LSF authorization

As an LSF administrator, you have the following authorization options:

Enable one or more types of user account mapping
Specify the user account that is used to run eauth and eexec executables or queue level commands for pre- and post-execution processing
Control user access to LSF resources and functionality

Enable user account mapping

You can configure different types of user account mapping so that a job or command submitted by one user account runs on the remote host under a different user account.

Type of account mapping	Description
Between-host	Enables job submission and execution within a cluster that has different user accounts assigned to different hosts. Using this feature, you can map a local user account to a different user account on a remote host.
Cross-cluster	Enables cross-cluster job submission and execution for a MultiCluster environment that has different user accounts assigned to different hosts. Using this feature, you can map user accounts in a local cluster to user accounts in one or more remote clusters.
UNIX/Windows	Enables cross-platform job submission and execution in a mixed UNIX/Windows environment. Using this feature, you can map Windows user accounts, which include a domain name, to UNIX user accounts, which do not include a domain name, for user accounts with the same user name on both operating systems.

For a detailed description of the user account mapping features and how to configure them, see UNIX/Windows User Account Mapping.

Specify a user account

To change the user account for …	Define the parameter …	In the file …
eauth	LSF_EAUTH_USER	lsf.sudoers
eexec	LSF_EEXEC_USER
Pre- and post execution commands	LSB_PRE_POST_EXEC_USER

Control user access to LSF resources and functionality

If you want to …	Define …	In the file …	Section …
Specify the user accounts with cluster administrator privileges	ADMINISTRATORS	lsf.cluster.`cluster_name`	ClusterAdmins
Allow the root user to run jobs on a remote host	LSF_ROOT_REX	lsf.conf	N/A
Allow specific user accounts to use @ for host redirection with lstcsh	LSF_SHELL_AT_USERS	lsf.conf	N/A
Allow user accounts other than root to start LSF daemons Note: For information about how to configure the LSF daemon startup control feature, see LSF Daemon Startup Control.	LSF_STARTUP_USERS LSF_STARTUP_PATH	lsf.sudoers	N/A