstic@gmail.com></font><br><font size="2" color="#5F5F5F">To: </font><font size="2">gpfsug main discussion list <gpfsug-discuss@spectrumscale.org>, </font><br><font size="2" color="#5F5F5F">Date: </font><font size="2">02/17/2016 01:08 PM</font><br><font size="2" color="#5F5F5F">Subject: </font><font size="2">[gpfsug-discuss] question about remote cluster mounting</font><br><font size="2" color="#5F5F5F">Sent by: </font><font size="2">gpfsug-discuss-bounces@spectrumscale.org</font><br><hr width="100%" size="2" align="left" noshade style="color:#8091A5; "><br><br><br><font size="4">In our current environment we have a storage gpfs cluster and a compute gpfs cluster. We use gpfs remote cluster mounting mechanism to mount storage cluster on compute cluster. So far so good. </font><br><br><font size="4">We are about to introduce 3rd storage cluster in our environment and question I have is about gpfs authorization keys. </font><br><br><font size="4">More specifically, when we initially did remote cluster mounting, we had to run mmauth command on both the storage cluster and the compute cluster and then share the keys between the clusters. </font><br><br><font size="4">With the third storage cluster, can we re-use authorization key from compute cluster and share it with the new storage cluster? The reason for this question is I am hoping to minimize downtime on our compute cluster and I remember having to shut gpfs down when issuing mmauth command so I am hoping I can re-use the compute cluster key without shutting gpfs down.</font><br><br><font size="4">Thanks,</font><br><font size="4">Damir</font><br><br><tt>_______________________________________________<br>gpfsug-discuss mailing list<br>gpfsug-discuss at spectrumscale.org<br></tt><tt><a href="http://gpfsug.org/mailman/listinfo/gpfsug-discuss">http://gpfsug.org/mailman/listinfo/gpfsug-discuss</a></tt><tt><br></tt><br><BR>
</body></html>