NEMO2/Login - Revision history

M Janczyk: /* Related Information */

2025-07-21T17:21:04Z

Related Information

← Older revision		Revision as of 19:21, 21 July 2025
Line 134:		Line 134:
	= Related Information =		= Related Information =

			* If you have login issues, consult the [[NEMO2/FAQ]].
			* If you want to check if your account is still valid on NEMO2, consult the [[Registration/Account\|Account Guide]].
	* If you want to reset your service password, consult the [[Registration/Password\|Password Guide]].		* If you want to reset your service password, consult the [[Registration/Password\|Password Guide]].
			* If you want to create a second factor, consult the [[Registration/2FA\|Second Factor Guide]].
	* If you want to de-register, consult the [[Registration/Deregistration\|De-registration Guide]].		* If you want to de-register, consult the [[Registration/Deregistration\|De-registration Guide]].
	* If you need an SSH key for your workflow, read [[Registration/SSH\|Registering SSH Keys with your Cluster]].		* If you need an SSH key for your workflow, read [[Registration/SSH\|Registering SSH Keys with your Cluster]].

M Janczyk at 12:45, 24 June 2025

2025-06-24T12:45:22Z

← Older revision		Revision as of 14:45, 24 June 2025
Line 41:		Line 41:
	! Hostname !! Node type		! Hostname !! Node type
	\|-		\|-
	\| '''~~nemo2-~~login.nemo.uni-freiburg.de''' \|\| NEMO2 first or second login node		\| '''login.nemo.uni-freiburg.de''' \|\| NEMO2 first or second login node
	\|-		\|-
	\| '''~~nemo2-~~login1.nemo.uni-freiburg.de''' \|\| NEMO2 first login node		\| '''login1.nemo.uni-freiburg.de''' \|\| NEMO2 first login node
	\|-		\|-
	\| '''~~nemo2-~~login2.nemo.uni-freiburg.de''' \|\| NEMO2 second login node		\| '''login2.nemo.uni-freiburg.de''' \|\| NEMO2 second login node
	\|-		\|-
	\|}		\|}
Line 58:		Line 58:
	For login use one of the following ssh commands:		For login use one of the following ssh commands:

	ssh <username>@~~nemo2-~~login.nemo.uni-freiburg.de		ssh <username>@login.nemo.uni-freiburg.de
	ssh -l <username> ~~nemo2-~~login.nemo.uni-freiburg.de		ssh -l <username> login.nemo.uni-freiburg.de

	To run graphical applications, you can use the <code>-X</code> or <code>-Y</code> flag to <code>ssh</code>:		To run graphical applications, you can use the <code>-X</code> or <code>-Y</code> flag to <code>ssh</code>:

	ssh -Y -l <username> ~~nemo2-~~login.nemo.uni-freiburg.de		ssh -Y -l <username> login.nemo.uni-freiburg.de

	For better graphical performance, we recommend using the VNC module on the cluster: 'module load vis/turbovnc'.		For better graphical performance, we recommend using the VNC module on the cluster: 'module load vis/turbovnc'.
Line 73:		Line 73:
	Start ''MobaXterm'', fill in the following fields:		Start ''MobaXterm'', fill in the following fields:
	<pre>		<pre>
	Remote name : ~~nemo2-~~login.nemo.uni-freiburg.de # or ~~nemo2-~~login1.nemo.uni-freiburg.de, ~~nemo2-~~login2.nemo.uni-freiburg.de		Remote name : login.nemo.uni-freiburg.de # or login1.nemo.uni-freiburg.de, login2.nemo.uni-freiburg.de
	Specify user name : <username>		Specify user name : <username>
	Port : 22		Port : 22
Line 91:		Line 91:
	<pre>		<pre>

	~ $ ssh fr_vwxyz1234@~~nemo2-~~login.nemo.uni-freiburg.de		~ $ ssh fr_vwxyz1234@login.nemo.uni-freiburg.de
	The authenticity of host '~~nemo2-~~login.nemo.uni-freiburg.de (<no hostip for proxy command>)' can't be established.		The authenticity of host 'login.nemo.uni-freiburg.de (<no hostip for proxy command>)' can't be established.
	ED25519 key fingerprint is SHA256:8t+lpTeEba0TmZHvSfMyrQn4WWaqquBoT3hvWRuXdGo.		ED25519 key fingerprint is SHA256:8t+lpTeEba0TmZHvSfMyrQn4WWaqquBoT3hvWRuXdGo.
	This host key is known by the following other names/addresses:		This host key is known by the following other names/addresses:
	...		...
	Are you sure you want to continue connecting (yes/no/[fingerprint])? yes		Are you sure you want to continue connecting (yes/no/[fingerprint])? yes
	Warning: Permanently added '~~nemo2-~~login.nemo.uni-freiburg.de' (ED25519) to the list of known hosts.		Warning: Permanently added 'login.nemo.uni-freiburg.de' (ED25519) to the list of known hosts.
	(fr_vwxyz1234@~~nemo2-~~login.nemo.uni-freiburg.de) Your OTP: 123456		(fr_vwxyz1234@login.nemo.uni-freiburg.de) Your OTP: 123456
	(fr_vwxyz1234@~~nemo2-~~login.nemo.uni-freiburg.de) Password:		(fr_vwxyz1234@login.nemo.uni-freiburg.de) Password:
	Last login: Tue Mar 4 13:48:19 2025 from 132.230.103.17		Last login: Tue Mar 4 13:48:19 2025 from 132.230.103.17
	[fr_vwxyz1234@~~login3~~ ~]$		[fr_vwxyz1234@login1 ~]$
	</pre>		</pre>

