Locked History Actions

Diff for "Computing/LIP_Lisbon_Farm/2_How_To_Access"

Differences between revisions 1 and 13 (spanning 12 versions)
Revision 1 as of 2016-12-07 14:22:16
Size: 2292
Editor: jpina
Comment:
Revision 13 as of 2021-02-19 11:52:59
Size: 2426
Editor: martinsj
Comment:
Deletions are marked like this. Additions are marked like this.
Line 1: Line 1:
## page was renamed from Computing/LIP_Lisbon_Farm/How_To_Access
## page was renamed from Computing/LIP_Farm/How_To_Access
Line 4: Line 6:
= Resources =
 * The access ti LIP FARM it's done by ssh with public key to a remote machine based on RedHat: fermi.ncg.ingrid.pt
= Access =
Line 8: Line 9:
 * The fermi machine it's a cluster and it's composed by several machines: fermi01, fermi02, .... The access it's based on round-robin meaning for consecutive logins the users will be redirected to a different machine.  * The access to LIP FARM it's done by ssh with public key to a remote machine based on RedHat: pauli.ncg.ingrid.pt


 * The pauli machine
it's a cluster and it's composed by several machines: pauli01, pauli02, .... The access it's based on round-robin meaning for consecutive logins the users will be redirected to a different machine.
Line 12: Line 16:
host fermi.ncg.ingrid.pt
fermi.ncg.ingrid.pt has address 193.136.75.174
fermi.ncg.ingrid.pt has address 193.136.75.175
fermi.ncg.ingrid.pt has address 193.136.75.177
host pauli.ncg.ingrid.pt
pauli.ncg.ingrid.pt has address 193.136.75.169
paul
i.ncg.ingrid.pt has address 193.136.75.174
pauli.ncg.ingrid.pt has address 193.136.75.176
....
Line 17: Line 22:

 * For '''outside access users''' should always use the lnlip01/02 under lip.pt domain.
Line 26: Line 34:
$ ssh-keygen $ ssh-keygen -b 4096
Line 61: Line 69:
 * Finally you should send the id_rsa.pub to helpdesk@lip.pt together with your username and corresponding group.
Line 64: Line 74:
ssh -A -l username fermi.ncg.ingrid.pt ssh -A -l username pauli.ncg.ingrid.pt
Line 66: Line 76:

= Access =

 * The fermi.ncg.ingrid.pt cluster it's reachable from inside LIP network and from lxplus.cern.ch machines.
 * For '''outside access users''' should always use the lnlip01/02 under lip.pt domain.

Access

  • The access to LIP FARM it's done by ssh with public key to a remote machine based on RedHat: pauli.ncg.ingrid.pt

  • The pauli machine it's a cluster and it's composed by several machines: pauli01, pauli02, .... The access it's based on round-robin meaning for consecutive logins the users will be redirected to a different machine.

host pauli.ncg.ingrid.pt
pauli.ncg.ingrid.pt has address 193.136.75.169
pauli.ncg.ingrid.pt has address 193.136.75.174
pauli.ncg.ingrid.pt has address 193.136.75.176
....
  • For outside access users should always use the lnlip01/02 under lip.pt domain.

Authentication: ssh + key

  • The authentication for the LIP FARM it's done exclusively trough ssh with public key.
  • In order to generate a pair of private/public keys the user should run in there local machine the ssh-keygen command.

IMPORTANT : please choose a good password

$ ssh-keygen -b 4096
Generating public/private rsa key pair.
Enter file in which to save the key (/home/username/.ssh/id_rsa): 
Created directory '/home/username/.ssh'.
Enter passphrase (empty for no passphrase):           
Enter same passphrase again:                          
Your identification has been saved in /home/username/.ssh/id_rsa.
Your public key has been saved in /home/username/.ssh/id_rsa.pub.
The key fingerprint is:
a8:60:b3:73:aa:ed:7f:bf:88:32:7a:fc:9d:00:1d:1d username@mydesktop
The key's randomart image is:
+--[ RSA 2048]----+
|      E          |
|     . .         |
|    . .          |
|   . . .         |
|  = . . S        |
| . = .           |
| .o +            |
| .=+ +.o         |
|o=+=+.+.o.       |
+-----------------+
  • By default the pair of keys generated by ssh-keygen command will be created in the ~/.ssh/ folder. Never share your private key (id_rsa)!!!

cd 
ls -l ~/.ssh/
total 8
-rw------- 1 username group 1743 Feb 19 10:52 id_rsa
-rw-r--r-- 1 username group  404 Feb 19 10:52 id_rsa.pub
  • Finally you should send the id_rsa.pub to helpdesk@lip.pt together with your username and corresponding group.

Login

ssh -A -l username pauli.ncg.ingrid.pt