Configuring Moab Workload Manager

Moab Workload Manager must be configured to use MWS as a resource manager. Do the following:

• First, the following lines must be in the Moab Workload Manager configuration file or one of its included files:

RMCFG[mws]                      TYPE=MWS
RMCFG[mws]                      FLAGS=UserSpaceIsSeparate
RMCFG[mws]                      BASEURL=http://localhost:8080/mws

The BASEURL must match the configured URL of MWS.

• The next step is to edit the MWS credential information in the Moab private configuration file (/opt/moab/etc/moab-private.cfg, by default). Here are the default values:

CLIENTCFG[RM:mws] USERNAME=moab-admin PASSWORD=changeme!



USERNAME and PASSWORD must match the values of auth.defaultUser.username and auth.defaultUser.password, respectively, found in the MWS configuration file. The MWS RM contacts MWS directly using the base URL, username, and password configured.

Optionally, the USERNAME and PASSWORD configuration values may be specified directly in the Moab configuration file, though this is not recommended. Likewise, the BASEURL configuration value can be specified in the Moab private configuration file.

• Lastly, to enable such actions as submitting jobs as different users, the ENABLEPROXY=TRUE option must be present in the ADMINCFG configuration line, and the OSCREDLOOKUP option must be set to NEVER, as follows:

ADMINCFG[1]           USERS=root      ENABLEPROXY=TRUE
OSCREDLOOKUP          NEVER

• You may also want to configure SSL by using the following options (in either the RMCFG or CLIENTCFG section):
  • SSLCACERT: Lets you specify the absolute path to your SSL CA certificate. (This also enables the use of self-signed certificates, if desired.) It is recommended that you set this option in the Moab private configuration file. For example:

  CLIENTCFG[RM:mws]    SSLCACERT=/path/to/cert.pem
  

  • SSLNOHOSTCHECK: Lets you disable the SSL check to make sure that the actual server name matches the certificate's server name. For example: 

  #In moab-private.cfg
  CLIENTCFG[RM:mws]    SSLNOHOSTCHECK=TRUE
  
  #Or in moab.cfg
  RMCFG[mws]           SSLNOHOSTCHECK=TRUE

  

  WARNING: This setting could compromise the security of the system and should not be used in production environments.

  • SSLNOPEERCHECK: Lets you disable the SSL check to make sure that the certificate is valid.

  #In moab-private.cfg
  CLIENTCFG[RM:mws]    SSLNOPEERCHECK=TRUE
  
  #Or in moab.cfg
  RMCFG[mws]           SSLNOPEERCHECK=TRUE

  

  WARNING: This setting could compromise the security of the system and should not be used in production environments.

Related topics 

• Moab Workload Manager resource manager integration
• Configuring Moab Workload Manager

© 2015 Adaptive Computing