M Janczyk at 11:05, 19 March 2025

2025-03-19T11:05:49Z

@@ Line 17: / Line 17: @@
 * [[Registration/Password|set a service password]] for NEMO2.
 * [[Registration/2FA|set up a second factor (one-time password, OTP)]]
@@ Line 111: / Line 104: @@
 </pre>
@@ Line 168: / Line 136: @@
 * If you want to reset your service password, consult the [[Registration/Password|Password Guide]].
 * If you want to de-register, consult the [[Registration/Deregistration|De-registration Guide]].
 * Configuring your shell: [[.bashrc Do's and Don'ts]]

M Janczyk: Created page with "{|style="background:#deffee; width:100%;" |style="padding:5px; background:#cef2e0; text-align:left"| 25px |style="padding:5px; background:#cef2e0; text-align:left"| Access to NEMO2 is '''limited to IP addresses from the BelWü network'''. All home institutions of our current users are connected to BelWü, so if you are on your campus network (e.g. in your office or on the campus WiFi) you should be able to connect to NEMO2 without restricti..."

2025-03-04T13:20:45Z

Created page with "{|style="background:#deffee; width:100%;" |style="padding:5px; background:#cef2e0; text-align:left"| center|25px |style="padding:5px; background:#cef2e0; text-align:left"| Access to NEMO2 is '''limited to IP addresses from the BelWü network'''. All home institutions of our current users are connected to BelWü, so if you are on your campus network (e.g. in your office or on the campus WiFi) you should be able to connect to NEMO2 without restricti..."

New page

{|style="background:#deffee; width:100%;"
|style="padding:5px; background:#cef2e0; text-align:left"|
[[Image:Attention.svg|center|25px]]
|style="padding:5px; background:#cef2e0; text-align:left"|
Access to NEMO2 is '''limited to IP addresses from the BelWü network'''.
All home institutions of our current users are connected to BelWü, so if you are on your campus network (e.g. in your office or on the campus WiFi) you should be able to connect to NEMO2 without restrictions.
If you are outside one of the BelWü networks (e.g. at home), a VPN connection to the home institution or a connection to an SSH jump host at the home institution must be established first.
|}

The login nodes of the bwHPC clusters are the access point to the compute system, your <code>$HOME</code> directory and your workspaces.
All users must log in through these nodes to submit jobs to the cluster.

'''Prerequisites for successful login:'''

You need to have
* completed the 3-step [[registration]] procedure.
* [[Registration/Password|set a service password]] for NEMO2.
* [[Registration/2FA|set up a second factor (one-time password, OTP)]]

{|style="background:#deffee; width:100%;"
|style="padding:5px; background:#cef2e0; text-align:left"|
[[Image:Attention.svg|center|25px]]
|style="padding:5px; background:#cef2e0; text-align:left"|
The NEMO2 registration continues to use the old registration page https://bwservices.uni-freiburg.de, while the second factor (2FA) must be configured on the new registration page https://login.bwidm.de. https://login.bwidm.de is not used for anything else so far!
|}

= Login to bwForCluster NEMO 2 =

Login to bwForCluster NEMO 2 is only possible with a Secure Shell (SSH) client for which you must know your username on the cluster and the hostname of the login nodes.
For more general information on SSH clients, visit the [[Registration/Login/Client|SSH clients Guide]].

== Username ==

If you want to use the NEMO2 cluster you need to add a prefix to your local username.
For prefixes please refer to the [[Registration/Login/Username|'''Username Wiki''']].

Example:<br/>
* If your local username for the University is <code>vwxyz1234</code> and you are a user from the University of Freiburg this would combine to: <code>fr_vwxyz1234</code>.

== Hostnames ==

The system has two login nodes.
You have to select the login node yourself.

{| class="wikitable"
! Hostname !! Node type
|-
| '''nemo2-login.nemo.uni-freiburg.de''' || NEMO2 first or second login node
|-
| '''nemo2-login1.nemo.uni-freiburg.de''' || NEMO2 first login node
|-
| '''nemo2-login2.nemo.uni-freiburg.de''' || NEMO2 second login node
|-
|}

== Login with SSH command (Linux, Mac, Windows) ==

Most Unix and Unix-like operating systems such as Linux, Mac OS, and *BSD, as well as newer versions of MS Windows 10 and 11, have a built-in SSH client provided by the OpenSSH project.
If you want to use the full set of Linux commands on Windows, you can also install the [https://docs.microsoft.com/en-us/windows/wsl/install Windows Subsystem for Linux] (WSL) on newer Windows 10 and 11 versions very easily.
Then start a terminal, e.g. "xterm", "konsole" or "gnome-terminal" under Linux, the "Terminal" app under Mac OS or under Windows the "Terminal" app (command: 'cmd') or "PowerShell".

For login use one of the following ssh commands:

ssh <username>@nemo2-login.nemo.uni-freiburg.de
ssh -l <username> nemo2-login.nemo.uni-freiburg.de

To run graphical applications, you can use the <code>-X</code> or <code>-Y</code> flag to <code>ssh</code>:

ssh -Y -l <username> nemo2-login.nemo.uni-freiburg.de

For better graphical performance, we recommend using the VNC module on the cluster: 'module load vis/turbovnc'.

== Login with graphical SSH client (Windows) ==

For Windows we suggest using MobaXterm for login and file transfer.

Start ''MobaXterm'', fill in the following fields:
<pre>
Remote name : nemo2-login.nemo.uni-freiburg.de # or nemo2-login1.nemo.uni-freiburg.de, nemo2-login2.nemo.uni-freiburg.de
Specify user name : <username>
Port : 22
</pre>

After that click on 'ok'. Then a terminal will be opened and there you can enter your credentials.

== Login Example ==

To log in to NEMO2, you must provide your [[Registration/Password|service password]].
Proceed as follows:
# Use SSH for a login node.
# When you log in for the first time, you must confirm the SSH fingerprint of the login node.
# The system will ask you for your service password <code>Password:</code>. Please enter it and confirm it with Enter/Return. If you do not have a service password yet or have forgotten it, please create one (see [[Registration/Password]]).
# You will be greeted by the cluster, followed by a shell.

<pre>

~ $ ssh fr_vwxyz1234@nemo2-login.nemo.uni-freiburg.de
The authenticity of host 'nemo2-login.nemo.uni-freiburg.de (<no hostip for proxy command>)' can't be established.
ED25519 key fingerprint is SHA256:8t+lpTeEba0TmZHvSfMyrQn4WWaqquBoT3hvWRuXdGo.
This host key is known by the following other names/addresses:
...
Are you sure you want to continue connecting (yes/no/[fingerprint])? yes
Warning: Permanently added 'nemo2-login.nemo.uni-freiburg.de' (ED25519) to the list of known hosts.
(fr_vwxyz1234@nemo2-login.nemo.uni-freiburg.de) Your OTP: 123456
(fr_vwxyz1234@nemo2-login.nemo.uni-freiburg.de) Password:
Last login: Tue Mar 4 13:48:19 2025 from 132.230.103.17
[fr_vwxyz1234@login3 ~]$
</pre>

= SSH Keys on NEMO2 =

Interactive SSH keys can be used with a second factor.
You must copy your public SSH keys into:
<pre>
~/.ssh/authorized_keys
</pre>

== Workflow and Command SSH Keys ==

This example uses 'rrsync' (see [[Registration/SSH/rrsync|rrsync wiki]]).

If you want to use workflows and commands without a second factor, you can use SSH command keys.
The command needs to look like this:
<pre>
command="/usr/local/bin/rrsync -ro /home/aa/aa_bb/aa_abc1/",from="10.10.10.0/24"
</pre>

Please send the following information to the [[NEMO2/Support|'''NEMO2 support''']]:

<pre>
command="/usr/local/bin/rrsync -ro /home/aa/aa_bb/aa_abc1/",from="10.10.10.0/24" ssh-rsa ... username
</pre>

This command then will be allowed on '''nemo2-login[1|2].nemo.uni-freiburg.de''', example:
<pre>
rsync -av nemo2-login.nemo.uni-freiburg.de:remotedir/ localdir/
</pre>

= Allowed Activities on Login Nodes =

{|style="background:#deffee; width:100%;"
|style="padding:5px; background:#cef2e0; text-align:left"|
[[Image:Attention.svg|center|25px]]
|style="padding:5px; background:#cef2e0; text-align:left"|
To guarantee usability for all the users of clusters you must not run your compute jobs on the login nodes.
Compute jobs must be submitted to the queuing system.
Any compute job running on the login nodes will be terminated without any notice.
Any long-running compilation or any long-running pre- or post-processing of batch jobs must also be submitted to the queuing system.
|}

The login nodes of the bwHPC clusters are the access point to the compute system, your <code>$HOME</code> directory and your workspaces.
These nodes are shared with all the users therefore, your activities on the login nodes are limited to primarily set up your batch jobs.
Your activities may also be:
* '''short''' compilation of your program code and
* '''short''' pre- and post-processing of your batch jobs.



= Related Information =

* If you want to reset your service password, consult the [[Registration/Password|Password Guide]].
* If you want to de-register, consult the [[Registration/Deregistration|De-registration Guide]].
* Configuring your shell: [[.bashrc Do's and Don'ts]]