Intel MPI 2021.12 can't run executable with UNC path

[Seifer]

Hello:

I  have noticed that Intel MPI 2021.12 replace password-based authentication with powershell remote.

I run the following command successfully.

"C:\Program Files\Intel MPI 2021\x64\mpiexec.exe" -host headnode -n 1 "C:\MyTest\IMB-MPI1.exe" : -host computenode -n 1 "C:\MyTest\IMB-MPI1.exe"

But when I change the path from local path to UNC path. it is failed.

C:\Windows\system32>"C:\Program Files\Intel MPI 2021\x64\mpiexec.exe" -host headnode -n 1 "\\headnode\Moldex3D_2025\Bin\IMB-MPI1.exe" : -host computenode -n 1 "\\headnode\Moldex3D_2025\Bin\IMB-MPI1.exe"
[proxy:0:1@computenode] launch_processes (proxy.c:568): error creating process (error code 5). Access is denied.

[proxy:0:1@computenode] main (proxy.c:902): error launching_processes
[mpiexec@headnode] Error: Downstream from host computenode exited abnormally
[mpiexec@headnode] Trying to close other downstreams
[mpiexec@headnode] HYD_sock_write (..\windows\src\hydra_sock.c:387): write error (errno = 2)
[mpiexec@headnode] HYD_sock_write (..\windows\src\hydra_sock.c:387): write error (errno = 2)
[proxy:0:1@computenode] HYD_spawn (..\windows\src\hydra_spawn.c:315): unable to run process \\headnode\Moldex3D_2025\Bin\IMB-MPI1.exe (error code 5)
+ CategoryInfo : NotSpecified: ([proxy:0:1@comp... (error code 5):String) [], RemoteException
+ FullyQualifiedErrorId : NativeCommandError
+ PSComputerName : computenode

C:\Windows\system32>

Do you have any solution? Thank you!

[DrAmarpal_K_Intel]

Hello Seifer.

The UNC path used in the second part of your command line looks incorrect (I am not sure if that was intentional!). The rank on the compute node was trying to access the binary on the headnode. Could you try the following variant instead?

"C:\Program Files\Intel MPI 2021\x64\mpiexec.exe" -host headnode -n 1 "\\headnode\Moldex3D_2025\Bin\IMB-MPI1.exe" : -host computenode -n 1 "\\computenode\Moldex3D_2025\Bin\IMB-MPI1.exe"

    

[Seifer]

Hello:

The path is correct. Because the executable has to be located only at the headnode. The path \\headnode\Moldex3D_2025 is shared to all compute nodes.

This commandline works fine with password-based authentication which is not available in Intel MPI 2021.12.

mpiexec.exe of Intel MPI 2021.12 uses powershell remoting, but if the executable is UNC path, it seems that mpiexec.exe does not handle the second hop of powershell remoting.

please refer to https://learn.microsoft.com/en-us/powershell/scripting/security/remoting/ps-remoting-second-hop?view=powershell-7.4

thank you!

[DrAmarpal_K_Intel]

Hello again Seifer. Thanks for clarifying your use case.

Starting Intel MPI Library 2021 Update 9 user authorization changes were introduced for better security.

If you would like to access the binary over the network, Intel MPI Library is going to be limited by the second hop restriction of PowerShell that you mentioned in the default authentication mode.

As a workaround, can you try using the -delegate flag at runtime? This mechanism uses domain-based authorization with the delegation ability instead of PowerShell remoting. This method involves additional configuration. Please follow the steps in the link below,

https://www.intel.com/content/www/us/en/docs/mpi-library/developer-guide-windows/2021-13/user-authorization.html

Are you using a Windows-based HPC cluster or just a few connected Windows nodes?

[Seifer]

Hello:

Thanks for the explanation.

We (and our clients) are using several connected Windows nodes which are not in the domain environment.

Therefore, -delegate option is not the workaround.