It is possible to connect local ecflow_ui running on your mac/pc to the remote servers running at the center using teleport and SSH Local Port Forwarding functionality.
First make sure you connected to the center with teleport using your token id. On the MAC i had to use latest teleport version. (5.0.0)
brew install teleport # *OR* > brew upgrade teleport |
Next setup port forwarding. If your remote server at ECMWF has a whitelist file, then your local username must match.
In the example below, I am connecting to server(polonius@4141) and metabuilder(ecflow-metab@3142), where there is NO whitelist file. Hence I am connecting using my local username on the mac.
If you have whitelist file, then you need to change your local username, to match the username at ECMWF. Alternatively you can use custom user functionality. See: Security(custom user)
ssh -J ma0@shell.ecmwf.int ma0@polonius -C -N -L 4141:polonius:4141 -L 3142:ecflow-metab:3142 |
To access cca/ccb job output via the log server , you need to create a tunnel access for this as well.
add '127.0.0.1 cca-log1' alias in /etc/hosts so that connections to 'cca-log1' actually go to localhost, then use
ssh -J ma0@shell.ecmwf.int ma0@polonius -C -N -L 4141:polonius:4141 -L 3142:ecflow-metab:3142 -L 9316:cca-log1:9316 |
If your server uses a whitelist file, then please first ask the server administrator to setup a CUSTOM user, this requires both client/server setup password based access. When this is done you use:
