This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision
Previous revision
start:mogon_cluster:access [2020/07/15 17:48]
start:mogon_cluster:access [2021/10/22 16:46] (current)
Line 1: Line 1:
 ====== Accessing MOGON ====== ====== Accessing MOGON ======
-<col lg="9" md="9" sm="9" xs="9"> 
-<alert type="danger" dismiss="true" icon="fa fa-warning">**Warning!** Due to changed settings on MOGON as a result of the security incident, this article may need to be revised. 
 Essentially only accounts of the Johannes Gutenberg University can get access. Essentially only accounts of the Johannes Gutenberg University can get access.
Line 15: Line 8:
 ===== Access ===== ===== Access =====
 +<col lg="6" md="6" sm="6" xs="12">
 +Since the MOGON clusters are Linux-based systems, remote access is granted via Secure Shell (''SSH''). To access MOGON please refer to the instructions for:
-Since the MOGON clusters are Linux-based systems, remote access is granted via SSH.+  * **[[:start:mogon_cluster:access_from_outside_unix|accessing MOGON using Linux/macOS]]**   
 +  * **[[:start:mogon_cluster:access_from_outside_windows|accessing MOGON using Windows]]** 
-The MOGON login nodes are accessible only from the university network. To access MOGON from the outside (e.g. from home) you have to use VPN - please refer to these instructions: \\ +The latter link contains information for accessing MOGON with PuTTY, MobaXterm and PowerShell.
-**[[:start:mogon_cluster:access_from_outside_unix|(Outside) access using Unix]] / [[:start:mogon_cluster:access_from_outside_windows|(Outside) access using Windows]]**. The latter link also contains information for internal access with Windows.+
-Login to the login-nodes is mediated by a jump node: Access is done with direct login (ssh) to "''mogon''". This name implements a 'Round-Robin-DNS' login to both login nodes of MOGON I, '''' and ''''. If for some reason you want to login to a specific login node, you can use this names directly. (or if for some other Reason one of the nodes is broken, and the dns always gives you the wrong, broken one to connect to)+The service nodes of MOGON are listed below.  
 +<col lg="6md="6" sm="6" xs="12"> 
 +<callout type="warning" icon="true" title="SSH-Key"> 
 +**Only password-less login is available**. You need to have your SSH-Key uploaded on [[|]] to be able to log in to MOGON((A neat overview on ssh-keys and how to generate and copy them can be found [[|here]]. Or you can follow our [[start:mogon_cluster:access#how_to_set_up_ssh-keys_for_mogon|guideline]])).
-The login nodes of **MOGON II** are '''' to ''''. Projects on MOGON I do not have access to MOGON II automatically. You have to apply for MOGON I and MOGON II separately. Only password-less login is available. You **need to have your ssh-key((A neat overview on ssh-keys and how to generate and copy them can be found [[|here]].))** on MOGON I to be able to log in to MOGON II. +Your SSH-Key is automatically added to the MOGON clusterWould You Like To Know More? Read this [[start:mogon_cluster:basic_authentication#add_ssh-key_to_mogon|Article]]
-The **accelerators (GPUs) of MOGON II reside within MOGON I** infrastructure that is to say you have to login to MOGON I but use your MOGON II account (-A m2_*) to have access to those accelerators.+=== MOGON Service Nodes Overiew ===
-<callout type="warningicon="true"> +<grid> 
-You **need to have your ssh-key** on MOGON I to be able to log in to MOGON II(RSA authentication)!  +<col lg="6md="6" sm="12" xs="12"> 
- +<datatable info="false" paging="false" searching="false" ordering="false"> 
-Your home directory is on the same file system on both clustersIn order to access MOGON II, you need to copy your ssh-key once to your home directory on MOGON I (''~/.ssh'').+^ Service Node ^ FQDN ^ Description^  
 +| ''login21'' | '''' | Login Node |  
 +| ''login22'' | '''' | Login Node |  
 +| ''login23'' | '''' | Login Node | 
 +| ''hpcgate'' | '''' | Jump Host |  
 +<col lg="6" md="6" sm="12" xs="12"> 
 +<callout type="info" icon="true" title="Service-Node FQDN"> 
 +If you access MOGON Service-Nodes through the ''HPCGATE'' you can omit '''', e.g.: for ''login21'' ''miil01'' is sufficient.
