SSH Access (Compute Node)¶

Deny interactive SSH entirely for SLURM users — copied from SSH Access Control, kept in sync there. Users reach compute resources through SLURM (salloc/srun/sbatch), never by SSHing into a node directly.

sudo nano /etc/ssh/sshd_config

Add (slurmUsers is the LDAP group name used for SLURM accounts):

DenyGroups slurmUsers

After making this change, restart the SSH service:

sudo systemctl restart sshd