Home

HPCI Login Manual

1. Fig 8 Enter a passphrase and try again 2 Troubleshooting for the error message 6 X EEA EA JJUCK amp TZSUN The error message 6XMFLLEAALTCIESL is shown on the ER F gIEBHEES TTIESR A DN screen Fig 5 Fig 6 when you have clicked the 3 T button after entering passphrases consisting of less than six characters Fig 9 12 NO HPCI CAO01 001E 09 User Guide HPCI Login Manual FEA SETA 23 gt ee is taf EBA er FEIT 00 WILL VETERE AJU A SELLE AIL TCA to WILL EFEMABO AGUA FL LAAILTCEAL Y HAL Z tH TO FAH A A ttt abcdetghijkIninopgratuvwxy zA BCDEF GHIJELMNOP ORS TUVW Y 1234587890 8 0 7 e h 07 G HRUEBEESEd Fig 9 Enter a passphrase consisting of six characters or more more than 12 characters are recommended and try again 3 Troubleshooting for the error message 20 XMFLIFAALTCKESL The error message 20 X EEAR A JJUCKTZ amp UN is shown on the aE KAT IBeRA TD screen Fig 5 Fig 6 when you have clicked the 3 T button after entering passphrases consisting of more than 20 characters Fig 10 13 NO HPCI CAO01 001E 09 User Guide HPCI Login Manual cT EBA ENAA gt PEAS ei Te T tB fk BH gr SEIT HPGI ID h2300001 HPOI Account user test ac jp user h2300001 Srl EF ETUAB OD AGL ipsa Na ea ER HO Ye EBD i Wert EI ICEL EAALTORAL ty y MASEL zxIEb FOXeEBHdS 6E abcdefehijkImnep
2. FEARTAN gt BEAST T ta f alEBH gr HIT HPGLID h2300001 HPGI Account user test ac jp Certificate DM C2JP O test university OU test unit CN user h2300001 Certificate Expiration Sun Mar 31 2013 12 00 00 0900 NEC D udi i Aol Fl VERE SBA Sy 1 pelle R SALA E TEAR 3 menm HABLA b POM Pa T OLE CSE Fo Tabedefgh ijkimnopgrstuwwxyz4BCDEFGHIJKLMNOPORSTUVWHY2 1234567890 1 880 7 a Ih te gt CE ASA eaas Y FET FEET D Fig 6 5 At the EE F RIEBHEESETT screen Fig 5 Fig 6 enter the private key passphrase required for issuing the 4 n certificate and click the 3 fT button If you issue a certificate the certificate for the first time On the entry form you must enter the new passphrase in the Si LU EE F RIEBHEEOD NAZL XX fields Passphrases longer than 12 characters are highly recommended The Maximum length for passphrases is 20 characters The passphrase you entered here will be required when you issue the proxy certificate as described in section 2 2 Proxy Certificate Registration and 2 3 Downloading the Proxy Certificate If you have already issued the certificate On the entry form you must enter the old passphrase in the REO ETEEN VAZL X field And you must enter the new passphrase in the SRL T ERAZO VA ZL 7 fields Passphrases longer than 12 characters are highly recommended The Maximum length for passphrases is 20 characters The passphrase you ent
3. f fR TAA Fayh ESSE 2012 02 07 1319 8 12 4b M vr De A 7 Fig 52 Directories can be downloaded recursively 2 6 2 Transfer with Globus Toolkit for Unix Linux MacOS X Refer to section 3 2 Installing Globus Toolkit for instructions on installing Globus Toolkit if you haven t installed it already By default the command gsiscp uses the file tmp x509up_u UID as the proxy certificate If you store your proxy certificate in a different location assign the certificate path to the environment variable X509 USER PROXY and export or setenv the variable before running the command The command gsiscp is optimized for high performance file transfer For details refer to section 3 3 High performance bulk data transfer with SCP 50 NO HPCI CAO01 001E 09 User Guide HPCI Login Manual 1 Obtain a proxy certificate from the proxy certificate repository For details refer to section 2 3 Downloading the Proxy Certificate 2 Transfer a file to the login server with the gsiscp command The port number is specified by adding option P upper case P user gsiscp P 2222 test txt FQDN of the login server test txt 100 509 0 5KB s 0 5KB Ss 00 00 Add option r to copy a directory recursively If you want to transfer the files with the rsync command over gsissh specify the port number with the p option lower case p user rsync avz e gsissh p 2222 test txt FQDN of the login s
4. Rerun the command with the additional v option The error message The certificate has expired will be displayed if your certificate has expired 40 NO HPCI CAO01 001E 09 User Guide HPCI Login Manual userS myproxy init v s portal hpci nii ac jp c 24 MyProxy v3 4 22 Apr 2011 OCSP Attempting to connec to 136 197 100 135 7512 Successfully connected to portal hpci nii ac jp 7512 User Cert File home user globus usercert pem User Key File home user globus userkey pem Trusted CA Cert Dir etc grid security certificates Output File J tmpymyproxy proxy 521 13049 Your identity C JP O HPCI OU NII CN user Enter GRID pass phrase for this identity Creating proxy attt Done Error Couldn t verify the authenticity of the user s credential to generate a proxy from grid_proxy_init c 9 1 globus credential Error verifying credential Failed to verify credential globus_gsi_callback_module Could not verify credential globus_gsi_callback_module The certificate has expired Credential with subject C JP O HPCI OU NII CN user has expired grid proxy init failed Renew your client certificate and try again 3 Troubleshooting for the error message Connection timed out The error message Connection timed out is displayed when a communications failure has occurred between your local PC and the proxy certificate repository server or the proxy certificate repository server is down user myproxy init s
