Locked History Actions

Diff for "Computing/LIP_Lisbon_Farm/2_How_To_Access"

Differences between revisions 9 and 13 (spanning 4 versions)
⇤ ← Revision 9 as of 2020-07-12 20:35:45 →
Size: 2536
Editor: martinsj
Comment:
← Revision 13 as of 2021-02-19 11:52:59 → ⇥
Size: 2426
Editor: martinsj
Comment:
Deletions are marked like this. Additions are marked like this.
Line 9: Line 9:
 * The access to LIP FARM it's done by ssh with public key to a remote machine based on RedHat: fermi.ncg.ingrid.pt  * The access to LIP FARM it's done by ssh with public key to a remote machine based on RedHat: pauli.ncg.ingrid.pt
Line 12: Line 12:
 * The fermi machine it's a cluster and it's composed by several machines: fermi01, fermi02, .... The access it's based on round-robin meaning for consecutive logins the users will be redirected to a different machine.  * The pauli machine it's a cluster and it's composed by several machines: pauli01, pauli02, .... The access it's based on round-robin meaning for consecutive logins the users will be redirected to a different machine.
Line 16: Line 16:
host fermi.ncg.ingrid.pt
fermi.ncg.ingrid.pt has address 193.136.75.174
fermi.ncg.ingrid.pt has address 193.136.75.175
fermi.ncg.ingrid.pt has address 193.136.75.177		 host pauli.ncg.ingrid.pt
pauli.ncg.ingrid.pt has address 193.136.75.169
pauli.ncg.ingrid.pt has address 193.136.75.174
pauli.ncg.ingrid.pt has address 193.136.75.176
Line 23: Line 23:
 * The fermi.ncg.ingrid.pt cluster it's reachable from inside LIP network and from lxplus.cern.ch machines.

Contents

  1. Access
  2. Authentication: ssh + key
  3. Login

Access

  • The access to LIP FARM it's done by ssh with public key to a remote machine based on RedHat: pauli.ncg.ingrid.pt

  • The pauli machine it's a cluster and it's composed by several machines: pauli01, pauli02, .... The access it's based on round-robin meaning for consecutive logins the users will be redirected to a different machine. 

host pauli.ncg.ingrid.pt
pauli.ncg.ingrid.pt has address 193.136.75.169
pauli.ncg.ingrid.pt has address 193.136.75.174
pauli.ncg.ingrid.pt has address 193.136.75.176
....

  • For outside access users should always use the lnlip01/02 under lip.pt domain.

Authentication: ssh + key

  • The authentication for the LIP FARM it's done exclusively trough ssh with public key.
  • In order to generate a pair of private/public keys the user should run in there local machine the ssh-keygen command.

IMPORTANT : please choose a good password 

$ ssh-keygen -b 4096
Generating public/private rsa key pair.
Enter file in which to save the key (/home/username/.ssh/id_rsa): 
Created directory '/home/username/.ssh'.
Enter passphrase (empty for no passphrase):           
Enter same passphrase again:                          
Your identification has been saved in /home/username/.ssh/id_rsa.
Your public key has been saved in /home/username/.ssh/id_rsa.pub.
The key fingerprint is:
a8:60:b3:73:aa:ed:7f:bf:88:32:7a:fc:9d:00:1d:1d username@mydesktop
The key's randomart image is:
+--[ RSA 2048]----+
|      E          |
|     . .         |
|    . .          |
|   . . .         |
|  = . . S        |
| . = .           |
| .o +            |
| .=+ +.o         |
|o=+=+.+.o.       |
+-----------------+

  • By default the pair of keys generated by ssh-keygen command will be created in the ~/.ssh/ folder. Never share your private key (id_rsa)!!! 

cd 
ls -l ~/.ssh/
total 8
-rw------- 1 username group 1743 Feb 19 10:52 id_rsa
-rw-r--r-- 1 username group  404 Feb 19 10:52 id_rsa.pub

  • Finally you should send the id_rsa.pub to helpdesk@lip.pt together with your username and corresponding group.

Login

ssh -A -l username pauli.ncg.ingrid.pt
last edited 2021-02-19 11:52:59 by martinsj