Difference between revisions of "HowTo:Access"

From CAC Wiki
Jump to: navigation, search
(→‎SSH Access)
(→‎SSH Access)
 
(38 intermediate revisions by 3 users not shown)
Line 1: Line 1:
 +
= System Access =
 +
{|  style="border-spacing: 8px;"
 +
| valign="top" width="50%" style="padding:1em; border:1px solid #aaaaaa; background-color:#e1eaf1; border-radius:7px" |
 
== SSH Access ==
 
== SSH Access ==
  
 
'''Note:''' Access to our systems is likely to change in coming months, as we are extending and re-structuring our resources. Please revisit this page occasionally to stay abreast with any changes.
 
'''Note:''' Access to our systems is likely to change in coming months, as we are extending and re-structuring our resources. Please revisit this page occasionally to stay abreast with any changes.
  
−
The standard way to access our resources is though SSH.  
+
The standard way to access our resources is through '''ssh'''.  
  
−
For security reasons, we are currently operating only one login node that is accessible from the outside through ssh.
+
For security reasons, all access is '''indirect''' through the login node sflogin0 (sfnode0).  
−
The IP address for this (Solaris) login node is  
+
The IP address for this (Solaris) login node is '''130.15.59.64''', the node name is '''sfnode0.hpcvl.queensu.ca''':
  
−
: '''sfnode0.hpcvl.queensu.ca = 130.15.59.64'''
+
<pre>
 +
$ ssh -X hpcXXXX@sfnode0.hpcvl.queensu.ca
  
−
Make sure X-forwarding is enabled. This is necessary if you want to use any software with a graphics component. You will need your username and your system access password to get in.
+
|-----------------------------------------------------------------|
 +
| This system is for the use of authorized users only.           |
 +
| Individuals using this computer system without authority, or in |
 +
| excess of their authority, are subject to having all of their  |
 +
| activities on this system monitored and recorded by system      |
 +
| personnel.                                                      |
 +
|                                                                |
 +
| In the course of monitoring individuals improperly using this  |
 +
| system, or in the course of system maintenance, the activities  |
 +
| of authorized users may also be monitored.                     |
 +
|                                                                |
 +
| Anyone using this system expressly consents to such monitoring  |
 +
| and is advised that if such monitoring reveals possible        |
 +
| evidence of criminal activity, system personnel may provide the |
 +
| evidence of such monitoring to law enforcement officials.      |
 +
|-----------------------------------------------------------------|
  
−
Other nodes, particularly the Linux login/workup node '''swlogin1''' need to be accessed from sflogin0 through the command
+
hpcXXXX@sfnode0.hpcvl.queensu.ca's password: **********
  
−
<pre>sflogin0$ ssh -X swlogin1</pre>
+
Last login: Thu Jul  7 13:05:21 2016 from 130.15.59.215
 +
      This is sflogin0, a dedicated login host on the HPCVL grid
 +
        SunFire E2900, 24 x 1.8 GHz UltraSPARC-IV+, 192 GB RAM
 +
  ------------------------------------------------------------------
  
−
followed by the system access password.
+
    * Please contact HPCVL User Support with questions about usage
  
−
'''For details about using SSH, please check our [[FAQ:SSH|SSH FAQ]]'''.
+
        http://www.hpcvl.org/contact-us
  
−
== Secure Grid Portal and Access ==
+
        Email help@hpcvl.org
  
−
The standard access to HPCVL resources is through our Portal, also known as '''"Secure Global Desktop"'''. New users are required, and all of our users are strongly encouraged to sign up for Portal access. Access through SSH clients, while still possible, is meant only as a fail-safe if you encounter issues with the portal.
+
    * For system status updates, see
  
−
=== Signing Up For Portal Access ===
+
        https://www.hpcvl.org/protectedpages/users-section
  
−
'''No separate Portal Access Procedure is required at this point.''' You use the temporary password that was sent to you when your account was activated for [https://portal.hpcvl.queensu.ca login to the portal]. After you logged in for the first time, you should use the "Change Compute Cluster Password" application at the top left to change your password.
+
    * Available packages can be listed with "use -l"
  
−
Note that portal access requires a recent version of Java. Use the [http://java.com/en/download/installed.jsp Java Test Page] to make sure your Java is working properly. If there are any problems, please address this issue first. After pressing the "Agree and Continue" button you should receive a message indicating that the latest version is installed.
 
