HPC/Network Access: Difference between revisions

From CNM Wiki
< HPC
Jump to navigation Jump to search
 
(27 intermediate revisions by the same user not shown)
Line 3: Line 3:
| __TOC__
| __TOC__
|}
|}
== Carbon Login Nodes ==
== Accessing Carbon ==
Connect with a [http://en.wikipedia.org/wiki/Secure_Shell '''Secure Shell'''] client program to
  '''clogin.cnm.anl.gov'''
This will work directly only from '''an Argonne-operated workstation'''.


From '''any other computer''' employ one of the following mechanisms:
=== Requirements ===
* SSH gateway (available for all users),
To use Carbon, you must:
* [https://credentials.anl.gov/VPN Argonne VPN] (available for Argonne employees only).
* be entered as a ''participant'' on an active user proposal, by your Argonne ''badge number'',
For either mechanism, authenticate yourself with your Argonne domain login and password.
* have an Argonne computer account, which has:
Your domain login will usually remain active for the duration of your proposal.
** a ''personalized password'', (i.e., you changed it after the account has been created, or updated it within the last 6 months), and
You must renew your password about every 6 months (you will usually receive a reminder by email).
** a ''personalized user name''.


== Using the SSH gateway ==
If you do not meet any one of those requirements, see our [[HPC/FAQ|'''FAQ''']], in particular the sections:
The CNM SSH gateway is a Unix-style machine at the host name:
* [[HPC/FAQ#Account Types|Account Types]]
  '''mega.cnm.anl.gov'''
* [[HPC/FAQ#Getting started on a proposal|Getting started on a proposal]]
* You will always have to '''type in your domain password''' to ''establish'' a tunnel.
* [[HPC/FAQ#Adding users to a proposal|Adding users to a proposal]]
* You will '''not have a home directory''' on this machine – it is neither strictly required nor needed for the tunneling functionality.
* [[HPC/FAQ#Follow-up actions required by the User|Follow-up actions required by the User]]
* '''Do not type any command on this machine''' - it is only needed to establish a tunnel.
 
Please direct questions and follow-up to the CNM User Office, as linked in the FAQ.


[[Image:Using Carbon - II Remote Access - Title.png|right|200px|border]]
=== Access from inside the CNM using an Argonne-owned computer ===
To ''use'' the tunnel for interactive operations and file transfer on the end systems,
Connect with a [http://en.wikipedia.org/wiki/Secure_Shell ''Secure Shell''] client program directly to {{host|carbon.cnm.anl.gov}}.
ssh public keys are normally permissible and must be placed at the end machines.


Additional information:
=== Access from anywhere else ===
* [[media:HPC Using Carbon - II Remote Access.pdf|Slides from a talk ''Using Carbon - II Remote Access'' (PDF)]]
Use one of the following:
* Argonne employees may wish to log into the [https://credentials.anl.gov/VPN Argonne VPN] first, then access the Carbon login nodes.
* Otherwise, use CNM's SSH gateway {{host|mega.cnm.anl.gov}} (see next section for details).
** You must be CNM staff or a user on a CNM proposal that is active or has recently expired (within the last 6 weeks).
** Use the user name and password of your Argonne account to log in.
** Do not run any commands or store any files on this machine. The gateway is needed for port forwarding only.


=== Tunnel Setup ===
== Using the SSH gateway ==
[[Image:Using Carbon - II Remote Access - Title.png|right|200px|border]]
=== Setup for interactive use and file transfers ===
* [[HPC/Network Access/SSH Tunnel Setup on Linux and MacOS| Linux, MacOS, and Cygwin]]
* [[HPC/Network Access/SSH Tunnel Setup on Linux and MacOS| Linux, MacOS, and Cygwin]]
* [[HPC/Network Access/PuTTY Configuration| Windows (using PuTTY)]]
* [[HPC/Network Access/PuTTY Configuration| Windows (using PuTTY)]]
* TODO: Windows alternate software.
* [[HPC/Network Access/WinSCP Configuration| Windows (using WinSCP)]]


=== SSH GUI Applications ===
=== SSH GUI Applications ===
* [[HPC/Network Access/MacOS GUI Applications for SSH| MacOS]]
* [[HPC/Network Access/Mac OS X Applications for SSH|Mac OS X]]
* [[HPC/Network Access/Windows Applications for SSH| Windows]]
* [[HPC/Network Access/Windows Applications for SSH|Windows]]
* [[HPC/Network Access/Virtual Desktop|Virtual Desktop]] (VNC)


<!--
=== Note for CNM workstations on the APS network ===
=== Note for CNM workstations on the APS network ===
For users with workstations that are still on the APS networks, there is a conflict of kerberos tickets.
For users with workstations that are still on the APS networks, there is a conflict of kerberos tickets.
Prior to accessing the cluster, the APS ticket must be destroyed, so that the ANL.GOV ticket may be used.
Prior to accessing the cluster, the APS ticket must be destroyed, so that the ANL.GOV ticket may be used.
To do this, use the <strong>kdestroy(8)</strong> command or, on Mac OS X, <strong>/System/Library/CoreServices/Kerberos.app</strong> .  (Anthony Avarca)
To do this, use the <strong>kdestroy(8)</strong> command or, on Mac OS X, <strong>/System/Library/CoreServices/Kerberos.app</strong> .  (Anthony Avarca)
-->
Additional information:
* [[media:HPC Using Carbon - II Remote Access.pdf|Slides from a talk ''Using Carbon - II Remote Access'' (PDF)]]


== Password Policies ==
== Password Policies ==

Latest revision as of 17:42, December 21, 2020

HPC-Main-external.jpg

Carbon Cluster
User Information

Accessing Carbon

Requirements

To use Carbon, you must:

  • be entered as a participant on an active user proposal, by your Argonne badge number,
  • have an Argonne computer account, which has:
    • a personalized password, (i.e., you changed it after the account has been created, or updated it within the last 6 months), and
    • a personalized user name.

If you do not meet any one of those requirements, see our FAQ, in particular the sections:

Please direct questions and follow-up to the CNM User Office, as linked in the FAQ.

Access from inside the CNM using an Argonne-owned computer

Connect with a Secure Shell client program directly to carbon.cnm.anl.gov.

Access from anywhere else

Use one of the following:

  • Argonne employees may wish to log into the Argonne VPN first, then access the Carbon login nodes.
  • Otherwise, use CNM's SSH gateway mega.cnm.anl.gov (see next section for details).
    • You must be CNM staff or a user on a CNM proposal that is active or has recently expired (within the last 6 weeks).
    • Use the user name and password of your Argonne account to log in.
    • Do not run any commands or store any files on this machine. The gateway is needed for port forwarding only.

Using the SSH gateway

Using Carbon - II Remote Access - Title.png

Setup for interactive use and file transfers

SSH GUI Applications


Additional information:

Password Policies

The methods described above will grant you, the holder of your Argonne domain password and private ssh key, access to your account on Carbon. As with any Argonne computer system, the following rules apply:

  • Keep passphrases and passwords private – do not share them with anyone, including administrators that you know or don't know.
  • Keep your private key file private - do not share it with anyone.
  • Use a strong passphrase following DOE password regulations.
Retrieved from "https://wiki.anl.gov/wiki_cnm/index.php?title=HPC/Network_Access&oldid=6771"