 </callout> </callout>
 +=== SSH Fingerprints ===
 +<col lg="6" md="12" sm="12" xs="12">
 +<datatables info="false" paging="false" searching="false" ordering="false">
 +^ Jumphost ''hpcgate''^^
 +^ Cipher^ Fingerprint^
 +| RSA| MD5:''92:8b:0d:af:53:27:09:b9:c0:13:a5:7c:47:5f:18:10'' \\ SHA256:''5/h9wmWi44ViIpMm1I/7Ox/vXZ/JYR2tM3QJ7QbFNDA''|
 +| ECDSA| MD5:''e9:d9:54:5d:a3:ba:0e:d5:ce:e5:02:c0:70:8e:05:d2'' \\ SHA256:''pzKsg8DkGkzAxDw2n8Uggk/jbboSpNYi5w47LcXjTxk'' |
 +| ED25519 | MD5:''63:67:65:76:5f:ad:fb:20:f2:68:92:cf:d5:49:2c:dc'' \\ SHA256:''CNbkj04hEuJ9IwgGkTBXbF1WtE/Nb46kPVSejKUGfRU'' |
 +<col lg="6" md="12" sm="12" xs="12">
 +<datatables info="false" paging="false" searching="false" ordering="false">
 +^ Service Node ''login21-23''^^
 +^ Cipher^ Fingerprint^
 +| RSA| MD5:''39:38:c3:a0:3b:a4:7b:13:03:88:70:35:ca:3c:bd:48'' \\ SHA256:''MFyTochFLM9iue2D6qWreoQaJrtXITqyvAcXMQuI/ck''|
 +| ECDSA| MD5:''da:e8:86:93:88:99:44:a5:1a:fb:5d:43:00:23:cc:08'' \\ SHA256:''4j1nbNKmElz7QbAkMokyoKPLAIjB7V4GVqJITObiFYA'' |
 +| ED25519 | MD5:''68:e5:29:01:18:93:de:f4:0e:e0:54:48:1e:10:ed:51'' \\ SHA256:''i9ArPjn5yKQeIydO5FxQgO/A5xlnVkN4sPfMKUlXF0s'' |
 ===== How to set up SSH-Keys for MOGON ===== ===== How to set up SSH-Keys for MOGON =====
Line 46: Line 85:
 ==== Generating a new SSH-Key using Linux or macOS ==== ==== Generating a new SSH-Key using Linux or macOS ====
-In case you not yet have an SSH-Key pair on your computer, you can use the following command to create a new pair: 
-<code bash>ssh-keygen -t rsa -b 4096 -a 100 -C [<Your Optional Comment>,]<gate-strings></code> 
-This generates a new private/public ''RSA'' key pair with ''4096 bit'' key size. Then ''ssh-keygen'' asks for a name for the key. 
-<code>Enter a file in which to save the key (/home/you/.ssh/id_rsa): [Press enter] </code> 
-After that you have to specify a passphrase - **Do not** use an empty passphrase! 
-<code bash>Enter passphrase (empty for no passphrase): [Type a passphrase] 
-Enter same passphrase again: [Type passphrase again] </code> 
-If you already have an SSH-Key pair, you can change the comment as follows, for example to add a ''gate-string'': 
-<code bash>  
-ssh-keygen -c -C "<YourNewComment>,<gate-string>" -f ~/Path/To/Your/PrivateKey 
-==== Generating a new SSH-Key using Windows and PuTTY ==== 
-<callout type="info" icon="true"> PuTTY must already be installed on your PC in order to follow these instructions. </callout> 
 +<callout type="tip" icon="true" title="Set up SSH-Keys for MOGON using Linux or macOS"> We have created an article for you <button type="info" icon="fa fa-key" size="xs">[[start:mogon_cluster:access_from_outside_unix#generating_a_new_ssh-key_using_linux_or_macos|here]]</button> that explains how to create new SSH-Keys using Linux or macOS. </callout>
-  - Press the {{fa>windows?fw}}-Key to open the start menu and type ''PuTTYgen'', click on the App to open it. Now the PuTTY Key Generator window should be displayed..\\ <image shape="thumbnail">{{:start:mogon_cluster:puttygen_1.png?450&nolink}}</image>  +==== Generating a new SSH-Key using Windows ====
-  - To create a new key pair, first select the type of the key to generate from the bottom. We recommend the ''RSA'' algorithm and ''4096 bit'' key size. \\ <image shape="thumbnail">{{:start:mogon_cluster:puttygen_2.png?450&nolink}}</image> +
-  - Now click on ''Generate'' and start moving the mouse within the Window, to let PuTTY collect some randomness for the Key. +
-    * Once the progress bar is full, the actual key generation takes place. Your public key should be appear in the windows once the compution is complete. +
-  - Now you have to specify a ''Passphrase'' and add a ''Comment'' for your SSH-Key. Make sure you add the ''MOGON-String'', to specify the purpose of your key. \\ <image shape="thumbnail">{{:start:mogon_cluster:puttygen_3.png?450&nolink}}</image> +
-  - Click on the ''Save private key'' button to save your private key. {{fa>warning?fw}} You **must** save your private key.  +
-  - Now click on the ''Save public key'' button to save your public key. +
-  - Right-click in the text field labeled **Public key for pasting into OpenSSH authorized_keys file:** and choose ''Select All/Alle auswählen''.  +
-  - Right-click again in the same field and choose ''Copy/Kopieren''+
-  - Browse to [[|]] and add your new public SSH-Key. You will find further information in [[:start:mogon_cluster:basic_authentication#add_ssh-key_to_mogon|this Article]].+
 +<callout type="tip" icon="true" title="Set up SSH-Keys for MOGON using Windows"> We have created an article for you <button type="info" icon="fa fa-key" size="xs">[[start:mogon_cluster:access_from_outside_windows:creating_sshkeys_on_windows|here]]</button> that explains various ways to create new SSH-Keys using Windows, including PuTTY, MobaXterm and PowerShell. </callout>
  • start/mogon_cluster/access.1594828132.txt.gz
  • Last modified: 2020/07/15 17:48
  • by jrutte02