5. NO HPCI CAO01 001E 09 User s Guide HPCI Login Manual Ver 9 Nov 11 2014 NO HPCI CAO01 001E 09 User Guide HPCI Login Manual Revision History 2012 06 06 2 In section 3 1 1 Download the Software Package added the Globus Toolkit version In section 3 2 1 CentOS 5 6 modified the Globus Toolkit installation procedure 2012 08 20 3 Removed the MyProxyUploader procedures Modified the login procedure with GSI SSHTerm for HPCI Added the section 2 5 1 1 Troubleshooting 2012 08 29 Added a border line to the footer 2012 10 04 5 Removed the certificate downloading procedure Modified the number of Signing Policy files required to be downloaded Added the procedure for making the directory globus for Windows users Unified the terminology to fit the Quick Start Guide 2012 12 05 Changed the procedure for starting GSI SSHTerm to double click on Explorer In section 3 1 1 Download the Software Package added the requirement of ae setting up Java for Windows users 2013 04 11 7 Updated the screen captures in sections 2 1 Obtaining a Certificate and 2 2 Proxy Certificate Registration 2014 07 29 Updated Fig 4 In section 1 1 Overview added how to get the maintenance and trouble information and added the availability of portal c hpci nii ac jpin case of trouble on portal hpci nii ac jp In section 1 3 Operating Environment added the environmental information of pontabee
6. if you need to download the proxy certificate again 2 3 2 1 Troubleshooting 1 Troubleshooting for the error message Problem while accessing MyProxy MyProxy get failed The error message Problem while accessing MyProxy MyProxy get failed Fig 35 is shown under any of the following conditions GSI SSHTerm Authentication x o Problem while accessing MyProxy MyProxy get failed Details i Fig 35 A The hostname of the proxy certificate repository is incorrect Enter the correct hostname and try again B A trouble occurs at HPCI Certificate Issuing System p0rtal hpci nii ac jp Refer to 1 1 Overview and use portal c hpci nii ac jp instead C The proxy certificate stored in the repository has expired Refer to 2 2 Proxy Certificate Registration and 2 3 2 and try again D The HPCI ID you entered is incorrect Enter the correct HPCI ID and try again 2 Troubleshooting for the error message MyProxy Password must be at least 6 characters long The error message MyProxy Password must be at least 6 characters long is shown when you have clicked the Use MyProxy button after entering passphrases consisting of less than six characters Fig 36 34 NO HPCI CAO01 001E 09 User Guide HPCI Login Manual Grid Certificate Proxy needed for Authentice x MyProxy Password must be at least 6 characters long Retrieve Credentials from MyProxy Host portal
7. Fig 3 NO HPCI CAO01 001E 09 User Guide HPCI Login Manual Document List Administrators Guide Group gt VV VV VV VV VV VV V V gt Administrator s Guide Administrator s Guide Administrator s Guide Administrator s Guide Administrator s Guide Administrator s Guide Administrator s Guide HPCI CA CPS HPCI Account IdP GSI SSH Server Obtaining a Server Certificate Certificate Authority System Certificate Management System Certificate Issuing System Shibboleth DS HPCI CA Certificate and CRL Profile Administrator s Guide Administrator s Guide Administrator s Guide Administrator s Guide Administrator s Guide Administrator s Guide Administrator s Guide Users Guide Group User s Guide HPCI Login Manual HPCI Account IdP for Test Environment GSI SSH Server for Test Environment Obtaining a Server Certificate for Test Environment Gertificate Authority System for Test Environment Shibboleth DS for Test Environment HPCI Usage Manual Shibboleth SP NO HPCI CAO01 001E 09 User Guide HPCI Login Manual Table of Contents 1 Mrodu Gh ON T agate anette Ns 1 UA CT OV stare 1 CN D EDEN eae ee er eae eet ree ee ree eee ene ee ree ere aera 2 1 3 OT SRS Ee ON cae a ac ce atta ates cnc casts E 5 BILE P daha shi EA 7 2 1 O
