ALIs

kommt noch
www.lrz.de/services/compute/supermuc/access_and_login

How to get Access to Super MUC

Table of contents

User Access

Persons who do not have an SuperMUC account need to apply for a project and need to undergo a review process. Please use the Online Proposal Form:F

and apply for resources on SuperMUC. Questions concerning the usage should be directed to the LRZ HPC support team, preferably via the Servicedesk Portal. A member of our support team will then attend to your needs.

Login to supzero.lrz.de

SuperMUC/SuperMIG uses front-end nodes or login nodes for interactive access and the submission of batch jobs. SuperMIG has two different login nodes which may be addressed with the same name: supzero.lrz.de

The front-end nodes have an identical environment, but multiple sessions of one user may reside on different nodes which must be taken into account e.g., when killing processes.

Two mechanisms are provided for logging in to the system; both incorporate security features to prevent appropriation of sensitive information by a third party.

Note: The SuperMUC firewall permits only incoming SSH-connections.

Login with Secure Shell

Access via SSH (Secure Shell) is described in detail in the LRZ Document about SSH.

If you want access without every time typing in your password but with public/private SSH-keys please note:

LRZ Security Policies demand that the user's private SSH keys are locked and guarded with a non-empty passphrase, therefore it is not allowed to use an empty passphrase during the private key generation .

We consider an empty passphrase as a violation of our security policies.

Users disregarding this policy will be barred from further usage of LRZ systems.

From the UNIX command line on one's own workstation the login to an LRZ account xxyyyyzz is performed via:

ssh -X supzero.lrz.de -l xxyyyyzz

Please also bear in mind the following notes:

  • The IP address of your front-end machine must be associated with a valid DNS entry, and must be known to us, otherwise your SSH request will not be routed. Additional entries or changes can be submitted via a modification request in the using Online Proposal Form.

  • The LRZ domain name is mandatory if accessing from outside the Munich Scientific Network

  • The -X option is responsible for tunneling of the X11 protocol, it may be omitted if no X11 clients are required. 

The Secure Shell RSA public key are given in the following link. Please add these to

~/.ssh/known_hosts

on your own local machine before logging in for the first time.

Note: ssh from SuperMUC to the outside world is disabled.

Login via Grid Services using GSI-SSH

An alternative way of accessing the SuperMUC is to use GSI-SSH, which is a component of the Globus toolkit and provides

  • terminal access to your account
  • a single sign-on environment (no password required to access other machines)
  • easy access to a number of additional functionalities, including secure and parallel file transfer

The prerequisites for using it are

  • a Grid certificate installed on your machine and acknowledged by LRZ, as described on the LRZ Grid Portal. Please note that TUM, LMU, and LRZ members can use the new and easy short lived credential service (SLCS) of the DFN as an alternative: it allows you to immediately obtain a certificate for Grid usage
  • an installation of a GSI-SSH client on your own workstation, either the command line tool gsissh or the multi platform Java tool Gsissh-Term, as described on the LRZ Grid Portal.

Changing password or login shell, viewing user account data

The direct use of the passwd and chsh commands to change passwords and login shells, respectively, has been disabled.

Please use the LRZ ID portal instead:

  • Log in to the web interface using your account and password.
  • For changing your password, select the entry "Passwort ändern" in the category "Self Services". In the main window you are then prompted for your old password once and for the new password (needs to have between 6 and 20 characters) twice. Once you have filled in all three fields, press the button "Passwort ändern" in the main window.
  • For changing your login shell select the entry "Login-Shell ändern" in the category "Self Services". For the platform "SuperMUC" select the new login shell from the drop-down menu and then press the button "Login-Shells ändern" in the main window.
  • The ID portal also offers functionality to view your user account data.

Budget and Quotas

CPU time budget and file system quotas are dislayed at login or at the start of a batch job.

However you can query them with the following commands:

module load lrztools
budget_and_quota 

Moving data from/to SuperMUC/SuperMIG

FTP access to the high performance systems from outside is disabled for security reasons, you have to use scp, sftp or GridFTP.

Note: Transfers of files with scp or sftp  from SuperMUC to the outside world can only be initiated from the outside, e.g. you cannot copy files from SuperMUC to the outside, but you can fetch files from SuperMUC from the outside.

SCP

Example:

scp  localfile  UserID@supzero.lrz.de:remotefile
scp  UserID@supzero.lrz.de:remotefile  localfile

SFTP

SSH File Transfer Protocol (also Secret File Transfer Protocol, Secure FTP, or SFTP) is a network protocol that provides file access, file transfer, and file management functionality over any reliable data stream.

Example:

sftp UserID@supzero.lrz.de 
put localfile remotefile
get remotefile localfile

GridFTP

The only way to initiate transfers from SuperMUC to the outside is using GridFTP. However, this requires a certificate.

For details see: http://www.grid.lrz.de/en/mware/globus/client/gridftpclient.html

Acess to your subversion (SVN) server

The SuperMUC firewall permits only incoming SSH-connections.

  • You can use portforwarding to establish a connection between the subversion server and SuperMUC. E.g., if the server is reached via https you can use the following procedure:
    1. To use portforwarding issue the following command on the workstation you normally use to SSH into supzero.lrz.de: 
      ssh -l <LoginName> -R <arbitraryPortNumber>:<svnServer>:443 supzero.lrz.de
      Example: 
      ssh -l h0000xx -R 10443:pmviewer.svn.sourceforge.net:443 supzero.lrz.de
      You will be prompted for your SuperMUC-Password.
    2. After successful login to supzero type: 
      svn <svnCommand> https://localhost:<ForwardedPortNumber>/<svnDirectoryPath>

      Examples:

      svn list https://localhost:10443/svnroot/pmviewer
svn co   https://localhost:10443/svnroot/pmviewer pmviewer
      (You might need to delete the localhost entry from ~/.ssh/known_hosts if ssh complains about the host-key.)

See also