topic Unable to get windows domain authentication working (-delegate) with a network executable. in Intel® MPI Library

Unable to get windows domain authentication working (-delegate) with a network executable.

jefffaust — Tue, 01 Sep 2020 19:46:54 GMT

The commands below demonstrate the problem I am seeing. The -delegate option works for a local executable, but not one on a network drive.

# Register to use password authentication
C:\Users\local>mpiexec -register
account (domain\user) [COMPANY\local]:
password:
confirm password:
Password encrypted into the Registry.

# Demonstrate with local executable
C:\Users\local>mpiexec -ppn 1 -hosts local-computer,cluster-01 hostname.exe
cluster-01
local-computer

# Demonstrate mpi use with network drive (hostname.exe is copied from c:\windows\system32)
C:\Users\local>mpiexec -ppn 1 -hosts local-computer,cluster-01 \\network\hostname.exe
local-computer
cluster-01

# Unregister password authentication
C:\Users\local>mpiexec -unregister
Account and password removed from the Registry.

# Fails as expected
C:\Users\local>mpiexec -ppn 1 -hosts local-computer,cluster-01 hostname.exe
User credentials needed to launch processes: ^C

# Domain-based authentication works
C:\Users\local>mpiexec -delegate -ppn 1 -hosts local-computer,cluster-01 hostname.exe
cluster-01
local-computer

# But not from a network drive
C:\Users\local>mpiexec -delegate -ppn 1 -hosts local-computer,cluster-01 \\network\hostname.exe
local-computer
[-1:9156]ERROR:execvp error on file: \\network\hostname.exe, Access is denied.

Re:Unable to get windows domain authentication working (-delegate) with a network executable.

PrasanthD_intel — Wed, 02 Sep 2020 12:11:25 GMT

Hi Jeffrey,

Could you tell us on which node you are running, you can get that by running whoami command.

Also are local-computer,cluster-01 part of the network drive(\\network\)? or the \\network is a third system?

Regards

Prasanth

Re: Re:Unable to get windows domain authentication working (-delegate) with a network executable.

jefffaust — Wed, 02 Sep 2020 13:55:04 GMT

Hi Prasanth,

I'm running from local-computer. \\network is a filer UNC path on the same network as the other two computers. There are no firewalls.

-Jeff

Re:Unable to get windows domain authentication working (-delegate) with a network executable.

PrasanthD_intel — Mon, 07 Sep 2020 06:52:54 GMT

Hi Jeffrey,

If all systems belong to the same domain and still -delegate is not working, this seems to be an issue from our side.

We are transferring this to Internal team.

Regards

Prasanth

Unable to get windows domain authentication working (-delegate) with a network executable.

jefffaust — Tue, 08 Sep 2020 14:39:07 GMT

Thanks Prasanth. After posting here, I did open a service request. It is #04790385.

-Jeff

Re:Unable to get windows domain authentication working (-delegate) with a network executable.

PrasanthD_intel — Tue, 15 Sep 2020 10:45:29 GMT

Hi Jeffrey,

Since you have raised a ticket, can we close the case here?

--Prasanth

Unable to get windows domain authentication working (-delegate) with a network executable.

jefffaust — Tue, 15 Sep 2020 13:56:44 GMT

Hi Prasanth,

I think it would be fair to post the solution here as well, when it's available.

-Jeff

Re:Unable to get windows domain authentication working (-delegate) with a network executable.

PrasanthD_intel — Tue, 22 Sep 2020 12:27:09 GMT

Hi Jeffrey,

The right team is handling the ticket. They will update you as soon as the solution/fix is available. We are a different team so we may not be able to post the updates here.

Regards

Prasanth

Re:Unable to get windows domain authentication working (-delegate) with a network executable.

PrasanthD_intel — Thu, 24 Sep 2020 11:35:56 GMT

Hi Jeffrey,

Thanks for confirming. We will be closing this thread.

Please raise a new thread for any additional support in future.

Regards

Prasanth