HPC/Network Access: Difference between revisions

From CNM Wiki
< HPC
Jump to navigation Jump to search
mNo edit summary
Line 3: Line 3:
| __TOC__
| __TOC__
|}
|}
== Carbon Login Nodes ==
== Accessing Carbon ==
To use Carbon you need an active user proposal and your Argonne domain username and password.
You must renew your password about every 6 months.


=== From an Argonne-operated workstation ===
=== From an Argonne-operated workstation ===
Connect with a [http://en.wikipedia.org/wiki/Secure_Shell ''Secure Shell''] client program to
Connect with a [http://en.wikipedia.org/wiki/Secure_Shell ''Secure Shell''] client program to '''clogin.cnm.anl.gov'''.
:; clogin.cnm.anl.gov:


=== From any other computer ===
=== From any other computer ===
Line 13: Line 14:
* SSH gateway (available for all users – see below),
* SSH gateway (available for all users – see below),
* [https://credentials.anl.gov/VPN Argonne VPN] (available for Argonne employees only).
* [https://credentials.anl.gov/VPN Argonne VPN] (available for Argonne employees only).
For either mechanism, authenticate yourself with your Argonne domain login and password.
Your domain login will usually remain active for the duration of your proposal.
You must renew your password about every 6 months (you will usually receive a reminder by email).


== Using the SSH gateway ==
== Using the SSH gateway ==
The CNM SSH gateway is a Unix-style machine at the host name:
:; mega.cnm.anl.gov:
* You will always have to ''type in your domain password'' to ''establish'' a tunnel.
* You will ''not have a home directory'' on this machine – it is neither strictly required nor needed for the tunneling functionality.
* ''Do not type any command on this machine'' - it is only needed to establish a tunnel.
[[Image:Using Carbon - II Remote Access - Title.png|right|200px|border]]
[[Image:Using Carbon - II Remote Access - Title.png|right|200px|border]]
To ''use'' the tunnel for interactive operations and file transfer on the end systems,
The CNM SSH gateway is a Unix-style machine '''mega.cnm.anl.gov'''.
ssh public keys are normally permissible and must be placed at the end machines.
* You must use a password to connect to mega. For subsequent forwarded connections you may use ssh public keys.
* This computer is only used for port forwarding. You do not need to run any commands or store any files on it once your ssh program is properly configured.


Additional information:
Additional information:
* [[media:HPC Using Carbon - II Remote Access.pdf|Slides from a talk ''Using Carbon - II Remote Access'' (PDF)]]
* [[media:HPC Using Carbon - II Remote Access.pdf|Slides from a talk ''Using Carbon - II Remote Access'' (PDF)]]


=== Tunnel Setup ===
=== Setup ===
* [[HPC/Network Access/SSH Tunnel Setup on Linux and MacOS| Linux, MacOS, and Cygwin]]
* [[HPC/Network Access/SSH Tunnel Setup on Linux and MacOS| Linux, MacOS, and Cygwin]]
* [[HPC/Network Access/PuTTY Configuration| Windows (using PuTTY)]]
* [[HPC/Network Access/PuTTY Configuration| Windows (using PuTTY)]]

Revision as of 17:51, October 17, 2012

HPC-Main-external.jpg

Carbon Cluster
User Information

Accessing Carbon

To use Carbon you need an active user proposal and your Argonne domain username and password. You must renew your password about every 6 months.

From an Argonne-operated workstation

Connect with a Secure Shell client program to clogin.cnm.anl.gov.

From any other computer

Employ one of the following mechanisms:

  • SSH gateway (available for all users – see below),
  • Argonne VPN (available for Argonne employees only).

Using the SSH gateway

Using Carbon - II Remote Access - Title.png

The CNM SSH gateway is a Unix-style machine mega.cnm.anl.gov.

  • You must use a password to connect to mega. For subsequent forwarded connections you may use ssh public keys.
  • This computer is only used for port forwarding. You do not need to run any commands or store any files on it once your ssh program is properly configured.

Additional information:

Setup

SSH GUI Applications

Note for CNM workstations on the APS network

For users with workstations that are still on the APS networks, there is a conflict of kerberos tickets. Prior to accessing the cluster, the APS ticket must be destroyed, so that the ANL.GOV ticket may be used. To do this, use the kdestroy(8) command or, on Mac OS X, /System/Library/CoreServices/Kerberos.app . (Anthony Avarca)

Password Policies

The methods described above will grant you, the holder of your Argonne domain password and private ssh key, access to your account on Carbon. As with any Argonne computer system, the following rules apply:

  • Keep passphrases and passwords private – do not share them with anyone, including administrators that you know or don't know.
  • Keep your private key file private - do not share it with anyone.
  • Use a strong passphrase following DOE password regulations.
Retrieved from "https://wiki.anl.gov/wiki_cnm/index.php?title=HPC/Network_Access&oldid=4097"