{"action":"opened","issue":{"url":"https://api.github.com/repos/cooperative-computing-lab/cctools/issues/890","labels_url":"https://api.github.com/repos/cooperative-computing-lab/cctools/issues/890/labels{/name}","comments_url":"https://api.github.com/repos/cooperative-computing-lab/cctools/issues/890/comments","events_url":"https://api.github.com/repos/cooperative-computing-lab/cctools/issues/890/events","html_url":"https://github.com/cooperative-computing-lab/cctools/issues/890","id":100575369,"number":890,"title":"Add support for multiple challenge directories for unix authentication","user":{"login":"batrick","id":548304,"avatar_url":"https://avatars.githubusercontent.com/u/548304?v=3","gravatar_id":"","url":"https://api.github.com/users/batrick","html_url":"https://github.com/batrick","followers_url":"https://api.github.com/users/batrick/followers","following_url":"https://api.github.com/users/batrick/following{/other_user}","gists_url":"https://api.github.com/users/batrick/gists{/gist_id}","starred_url":"https://api.github.com/users/batrick/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/batrick/subscriptions","organizations_url":"https://api.github.com/users/batrick/orgs","repos_url":"https://api.github.com/users/batrick/repos","events_url":"https://api.github.com/users/batrick/events{/privacy}","received_events_url":"https://api.github.com/users/batrick/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/cooperative-computing-lab/cctools/labels/enhancement","name":"enhancement","color":"84b6eb"},{"url":"https://api.github.com/repos/cooperative-computing-lab/cctools/labels/question","name":"question","color":"cc317c"}],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":0,"created_at":"2015-08-12T15:52:30Z","updated_at":"2015-08-12T15:52:30Z","closed_at":null,"body":"I think all of our Chirp servers use the ND.EDU AFS space for the challenge directory which prevents clients operating in the CRC.ND.EDU AFS space from doing unix authentication. [In fact, CRC machines have kerberos configured so clients can't get ND.EDU kerberos tickets due to blacklisted ciphers.]  For this reason, it would be useful if we could extend the unix authentication mechanism to have multiple challenge directories depending on the network file system the client has access to.\r\n\r\nIn addition to having the two AFS realms, ND.EDU and CRC.ND.EDU, we could also use the pscratch (NFS) file system as a challenge directory. This would allow jobs run in SGE to also authenticate using unix.\r\n\r\nThis idea would probably require creating a new authentication method (\"unix2\"??) in order to maintain backwards compatibility."}}