Difference between revisions of "HowTo:Access"

From CAC Wiki
Jump to: navigation, search
(Browsers)
(SSH Access)
 
(33 intermediate revisions by 3 users not shown)
Line 1: Line 1:
 +
= System Access =
 +
{|  style="border-spacing: 8px;"
 +
| valign="top" width="50%" style="padding:1em; border:1px solid #aaaaaa; background-color:#e1eaf1; border-radius:7px" |
 
== SSH Access ==
 
== SSH Access ==
  
 
'''Note:''' Access to our systems is likely to change in coming months, as we are extending and re-structuring our resources. Please revisit this page occasionally to stay abreast with any changes.
 
'''Note:''' Access to our systems is likely to change in coming months, as we are extending and re-structuring our resources. Please revisit this page occasionally to stay abreast with any changes.
  
The standard way to access our resources is though SSH.  
+
The standard way to access our resources is through '''ssh'''.  
  
For security reasons, we are currently operating only one login node that is accessible from the outside through ssh.
+
For security reasons, all access is '''indirect''' through the login node sflogin0 (sfnode0).  
The IP address for this (Solaris) login node is  
+
The IP address for this (Solaris) login node is '''130.15.59.64''', the node name is '''sfnode0.hpcvl.queensu.ca''':
 
+
: '''sfnode0.hpcvl.queensu.ca = 130.15.59.64'''
+
 
+
Make sure X-forwarding is enabled. This is necessary if you want to use any software with a graphics component. You will need your username and your system access password to get in.
+
 
+
Other nodes, particularly the Linux '''login/workup node swlogin1''' need to be accessed from sflogin0 through ssh. This requires to type the password again:
+
  
 
<pre>
 
<pre>
hpcXXXX@sflogin0$ ssh swlogin1
+
$ ssh -X hpcXXXX@sfnode0.hpcvl.queensu.ca
hpcXXXX@swlogin1's password:
+
hpcXXXX@swlogin1$
+
</pre>
+
  
'''For details about using SSH, please check our [[FAQ:SSH|SSH FAQ]]'''.
+
|-----------------------------------------------------------------|
 +
| This system is for the use of authorized users only.            |
 +
| Individuals using this computer system without authority, or in |
 +
| excess of their authority, are subject to having all of their  |
 +
| activities on this system monitored and recorded by system      |
 +
| personnel.                                                     |
 +
|                                                                |
 +
| In the course of monitoring individuals improperly using this  |
 +
| system, or in the course of system maintenance, the activities  |
 +
| of authorized users may also be monitored.                      |
 +
|                                                                |
 +
| Anyone using this system expressly consents to such monitoring  |
 +
| and is advised that if such monitoring reveals possible        |
 +
| evidence of criminal activity, system personnel may provide the |
 +
| evidence of such monitoring to law enforcement officials.      |
 +
|-----------------------------------------------------------------|
  
== Secure Grid Portal ==
+
hpcXXXX@sfnode0.hpcvl.queensu.ca's password: **********
  
===Access through the Portal===
+
Last login: Thu Jul  7 13:05:21 2016 from 130.15.59.215
 +
      This is sflogin0, a dedicated login host on the HPCVL grid
 +
        SunFire E2900, 24 x 1.8 GHz UltraSPARC-IV+, 192 GB RAM
 +
  ------------------------------------------------------------------
  
'''Note:''' Currently, portal access to our resources is provided through '''Secure Global Desktop'''. This may change in the near future. Please revisit this page to stay informed about any changes.
+
    * Please contact HPCVL User Support with questions about usage
  
The systems can be accessed from a Java enabled web browser:
+
        http://www.hpcvl.org/contact-us
  
# Visit https://portal.hpcvl.queensu.ca/ directly or press the '''Portal Login''' button on our [http://cac.queensu.ca Web Page].
+
        Email help@hpcvl.org
# Login using your '''Username and Password''' (same as for ssh).
+
# You will be brought to the '''Secure Global Desktop'''.
+
# To use any of the '''applications''' appearing on the left-hand side, such ''xterm (swlogin1)'', click on it.
+
# If the application is used for the first time, you will be prompted to provide username and password again. The portal will remember it next time. If the information changes, it will prompt you again.
+
  
