HMS1-Harrison-Chou-Labs.md
... ...
@@ -70,11 +70,9 @@ If you are not currently a member of this list and wish to be added, contact Pro
70 70
# Accounts
71 71
SBGrid manages two different types of Crystal accounts. For simplicity, we use the same username for both accounts, but each has a different password. The first gives you access to Linux systems in your lab. The second is used to access your Crystal Gmail and other Google services.
72 72
73
-* Linux access - ssh to `crystal.harvard.edu` or `crystal2.sbgrid.org`
73
+* Linux access - ssh to `crystal.harvard.edu`
74 74
* Google Account - <https://crystal.harvard.edu/mail>
75 75
76
-If we have tranistioned your Mac in May 2017 so that you have a local account, you will need to ssh to `crystal2.sbgrid.org`. SSH access to `crystal.harvard.edu` will NOT work.
77
-
78 76
79 77
# Computers
80 78
SBGrid supports Linux, Mac, and Windows computers in the Harrison & Chou labs.
... ...
@@ -118,4 +116,4 @@ If you need a data directory created on the EM systems, please email SBGrid and
118 116
119 117
## Custom Software
120 118
### Harrison Lab
121
-CryoSPARC is installed on one of the Harrison Lab GPU nodes for use by Harrison Lab Members. Contact the SBGrid for more info.
... ...
\ No newline at end of file
0
+CryoSPARC is installed on one of the Harrison Lab GPU nodes for use by Harrison Lab Members. Contact the SBGrid for more info.
faq-connecting-to-cmcd-vpn.md
... ...
@@ -23,7 +23,7 @@ These instructions are for members using Apple Computers.
23 23
1. Then click on "Connect sbgrid.org"
24 24
[[images/vpn_connect.png]]
25 25
1. Enter your SBGrid username and password
26
-1. This is the same as your crystal2.sbgrid.org ssh login
26
+1. This is the same as your crystal.harvard.edu ssh login
27 27
1. If you receive a warning stating that your computer's apparent public IP hasn't changed - this is normal.
28 28
Just check "Do not check for IP address changes" box and click OK.
29 29
... ...
@@ -37,4 +37,4 @@ OpenVPN should work on Windows. We have not tested it and it's available at:
37 37
38 38
* <https://openvpn.net/>
39 39
40
-You must ensure your Windows installation is update and that you have a Virus scanner installed.
... ...
\ No newline at end of file
0
+You must ensure your Windows installation is update and that you have a Virus scanner installed.
faq-remote-access-to-linux-computers.md
... ...
@@ -17,26 +17,26 @@ exceptions see Table I).
17 17
18 18
ssh to:
19 19
20
-* crystal2.sbgrid.org
20
+* crystal.harvard.edu
21 21
22
-You should only use crystal2.sbgrid.org if you have told to do so by SBGrid staff.
22
+You should only use crystal.harvard.eduharvard.edu if you have told to do so by SBGrid staff.
23 23
24 24
Example syntax for connecting to SSH gateway for Harvard Medical School
25 25
groups:
26 26
27 27
* Non-GUI connection: 
28 28
29
-``` ssh username@crystal2.sbgrid.org;```
29
+``` ssh username@crystal.harvard.edu;```
30 30
31 31
* GUI (connecting to a linux system): 
32 32
33
-``` ssh -Y username@crystal2.sbgrid.org;```
33
+``` ssh -Y username@crystal.harvard.edu;```
34 34
35 35
``` ssh -Y abacus ``` (replace abacus with the name of your workstation.)
36 36
37 37
* GUI (slower network connection): 
38 38
39
-```ssh -Y -C username@crystal2.sbgrid.org;```
39
+```ssh -Y -C username@crystal.harvard.edu;```
40 40
41 41
```ssh -Y -C abacus;``` (replace abacus with the name of your workstation.)
42 42
... ...
@@ -54,8 +54,8 @@ If your site is not included on this list please contact us for further info abo
54 54
55 55
| **Labs** |**Gateway** |**Running jobs on gateway**|
56 56
|:----------- |:-------------:| :-------------------------|
57
-| HMS and CHB |crystal2.sbgrid.org |not allowed |
58
-| DFCI labs |crystal2.sbgrid.org |not allowed |
57
+| HMS and CHB |crystal.harvard.edu |not allowed |
58
+| DFCI labs |crystal.harvard.edu |not allowed |
59 59
| MCB |galactica.mcb.harvard.edu |allowed |
60 60
61 61
**MCB**: You cannot ssh to galactica.mcb.harvard.edu if you are inside the MCB or Harvard University network. Instead ssh directly to the system you need to access.
faq-setting-up-passwordless-ssh.md
... ...
@@ -1,4 +1,6 @@
1
-# Setting up password-less ssh
1
+# Setting up password-less ssh
2
+ * NOTE: All sbgrid bound Servers and Workstations require 'pub' key to be ***uploaded***: See Below
3
+
2 4
1. Generate ssh key-pair for local workstation: `ssh-keygen -t rsa` ; accept default options and hit return when prompted for passphrase.
3 5
2. Copy public key (`~/.ssh/id_rsa.pub`) to remote system: `scp ~/.ssh/id_rsa.pub remotesys:~/` If this is the first connection to the remote system, type `yes` to accept the remote system key.
4 6
3. Login to remote system, configure remote system to trust public key:
... ...
@@ -10,3 +12,21 @@
10 12
* `chmod 640 ~/.ssh/authorized_keys`
11 13
1. Logout of remote system, and repeat login to check that everything works correctly. If so, `~/id_rsa.pub` can be removed from the remote system.
12 14
15
+** FOR SBGRID SYSTEMS There is no need for ~/.ssh/authorized_keys, the file is ignored on all our linux systems. The 'pub' key ***must*** be uploaded to our authentication servers. These exapmles assume you copied the pub key over, you can also copy and paste the entire contents of the .pub file between the ""'s.
16
+
17
+ ipa user-mod $USER --sshpubkey="$(cat .ssh/id_rsa.pub)"
18
+
19
+Or for multiple keys
20
+
21
+ ipa user-mod $USER --sshpubkey="$(cat .ssh/id_rsa.pub)" --sshpubkey="$(cat .ssh/id_ed25519.pub)"\
22
+ --sshpubkey="$(cat .ssh/othersystem_id_rsa.pub)"
23
+
24
+If you are using csh/tcsh shell
25
+
26
+ ipa user-mod $USER --sshpubkey="`cat .ssh/id_rsa.pub`"
27
+
28
+If you get a 'Kerberos Credential' error you will need to enter the following cammand, type your password and try again.
29
+
30
+ kinit $USER
31
+
32
+** The 'ipa' command is not available on most workstations, connect to crystal.harvard.edu and perform the commands there.