It is possible to connect local ecflow_ui running on your mac/pc to the remote servers running at the center using teleport and SSH Local Port Forwarding functionality.
First make sure you connected to the center with teleport using your token id. On the MAC i had to use latest teleport version. (5.0.0)
MACbrew install teleport # *OR* > brew upgrade teleport
Next setup port forwarding.
Connect to workstation ecflow server and metabuilder ci serverssh -J ma0@shell.ecmwf.int ma0@polonius -C -N -L 4141:polonius:4141 -L 3142:ecflow-metab:3142
To access cca/ccb job output via the log server , you need to create a tunnel access for this as well.
add '127.0.0.1 cca-log1' alias in /etc/hosts so that connections to 'cca-log1' actually go to localhost, then use
ssh -J ma0@shell.ecmwf.int ma0@polonius -C -N -L 4141:polonius:4141 -L 3142:ecflow-metab:3142 -L 9316:cca-log1:9316
In the example above, I am connecting to server(polonius@4141) and metabuilder(ecflow-metab@3142),.
Server with NO whitelist file:
Where there is NO whitelist file. you are connecting using your local username on the MAC. This can be seen by viewing the log output file
Server with whitelist file:
There are 3 options:
1/ Create a login name on your location machine which matches your user name at ECMWF.
2/ Ask your server administrator to add your local username to the whitelist file
3/ Ask the server administrator to setup a CUSTOM user, See: Security(custom user) this requires both client/server setup password based access. When this is done invoke ecflow_ui and use:
- Finally ensure you use "localhost" tunnel entrance for all remote ecflow server hostnames.