=== Requirements for Portal ===
+
    * For system status updates, see
  
It is crucial to have a recent version of Java installed on your system. This includes a "Java Plugin" for the web browser. [http://java.com/en/download/installed.jsp Check your Java at this Test Page]. If you encounter portal issues they are almost invariably related to Java. Please contact us if you cannot get it to work.
+
        https://www.hpcvl.org/protectedpages/users-section
  
==== Operating Systems ====
+
    * Available packages can be listed with "use -l"
* Microsoft Windows XP, Vista, 7, 8, 10
+
* Linux Various Distributions
+
* Mac (Apple) OS-X > 10.5
+
==== Browsers ====
+
* Microsoft Internet Explorer
+
* Mozilla Firefox
+
* Apple Safari
+
* Google Chrome '''does not work''' ([https://support.google.com/chrome/answer/6213033 discontinuation of NPAPI support]).
+
  
=== Troubleshooting ===
 
  
The Portal is Java based. Most problems are due to missing or mis-configured Java plugins for your browser. Please see [http://java.com/en/download/manual.jsp http://java.com/en/download/manual.jsp] for detailed instructions for installing and configuring Java on your desktop machine.
+
hpcXXXX@sflogin0$
  
* Recently Google has dropped support for the "NPAPI" plugin protocol. Since this is used by Java (and other formats such as Silverlight) '''our portal does not work with Chrome''' (https://support.google.com/chrome/answer/6213033).
+
</pre>
  
* '''Firefox users''', pay particular attention to the 'missing plugins' indication. You will see this message when the Java run-time environment is not installed. Please [http://java.com/en/download/manual.jsp install Java] before and [http://java.com/en/download/installed.jsp test it] before attempting to sign up.
+
The first time you connect to a new system using SSH, your client will ask you something along the lines of: "do you want to connect to a system with host key fingerprint xxxxxxxx?". Pick/type "yes" to continue connecting.  
  
* If you are using '''Firefox with Adblock''' you may need to create an exception rule so that the Secure Desktop loads properly. Use this AdBlock rule: ''@@|https://portal*.hpcvl.queensu.ca'' which will white-list HPCVL for HTTPS to machines called "portal*"
+
Make sure X-forwarding is enabled, either by using the -X option in the ssh command, or including it in the default settings of the ssh client. This is necessary if you want to use any software with a graphics component. You will need your username and your system access password to get in (here, we use hpcXXXX).
  
* SGD Client Not Installed Automatically. '''Problem:''' On some systems, the SGD Client fails to download and install automatically. The SGD Client can be installed manually or can be installed automatically using another browser. '''Solution:''' For manual install, go to [https://portal.hpcvl.queensu.ca/installic_en.html this page] and download the SGD client that fits for your system. After installing, shut down the browser completely and retry.
+
'''Important : sflogin0 only serves as a first point of access. For workup purposes and job submission, you need to access other nodes, especially the Linux login/workup node swlogin1'''. This requires typing your password again:
 +
 
 +
<pre>
 +
hpcXXXX@sflogin0$ ssh swlogin1
 +
hpcXXXX@swlogin1's password:
 +
hpcXXXX@swlogin1$
 +
</pre>
  
* Missing Compatibility libraries. '''Problem: '''On Linux systems (for instance, Ubuntu) the SGD client cannot be installed. '''Solution:''' It is sometimes necessary to install additional libraries for compatibility with the SGD client. Go to [http://docs.oracle.com/cd/E51728_01/E51729/html/reqs-client.html#linux-64bit-dependencies the Oracle Platform Support page] and follow their instructions on how to install these libraries.  
+
Linux and Mac systems have an ssh client installed by default and don't require a special setup for this to work. On Windows systems, we suggest using [http://mobaxterm.mobatek.net/download-home-edition.html MobaXterm], which is free for individual usage and has many useful features (such as an Xserver client, file transfer tool, and even a local "bash shell") built in.
  