  
−
=== Using the Portal ===
+
hpcXXXX@sflogin0$
  
−
Once you have signed up for portal access, it is easy to access our systems from any Java enabled web browser:
+
</pre>
  
−
# Visit https://portal.hpcvl.queensu.ca/ directly or press the '''Portal Login''' buttom in the upper right corner of our [http://hpcvl.org Web Page].
+
The first time you connect to a new system using SSH, your client will ask you something along the lines of: "do you want to connect to a system with host key fingerprint xxxxxxxx?". Pick/type "yes" to continue connecting.  
−
# Log in using your '''username''' ''hpcXXXX'' and your '''Password''' (you can change this from an application inside the portal).
+
−
# You will be brought to the '''Secure Global Desktop''' page.
+
−
# To use any of the '''applications''' appearing on the left-hand side, such ''xterm (sflogin0)'', click on it.
+
−
# If the application is used for the first time, you will be prompted to log in. For this, you use your username and the '''login password'''. The Secure Desktop will remember username and password for the application, and automatically use it next time. If the information has changed (for instance, you changed your login password), it will prompt you again.
+
−
# We suggest to use the '''Change Compute Cluster Password''' application near the top of the application list to change the login password you received to be the same as the portal password that you chose yourself and that was used to access the portal. This way you will have to remember only a single password of your own. You may have to re-type it when you are access applications the first time after changing, but it will be remembered after that.
+
  
−
=== Requirements for Portal ===
+
Make sure X-forwarding is enabled, either by using the -X option in the ssh command, or including it in the default settings of the ssh client. This is necessary if you want to use any software with a graphics component. You will need your username and your system access password to get in (here, we use hpcXXXX).
  
−
It is crucial to have a recent (preferably the latest) version of Java installed on your system. This includes a "Java Plugin" for the web browser.  [http://java.com/en/download/installed.jsp Check your Java at this Test Page]. The latest Java Runtime Environment (JRE) may be downloaded freely from Oracle for most platforms. If you encounter portal issues they are almost invariably related to Java. Please contact us if you cannot get it to work.
+
'''Important : sflogin0 only serves as a first point of access. For workup purposes and job submission, you need to access other nodes, especially the Linux login/workup node swlogin1'''. This requires typing your password again:
  
−
==== Operating Systems ====
+
<pre>
−
* Microsoft Windows XP, Vista, 7, 8
+
hpcXXXX@sflogin0$ ssh swlogin1
−
* Oracle (Sun) Solaris 9, 10, 11
+
hpcXXXX@swlogin1's password:
−
* Linux Various Distributions
+
hpcXXXX@swlogin1$
−
* Mac (Apple) OS-X > 10.5
+
</pre>
−
==== Browsers ====
+
−
* Microsoft Internet Explorer
+
−
* Mozilla Firefox
+
−
* Apple Safari
+
−
* Opera (Windows only)
+
−
* Some Linux systems use Java plugins (e.g. "Iced Tea") that are not compatible with the Secure Global Desktop used in our portal. Try installing the latest version of the Oracle Java Plugin.
+
−
* Google Chrome '''does not work''' due to the recent discontinuation of support for NPAPI plugins (https://support.google.com/chrome/answer/6213033)
+
  
−
=== Troubleshooting ===
+
Linux and Mac systems have an ssh client installed by default and don't require a special setup for this to work. On Windows systems, we suggest using [http://mobaxterm.mobatek.net/download-home-edition.html MobaXterm], which is free for individual usage and has many useful features (such as an Xserver client, file transfer tool, and even a local "bash shell") built in.
  
−
The Portal is Java based. Most problems are due to missing or mis-configured Java plugins for your browser. Please see [http://java.com/en/download/manual.jsp http://java.com/en/download/manual.jsp] for detailed instructions for installing and configuring Java on your desktop machine.
+
=== Note for Mac Users ===
 +
If you are using a Mac to login to our systems through ssh you may have to install [https://www.xquartz.org/ XQuartz X11 Support] on your computer. This is necessary to enable the display of graphics that was generated on a Unix server. Unfortunately, newer versions of OSX [https://support.apple.com/en-ca/HT201341 don't come with native X11-Windows support].
  
−
* Recently Google has dropped support for the "NPAPI" plugin protocol. Since this is used by Java (and other formats such as Silverlight) '''our portal does not work with Chrome''' (https://support.google.com/chrome/answer/6213033).
+
|}
−
 
+
−
* '''Firefox users''', pay particular attention to the 'missing plugins' indication. You will see this message when the Java run-time environment is not installed. Please [http://java.com/en/download/manual.jsp install Java] before and [http://java.com/en/download/installed.jsp test it] before attempting to sign up.
+
−
 
+
−
* If you are using '''Firefox with Adblock''' you may need to create an exception rule so that the Secure Desktop loads properly. Use this AdBlock rule: ''@@|https://portal*.hpcvl.queensu.ca'' which will white-list HPCVL for HTTPS to machines called "portal*"
+
−
 
