Create shared secret for secure communication
createSharedSecret
createSharedSecret -file <filename>
createSharedSecret
creates a shared secret
file used for secure communication between job managers and workers.
The file is named secret
in the current folder.
createSharedSecret -file <filename>
create
a shared secret file as the given filename.
Before passing sensitive data from one service to another (e.g., between job manager and workers), these services need to establish a trust relationship using a shared secret. This script creates a file that serves as a shared secret between the services. Each service is trusted that has access to that secret file.
Create the secret file only once per cluster on one machine,
then copy it into the location specified by SHARED_SECRET_FILE
in
the mdce_def
file on each machine before starting
any job managers or workers. In a shared file system, all nodes can
point to the same file. Shared secrets can be reused in subsequent
sessions.
Create a shared secret file in a central location for all the nodes of the cluster:
cd matlabInstallDir/toolbox/distcomp/bin createSharedSecret -file /share/secret
Then make sure that the nodes' shared or copied mdce_def
files
set the parameter SHARED_SECRET_FILE
to /share/secret
before
starting the mdce service on each.