diff -Naur ./trunk-3795/contrib/AddPrivileges ./new/contrib/AddPrivileges --- ./trunk-3795/contrib/AddPrivileges 2010-06-07 21:57:04.000000000 +0300 +++ ./new/contrib/AddPrivileges 2010-06-30 17:19:43.540679747 +0300 @@ -1,6 +1,6 @@ #! /bin/sh -### AddPrivileges ver 1.2 17 Mar 2010 ### +### AddPrivileges ver 1.3 17 Jun 2010 ### ### ------------------------------------------------------ ### ### This script creates Passwd&Group files and sets ### ### additional privileges only for Windows users ### @@ -46,7 +46,7 @@ -v | --v*) echo - echo " AddPrivileges ver 1.2 17 Mar 2010" + echo " AddPrivileges ver 1.3 17 Jun 2010" exit $? ;; @@ -99,7 +99,7 @@ editrights -a SeCreateTokenPrivilege -u "$CURRENTU" - echo " Set mom's privileges" + echo " Set the SeCreateTokenPrivilege" fi diff -Naur ./trunk-3795/README.cygwin ./new/README.cygwin --- ./trunk-3795/README.cygwin 2010-06-07 21:57:04.000000000 +0300 +++ ./new/README.cygwin 2010-06-30 17:30:29.094429717 +0300 @@ -11,7 +11,7 @@ Mail and drmaa are untested. In mom quota and setrlimit are not supported because Cygwin doesn't support ones. -Torque needs two Windows users (local or domain) on each host: +Torque needs at least two Windows users (local or domain) on each host: with Computer administrator privileges and with Limited account. Both users must be password protected. @@ -48,7 +48,7 @@ Setup openssh for and using the -ssh-host-config and ssh-user-config comands +ssh-host-config and ssh-user-config commands Adjust an access without password prompting on each host. @@ -98,12 +98,18 @@ ! !! ! ! ! ! !! ! ! ! -------------------------------------------------------------------------------------------------- +! !! ! ! ! +! Windows service !! ! ! Windows 7 ! +! by !! SeServiceLogonRight ! SeServiceLogonRight ! with Cygwin 1.7 ! +! via LSA registry !! ! ! ! +! !! ! ! ! + -------------------------------------------------------------------------------------------------- Warning!!! You have to understand that a installing of additional privileges can decrease your OS security level. Open the ports for sshd, pbs_server, pbs_mom and pbs_sched in your firewalls. -Reboot your computers!!! +Reboot your computers that the SeCreateTokenPrivilege has taken effect! @@ -199,6 +205,19 @@ #cygrunsrv.exe -I pbs_server -p /usr/sbin/pbs_server.exe #cygrunsrv.exe -I pbs_sched -p /usr/sbin/pbs_sched.exe #cygrunsrv.exe -I pbs_mom -p /usr/sbin/pbs_mom.exe + +On Windows 7 with Cygwin 1.7 can use pbs_mom as services via the LSA private registry +area (http://cygwin.com/cygwin-ug-net/ntsec.html). Thus the very special and very dangerous +SeCreateTokenPrivilege is not required: + + #cygserver-config + #cygrunsrv.exe -S cygserver + +For each user: + №passwd -R + + #./contrib/AddPrivileges --add + #cygrunsrv.exe -I pbs_mom -p /usr/sbin/pbs_mom.exe –u -w Services and privileges are managed via the Windows Control Panel or command line.