...
First make sure you connected to the center with teleport using your token id. On the MAC i had to use latest teleport version. (5.0.0)
Code Block title MAC brew install teleport # *OR* > brew upgrade teleport
Next setup port forwarding. Using ma0 as an example, please replace with your own username used at ECMWF.
Code Block title Connect to workstation ecflow server and metabuilder ci server ssh -J ma0@shell.ecmwf.int ma0@polonius -C -N -L 4141:polonius:4141 -L 3142:ecflow-metab:3142
To access cca/ccb job output via the log server , you need to create a tunnel access for this as well.
add '127.0.0.1 cca-log1' alias in /etc/hosts so that connections to 'cca-log1' actually go to localhost, then use
Code Block ssh -J ma0@shell.ecmwf.int ma0@polonius -C -N -L 4141:polonius:4141 -L 3142:ecflow-metab:3142 -L 9316:cca-log1:9316
In the example above, I am connecting to server(polonius@4141) and metabuilder/ci(ecflow-metab@3142),.
Remote ecflow Server with NO whitelist file:
Where there is NO whitelist file. you are connecting using your local username on the MAC. This can be seen by viewing the log output file
Remote ecflow Server with whitelist file:
There are 3 options:
1/ Create a login name on your location machine which matches your user name at ECMWF.
2/ Ask your server administrator to add your local username to the whitelist file
3/ Ask the server administrator to setup a CUSTOM user, See: Security(custom user) this requires both client/server setup password based access. When this is done invoke ecflow_ui and use:
- Finally ensure you use "localhost" tunnel entrance for all remote ecflow server hostnames.
...