It is possible to connect local ecflow_ui running on your mac/pc to the remote servers running at the center using teleport and SSH Local Port Forwarding functionality.
First make sure you connected to the center with teleport using your token id. On the MAC i had to use latest teleport version. (5.0.0)
brew install teleport # *OR* > brew upgrade teleport |
Next setup port forwarding. Using ma0 as an example, please replace with your own username used at ECMWF.
ssh -J ma0@shell.ecmwf.int ma0@polonius -C -N -L 4141:polonius:4141 -L 3142:ecflow-metab:3142 |
To access cca/ccb job output via the log server , you need to create a tunnel access for this as well.
add '127.0.0.1 cca-log1' alias in /etc/hosts so that connections to 'cca-log1' actually go to localhost, then use
ssh -J ma0@shell.ecmwf.int ma0@polonius -C -N -L 4141:polonius:4141 -L 3142:ecflow-metab:3142 -L 9316:cca-log1:9316 |
In the example above, I am connecting to server(polonius@4141) and metabuilder/ci(ecflow-metab@3142)
Where there is NO whitelist file. you are connecting using your local username on the MAC. This can be seen by viewing the log output file
There are 3 options:
1/ Create a login name on your location machine which matches your user name at ECMWF.
2/ Ask your server administrator to add your local username to the whitelist file
3/ Ask the server administrator to setup a CUSTOM user, See: Security(custom user) this requires both client/server setup password based access. When this is done invoke ecflow_ui and use: