HPC 2016 Update 3 and One Way Trusts RRS feed

  • Question

  • Hi, we have an HPC clusters in domain A and users in domain B, and there is a one-way trust between domain A and B. When we start an HPC calculation we get the message:

    SchedulerServiceAuthorizationManager#ValidateServiceAsClient(<domain>\<username>)..Exception:..System.Security.SecurityException: The security database on the server does not have a computer account for this workstation trust relationship.....   at System.Security.Principal.WindowsIdentity.KerbS4ULogon(String upn, SafeAccessTokenHandle& safeTokenHandle)..   at System.Security.Principal.WindowsIdentity..ctor(String sUserPrincipalName, String type)..   at System.Security.Principal.WindowsIdentity..ctor(String sUserPrincipalName)..   at Microsoft.Hpc.Scheduler.Store.PrincipalManager.GetPrincipal(String username)..   at Microsoft.Hpc.Scheduler.Store.SchedulerServiceManager.SchedulerServiceAuthorizationManager.ValidateServiceAsClient(String username)..The Zone of the assembly that failed was:..MyComputer

    We searched this forum, and found the post are-oneway-trust-domains-supported-in-hpc-2012 (https://social.microsoft.com/Forums/en-US/1d70a404-7dff-4be1-9fb6-f5457293ad2d/are-oneway-trust-domains-supported-in-hpc-2012?forum=windowshpcitpros). Is this remark still valid for HPC 2016 Update 3?

    Friday, March 20, 2020 2:01 PM

All replies

  • Hi auke.b

    Yes, the remark is still valid for HPC Pack 2016 Update 3. Is the cluster in trusting domain A and users in trusted domain B? And how are the users connecting to the head node of the cluster?


    Yutong Sun

    Friday, March 27, 2020 3:00 PM