Configuration to enable UNIX/Windows user account mapping

Enable the UNIX/Windows user account mapping feature by defining one or more LSF user domains using the LSF_USER_DOMAIN parameter in lsf.conf.

Important:

Configure LSF_USER_DOMAIN immediately after you install LSF—changing this parameter in an existing cluster requires that you verify and possibly reconfigure service accounts, user group memberships, and user passwords.

Configuration file

Parameter and syntax

Behavior

lsf.conf

LSF_USER_DOMAIN=

domain_name

  • Enables Windows domain account mapping in a single-domain environment

  • To run jobs on a UNIX host, LSF strips the specified domain name from the user name

  • To run jobs on a Windows host, LSF appends the domain name to the user name

LSF_USER_DOMAIN=

domain_name:domain_name

  • Enables Windows domain account mapping in a multi-domain environment

  • To run jobs on a UNIX host, LSF strips the specified domain names from the user name

  • To run jobs on a Windows host, LSF appends the first domain name to the user name. If the first domain\user combination does not have permissions to run the job, LSF tries the next domain in the LSF_USER_DOMAIN list.

LSF_USER_DOMAIN= .

  • Enables Windows domain account mapping

  • To run jobs on a UNIX host, LSF strips the local machine name from the user name

  • To run jobs on a Windows host, LSF appends the local machine name to the user name