* Sometimes the automatic install fails because of Windows Security settings. '''Cause:''' Internet Explorer has a Protected Mode that prevents the SGD Client from downloading and installing automatically. '''Solution:''' Add the SGD server to the list of Trusted Sites in Internet Explorer's Security Settings.
+
=== Note for Mac Users ===
 +
If you are using a Mac to login to our systems through ssh you may have to install [https://www.xquartz.org/ XQuartz X11 Support] on your computer. This is necessary to enable the display of graphics that was generated on a Unix server. Unfortunately, newer versions of OSX [https://support.apple.com/en-ca/HT201341 don't come with native X11-Windows support].
  
* No X11 on Mac. '''Problem:''' Newer versions of MacOSX (>10.5) do not include X11 support (see [https://support.apple.com/en-ca/HT201341 this page for details]). '''Solution:''' For the portal to work, you need to install [http://www.xquartz.org/ the XQuartz XWindows System]. This is generally a good idea as this is a common system on Unix machines.
+
|}

Latest revision as of 12:32, 22 June 2017

System Access

SSH Access

Note: Access to our systems is likely to change in coming months, as we are extending and re-structuring our resources. Please revisit this page occasionally to stay abreast with any changes.

The standard way to access our resources is through ssh.

For security reasons, all access is indirect through the login node sflogin0 (sfnode0). The IP address for this (Solaris) login node is 130.15.59.64, the node name is sfnode0.hpcvl.queensu.ca:

$ ssh -X hpcXXXX@sfnode0.hpcvl.queensu.ca

|-----------------------------------------------------------------|
| This system is for the use of authorized users only.            |
| Individuals using this computer system without authority, or in |
| excess of their authority, are subject to having all of their   |
| activities on this system monitored and recorded by system      |
| personnel.                                                      |
|                                                                 |
| In the course of monitoring individuals improperly using this   |
| system, or in the course of system maintenance, the activities  |
| of authorized users may also be monitored.                      |
|                                                                 |
| Anyone using this system expressly consents to such monitoring  |
| and is advised that if such monitoring reveals possible         |
| evidence of criminal activity, system personnel may provide the |
| evidence of such monitoring to law enforcement officials.       |
|-----------------------------------------------------------------|

hpcXXXX@sfnode0.hpcvl.queensu.ca's password: **********

Last login: Thu Jul  7 13:05:21 2016 from 130.15.59.215
       This is sflogin0, a dedicated login host on the HPCVL grid
         SunFire E2900, 24 x 1.8 GHz UltraSPARC-IV+, 192 GB RAM
   ------------------------------------------------------------------

    * Please contact HPCVL User Support with questions about usage

        http://www.hpcvl.org/contact-us

        Email help@hpcvl.org

    * For system status updates, see

        https://www.hpcvl.org/protectedpages/users-section

    * Available packages can be listed with "use -l"


hpcXXXX@sflogin0$

The first time you connect to a new system using SSH, your client will ask you something along the lines of: "do you want to connect to a system with host key fingerprint xxxxxxxx?". Pick/type "yes" to continue connecting.

Make sure X-forwarding is enabled, either by using the -X option in the ssh command, or including it in the default settings of the ssh client. This is necessary if you want to use any software with a graphics component. You will need your username and your system access password to get in (here, we use hpcXXXX).

Important : sflogin0 only serves as a first point of access. For workup purposes and job submission, you need to access other nodes, especially the Linux login/workup node swlogin1. This requires typing your password again:

hpcXXXX@sflogin0$ ssh swlogin1
hpcXXXX@swlogin1's password:
hpcXXXX@swlogin1$

Linux and Mac systems have an ssh client installed by default and don't require a special setup for this to work. On Windows systems, we suggest using MobaXterm, which is free for individual usage and has many useful features (such as an Xserver client, file transfer tool, and even a local "bash shell") built in.

Note for Mac Users

If you are using a Mac to login to our systems through ssh you may have to install XQuartz X11 Support on your computer. This is necessary to enable the display of graphics that was generated on a Unix server. Unfortunately, newer versions of OSX don't come with native X11-Windows support.