+
−
* SGD Client Not Installed Automatically. '''Problem:''' On some systems, the SGD Client fails to download and install automatically. The SGD Client can be installed manually or can be installed automatically using another browser. '''Solution:''' For manual install, go to [https://portal.hpcvl.queensu.ca/installic_en.html this page] and download the SGD client that fits for your system. After installing, shut down the browser completely and retry.
+
−
 
+
−
* Missing Compatibility libraries. '''Problem: '''On Linux systems (for instance, Ubuntu) the SGD client cannot be installed. '''Solution:''' It is sometimes necessary to install additional libraries for compatibility with the SGD client. Go to [http://docs.oracle.com/cd/E51728_01/E51729/html/reqs-client.html#linux-64bit-dependencies the Oracle Platform Support page] and follow their instructions on how to install these libraries.
+
−
 
+
−
* Sometimes the automatic install fails because of Windows Security settings. '''Cause:''' Internet Explorer has a Protected Mode that prevents the SGD Client from downloading and installing automatically. '''Solution:''' Add the SGD server to the list of Trusted Sites in Internet Explorer's Security Settings.
+
−
 
+
−
* No X11 on Mac. '''Problem:''' Newer versions of MacOSX (>10.5) do not include X11 support (see [https://support.apple.com/en-ca/HT201341 this page for details]). '''Solution:''' For the portal to work, you need to install [http://www.xquartz.org/ the XQuartz XWindows System]. This is generally a good idea as this is a common system on Unix machines.
+

Latest revision as of 12:32, 22 June 2017

System Access

SSH Access

Note: Access to our systems is likely to change in coming months, as we are extending and re-structuring our resources. Please revisit this page occasionally to stay abreast with any changes.

The standard way to access our resources is through ssh.

For security reasons, all access is indirect through the login node sflogin0 (sfnode0). The IP address for this (Solaris) login node is 130.15.59.64, the node name is sfnode0.hpcvl.queensu.ca: 

$ ssh -X hpcXXXX@sfnode0.hpcvl.queensu.ca

|-----------------------------------------------------------------|
| This system is for the use of authorized users only.            |
| Individuals using this computer system without authority, or in |
| excess of their authority, are subject to having all of their   |
| activities on this system monitored and recorded by system      |
| personnel.                                                      |
|                                                                 |
| In the course of monitoring individuals improperly using this   |
| system, or in the course of system maintenance, the activities  |
| of authorized users may also be monitored.                      |
|                                                                 |
| Anyone using this system expressly consents to such monitoring  |
| and is advised that if such monitoring reveals possible         |
| evidence of criminal activity, system personnel may provide the |
| evidence of such monitoring to law enforcement officials.       |
|-----------------------------------------------------------------|

hpcXXXX@sfnode0.hpcvl.queensu.ca's password: **********

Last login: Thu Jul  7 13:05:21 2016 from 130.15.59.215
       This is sflogin0, a dedicated login host on the HPCVL grid
         SunFire E2900, 24 x 1.8 GHz UltraSPARC-IV+, 192 GB RAM
   ------------------------------------------------------------------

    * Please contact HPCVL User Support with questions about usage

        http://www.hpcvl.org/contact-us

        Email help@hpcvl.org

    * For system status updates, see

        https://www.hpcvl.org/protectedpages/users-section

    * Available packages can be listed with "use -l"


hpcXXXX@sflogin0$

The first time you connect to a new system using SSH, your client will ask you something along the lines of: "do you want to connect to a system with host key fingerprint xxxxxxxx?". Pick/type "yes" to continue connecting.

Make sure X-forwarding is enabled, either by using the -X option in the ssh command, or including it in the default settings of the ssh client. This is necessary if you want to use any software with a graphics component. You will need your username and your system access password to get in (here, we use hpcXXXX).

Important : sflogin0 only serves as a first point of access. For workup purposes and job submission, you need to access other nodes, especially the Linux login/workup node swlogin1. This requires typing your password again: 

hpcXXXX@sflogin0$ ssh swlogin1
hpcXXXX@swlogin1's password:
hpcXXXX@swlogin1$

Linux and Mac systems have an ssh client installed by default and don't require a special setup for this to work. On Windows systems, we suggest using MobaXterm, which is free for individual usage and has many useful features (such as an Xserver client, file transfer tool, and even a local "bash shell") built in.

Note for Mac Users

If you are using a Mac to login to our systems through ssh you may have to install XQuartz X11 Support on your computer. This is necessary to enable the display of graphics that was generated on a Unix server. Unfortunately, newer versions of OSX don't come with native X11-Windows support.

Retrieved from ‘https://info.cac.queensu.ca/wiki/index.php?title=HowTo:Access&oldid=1471’