It is possible to connect local ecflow_ui running on your mac/pc to the remote servers running at the center using teleport and SSH Local Port Forwarding functionality.
First make sure you connected to the center with teleport using your token id. On the MAC i had to use latest teleport version. (5.0.0)
MACbrew install teleport # *OR* > brew upgrade teleport
Next setup port forwarding. If your remote server at ECMWF has a whitelist file, then your local username must match.
In the example below, I am connecting to server(polonius@4141) and metabuilder(ecflow-metab@3142), where there is NO whitelist file. Hence I am connecting using my local username on the mac.
If you have whitelist file, then you need to change your local username, to match the username at ECMWF. Alternatively you can use custom user functionality. See: Security(custom user)
Connect to workstation ecflow server and metabuilder ci serverssh -J ma0@shell.ecmwf.int ma0@polonius -C -N -L 4141:polonius:4141 -L 3142:ecflow-metab:3142
To access cca/ccb job output via the log server , you need to create a tunnel access for this as well.
add '127.0.0.1 cca-log1' alias in /etc/hosts so that connections to 'cca-log1' actually go to localhost, then use
ssh -J ma0@shell.ecmwf.int ma0@polonius -C -N -L 4141:polonius:4141 -L 3142:ecflow-metab:3142 -L 9316:cca-log1:9316
- Inoke your local ecflow_ui. But please ensure you use "localhost" tunnel entrance for all remote ecflow server hostnames.
If your server uses a whitelist file, then please first ask the server administrator to setup a CUSTOM user, this requires both client/server setup password based access. When this is done you use: