Secure communications between daemons and commands

To deal with spoofing attacks in your cluster, enable strict checking of communications between LSF daemons and between LSF commands and daemons.

You need to shut down all hosts in the LSF cluster to enable strict checking.

If you are running a MultiCluster environment, you must enable strict checking in all clusters.

  1. Shut down all hosts in the LSF cluster.

    lsfshutdown

  2. Edit the lsf.conf file.
  3. Enable strict checking by specifying the LSF_STRICT_CHECKING parameter.

    Add the following line to lsf.conf:

    LSF_STRICT_CHECKING=Y

  4. Start up all hosts in the LSF cluster.

    lsfstartup

Your LSF cluster now requires an LSF-generated checksum for all communications.