...
| Warning |
|---|
This service is under development and not widely accessible. Please continue to use the existing ECAccess service! |
Please read all the introductory "understanding" sections (even if you think you know them), so that the presentation of Teleport makes sense in context.
| Table of Contents |
|---|
Downloading tsh
The tsh application is required to perform the single sign-on step once per dayevery eight hours.
As tsh is written in Go, it is very portable and has minimal dependencies.
...
The binary is available for Linux 32-bit, 64-bit, and ARM, as well as signed packages for MacOS and Windows 64-bit.
...
| Code Block | ||
|---|---|---|
| ||
tsh login --proxy=teleshell.ecmwf.int |
| Tip |
|---|
Subsequent logins can omit the |
:443 |
Your default web browser will open and you should login with your email address
...
, workstation password, and then HID Token code.
| Warning |
|---|
The web login requires our workstation credentials, not the one-time password of ActivID tokens. This will be changed soon. |
To see the credentials that tsh was given, their attributes and remaining lifetime, run:
| Code Block | ||
|---|---|---|
| ||
$ tsh status
> Profile URL: https://tele.ecmwf.int:3080
Logged in as: oliver.gorwits@ecmwf.int
Cluster: tele
Roles: *
Logins: sy0
Valid until: 2019-11-13 17:10:03 +0000 GMT [valid for 55m0s]
Extensions: permit-X11-forwarding, permit-agent-forwarding, permit-port-forwarding, permit-pty |
| Tip |
|---|
Subsequent logins can be shortened to |
| Info |
|---|
If you're already logged in to the ECMWF website, or have recently logged in to this service, the password prompt might be skipped |
| Note |
During testing phase, we are only issuing one-hour credentials. Normally it would be for a working day. |
Configuring servers and workstations for Teleport
...