You are viewing an old version of this page. View the current version.

Compare with Current View Page History

« Previous Version 21 Next »

You can connect for the first time via SSH from another ECMWF platform. If you do so from ECGATE or the Cray HPCF you will not need a password to log in.

$> ssh aa-login
# or for users with no formal access to HPC service:
$> ssh ecs-login

From outside ECMWF, you may use Teleport through our gateway in Bologna, jump.ecmwf.int.

$> tsh login --proxy=jump.ecmwf.int
$> ssh -J user@jump.ecmwf.int user@aa-login
# or for users with no formal access to HPC service:
$> ssh -J user@jump.ecmwf.int user@ecs-login

For all the details of this connection method please see the Teleport documentation, where you will find how to best configure your SSH settings.

Note that direct access through ECACCESS service is not available.

See also HPC2020: Persistent interactive job with ecinteractive if you wish to customise the resource limits of your interactive session.

Upon logging in, please take a look at the message of the day displayed on the login nodes (or review /etc/motd). 

Password access

If you have not changed your password since 18 January 2021, password access may not work.

Password-less access from / to other platforms

If connecting from a different platform at ECMWF and to enable password-less connections and transfers between different platforms, you will need to enable ssh key authentication.

  1. Check if you have an existing ssh key pair on other ECMWF platforms:

    $> ls ~/.ssh/id_*
~/.ssh/id_rsa    ~/.ssh/id_rsa.pub

    If you don't, you may generate them like so:

    $> ssh-keygen                         # press 'enter' 3 more times

  2. Make sure it is added into the different platforms to be used

    If the key was already present in the ~/.ssh/authorized_keys file, it will be duplicated.

    $> ssh-copy-id -i ~/.ssh/id_rsa.pub ecgate  # also gives access to lxc and linux workstation
$> ssh-copy-id -i ~/.ssh/id_rsa.pub cca
$> ssh-copy-id -i ~/.ssh/id_rsa.pub aa-login
# or for users with no formal access to HPC service:
$> ssh-copy-id -i ~/.ssh/id_rsa.pub ecs-login

  3. Copy your key pair onto those platforms so you can make the connections in both directions:

    $> rsync -av ~/.ssh/id_rsa* cca:.ssh/
$> rsync -av ~/.ssh/id_rsa* aa-login:.ssh/
# or for users with no formal access to HPC service:
$> rsync -av ~/.ssh/id_rsa* ecs-login:.ssh/


  • No labels