Difference between revisions of "BwForCluster JUSTUS2 Login"

From bwHPC Wiki
Jump to: navigation, search
(Setup TOTP system)
(Login to JUSTUS 2)
 
(12 intermediate revisions by the same user not shown)
Line 1: Line 1:
   
= Set JUSTUS 2 service password =
+
= Login to JUSTUS 2 =
   
  +
== Prerequisites for login ==
<b>Log in to JUSTUS 2 is only possible with a service password.</b>
 
The password of your home organization is not accepted anymore.
 
Therefore please set a service password for JUSTUS 2 by following
 
link "Set password" of section "JUSTUS 2" on the
 
[[https://wiki.bwhpc.de/e/BwForCluster_User_Access#Personal_registration_at_a_bwForCluster_-_account_creation registration server of JUSTUS2]]
 
- if you have not done so already.
 
   
  +
* You have registered your account at the registration server for JUSTUS 2.
= Setup TOTP system =
 
  +
** If this is still missing, then please log in to the [https://wiki.bwhpc.de/e/BwForCluster_User_Access#Personal_registration_at_a_bwForCluster_-_account_creation registration server of JUSTUS2] and click on "Register" in section "JUSTUS 2".
   
For better security the log in to JUSTUS 2 is based on
+
* You have set a service password for JUSTUS 2.
  +
** If you have not done so already, then please log in to the [https://wiki.bwhpc.de/e/BwForCluster_User_Access#Personal_registration_at_a_bwForCluster_-_account_creation registration server of JUSTUS2] and select "Set Password" in section "JUSTUS 2".
two factor authentication (2FA) methods.
 
In addition to your service password, a time-based one-time
 
password (TOTP) is required as second factor.
 
   
  +
* You have set up a time-based one-time password (TOTP) for the two factor authentication (2FA) log in.
Usually you should have setup a hardware or software token
 
  +
** If this is still missing, then please follow the instructions for registering a new 2FA token on the following page: [[BwForCluster User Access/2FA Tokens]].
for creating TOTPs already at this point.
 
If this is still missing, then please follow the instructions
 
for registering a new 2FA token on the following page: [[BwForCluster User Access/2FA Tokens]]
 
   
  +
* Your IP is within the IP range of your university. Either you are working on a computer on your campus or you are connected via a virtual private network (VPN) to your university.
= Login to JUSTUS 2 =
 
  +
** If you have an external IP (i.e. home office) and you are not connected via VPN to your university, you can not connect to JUSTUS 2. Please consult the documentation of your university how to connect to your university via VPN.
   
  +
== Login to JUSTUS 2 ==
Prerequisites for login:
 
* You have registered your account at the registration server for JUSTUS 2 (for registration, log in to the [[BwForCluster_User_Access#Personal_registration_at_bwForCluster|registration server of JUSTUS2]] and click on "Register" in section "JUSTUS 2").
 
* You have set a service password for JUSTUS 2 (to do so login at the [[BwForCluster_User_Access#Personal_registration_at_bwForCluster|registration server of JUSTUS2]] and select "Set Password" in section "JUSTUS 2").
 
* You have created a TOTP shared secret and imported that secret into a TOTP app on your smartphone (for details see email send by registration server right after account registration).
 
   
Thereafter you can access the bwForCluster JUSTUS 2 for Computational Chemistry and Quantum Sciences via [[ssh]]. Only the secure shell ssh is allowed for login.
+
When all prerequisites are fulfilled you can access the bwForCluster JUSTUS 2 for Computational Chemistry and Quantum Sciences via [[ssh]]. Only the secure shell ssh is allowed for login.
   
From linux machines, you can log in using
+
From Linux machines, you can log in using
   
 
ssh <UserID>@justus2.uni-ulm.de
 
ssh <UserID>@justus2.uni-ulm.de
Line 48: Line 38:
 
The names of the four login nodes are justus2-login01.rz.uni-ulm.de, justus2-login02.rz.uni-ulm.de, justus2-login03.rz.uni-ulm.de, justus2-login04.rz.uni-ulm.de.
 
The names of the four login nodes are justus2-login01.rz.uni-ulm.de, justus2-login02.rz.uni-ulm.de, justus2-login03.rz.uni-ulm.de, justus2-login04.rz.uni-ulm.de.
   
These names can be used to access a specific one of the login nodes. In general, you should use justus2.uni-ulm.de to allow us to balance the load over the four login nodes.
+
These names can be used to access a specific one of the login nodes. In general, you should use justus2.uni-ulm.de to allow us to balance the load over the four login nodes.
 
   
 
== About UserID / Username ==
 
== About UserID / Username ==

Latest revision as of 14:18, 29 October 2020

1 Login to JUSTUS 2

1.1 Prerequisites for login

  • You have registered your account at the registration server for JUSTUS 2.
  • You have set a service password for JUSTUS 2.
  • You have set up a time-based one-time password (TOTP) for the two factor authentication (2FA) log in.
  • Your IP is within the IP range of your university. Either you are working on a computer on your campus or you are connected via a virtual private network (VPN) to your university.
    • If you have an external IP (i.e. home office) and you are not connected via VPN to your university, you can not connect to JUSTUS 2. Please consult the documentation of your university how to connect to your university via VPN.

1.2 Login to JUSTUS 2

When all prerequisites are fulfilled you can access the bwForCluster JUSTUS 2 for Computational Chemistry and Quantum Sciences via ssh. Only the secure shell ssh is allowed for login.

From Linux machines, you can log in using

ssh <UserID>@justus2.uni-ulm.de

During log in you must enter the current TOTP value (6-digit number) created with help of the TOTP app on your smartphone and your service password.

To run graphical applications, you can use the -X flag to openssh:

ssh -X <UserID>@justus2.uni-ulm.de

For better performance on slow connections you should use e.g. VNC.


The bwForCluster Chemistry in Ulm has four dedicated login nodes. The selection of the login node is done automatically. If you are logging in multiple times, different sessions might run on different login nodes.

The names of the four login nodes are justus2-login01.rz.uni-ulm.de, justus2-login02.rz.uni-ulm.de, justus2-login03.rz.uni-ulm.de, justus2-login04.rz.uni-ulm.de.

These names can be used to access a specific one of the login nodes. In general, you should use justus2.uni-ulm.de to allow us to balance the load over the four login nodes.

1.3 About UserID / Username

<UserID> of the ssh command is a placeholder for your username at your home organization and a prefix denoting your organization. Prefixes and resulting user names are as follows:

Site Prefix Username
Freiburg fr fr_username
Heidelberg hd hd_username
Hohenheim ho ho_username
Karlsruhe ka ka_username
Konstanz kn kn_username
Mannheim ma ma_username
Stuttgart st st_username
Tübingen tu tu_username
Ulm ul ul_username

1.4 Allowed activities on login nodes

The login nodes are the access point to the compute system and its $HOME directory. The login nodes are shared with all the users of the cluster. Therefore, your activities on the login nodes are limited to primarily set up your batch jobs. Your activities may also be:

  • compilation of your program code and
  • short pre- and postprocessing of your batch jobs.

To guarantee usability for all users of the bwForCluster you must not run your compute jobs on the login nodes. Compute jobs must be submitted as Batch Jobs. Any compute job running on the login nodes will be terminated without any notice.

2 Further reading