8. GSI Grid Security Infrastructure Single Sign On SSO framework using proxy certificates created from client certificates obtained from a Certificate Authority IdP Identity Provider A component of Shibboleth that provides user information LDAP Lightweight Directory Access Protocol A protocol used for connecting to directory services Shibboleth Authentication and Authorization architecture enabling Single Sign On SSO using Security Assertion Markup Language SAML SP Service Provider A component of Shibboleth that gathers information about users from an IdP and uses the information to control access to protected resources Proxy Certificate A short lived certificate created using a client certificate GSI uses proxy certificates for Single Sign On SSO 60 NO HPCI CA01 001E 09 User Guide HPCI Login Manual 5 Appendix 5 1 Flow of Proxy Certificate Registration and Downloading This section explains how to register or download the proxy certificate delegated from your client certificate and private key in order to login to the HPCI environment Fig 54 For details refer to related chapters in this document HPCI HPCI Authenticati 2 adi ication System Job y Providers Submission Computing s11 Resource aM Proxy Certificate Shared delegated from the l Storage downloaded proxy File Translar tificate certificate based cer authentication HPC
9. Proxy Gertificate Exnirati Thu Dec 1 2011 12 00 00 0900 xpiratian weg mx ccce Tz Uto mou ene Eras i Fig 20 Make sure you have entered the same passphrase in both boxes and try again 6 Troubleshooting for the error message AAT LIJ bh RELELI When the error message YV RAT 4172 27 3E ELUT7 is shown on the screen Fig 21 please check the error code If the error code is 526 code 3 your certificate may have expired Fig 21 Renew your client certificate and try again Please contact HPCI Helpdesk https www hpci office jp contact index html regarding other error codes 23 NO HPCI CAO01 001E 09 User Guide HPCI Login Manual 2 3 Downloading the Proxy Certificate This section describes the three procedures necessary for downloading the proxy certificate from the repository Select the one which is suitable for your client environment OS 2 3 1 Download via the HPCI 2 3 2 Download with 2 3 3 Download with Globus Certificate Issuing System GSI SSHTerm Toolkit The section 5 1 Flow of Proxy Certificate Registration and Downloading describes the difference of proxy certificate registration and downloading 2 3 1 Download via the HPCI Certificate Issuing System You do not need to complete the procedures in section 2 2 Proxy Certificate Registration if you download the proxy certificate from the HPCI Certificate Issuing System as described
10. USER PROXY and export or setenv the variable before downloading the certificate 2 Check the proxy certificate information user grid proxy info f tmp x509up u UID subject C JP O NII OU HPCI CN user CN proxy CN proxy CN proxy CN proxy issuer C JP O NIT OU HPCI CN user CN proxy CN proxy CN proxy identity C JP O NII OU HPCI CN user type full legacy globus proxy strength 2048 bits path tmp xb509up u UID timeleft 11 59 54 Your proxy certificate download is now complete Refer to section 2 5 Login to the Login Server for instructions on accessing the login server 36 NO HPCI CAO01 001E 09 User Guide HPCI Login Manual 2 3 3 1 Troubleshooting 1 Troubleshooting for the error message certificate has expired The error message certificate has expired is displayed when the proxy certificate stored in the repository has expired user myproxy logon s portal hpci nii ac jp 1 HPCI ID t 1 Enter MyProxy pass phrase Failed to receive credentials ERROR from myproxy server X509 verify cert failed certificate has expired Register a new proxy certificate Refer to section 2 2 Proxy Certificate Registration for instructions and try again 2 Troubleshooting for the error message No credentials exist for username The error message No credentials exist for username is displayed when you have run the command with an incorrect HPCI ID us
11. in this section 1 Access the HPCI Certificate Issuing System For details refer to section 2 1 1 2 Click the 4XXSgEBBHEESE TT link to display the fCXSEIEBHZESETT screen Fig 22 24 NO HPCI CA01 001E 09 User Guide HPCI Login Manual Oo Sun Mar 31 2013 120000 0900 Proxy Certificate Thy Dec 1 2011 12 00 00 0900 Expiration PBS TAA BARR Gir Fig 22 Click the 4 9 0 Kk radio button fill in the EIEBIE NAZL ZX and 4SXSEEBHZE 8 3h HRDBR fields and click the 3647 button to download the Proxy Certificate from the proxy certificate repository e ER s KRIL Z your client certificate passphrase o HEERE SS RHOR select a term of validity in hours for the proxy certificate you are going to register 3 The R REER 7 screen is displayed Fig 23 when your proxy certificate has been successfully issued HPCT ID he 3s00001 Certificate DN C JP Ostest university OUstest unit CN userlh2 300007 Sun Mar 31 2013 120000 0900 ur Certificate Thu Dec 1 2011 12 00 00 0900 xpiratian 3zi iEs Fig 23 25 NO HPCI CAO01 001E 09 User Guide HPCI Login Manual After the 22 HA 475 l screen is displayed Fig 23 the download dialog appears Save the proxy certificate with a name following the naming rule in Table 1 On Unix Linux MacOSX set the proxy certificate file permissions to 600 in order to avoid gsissh errors Table 1 Wind
12. portal hpci nii ac jp c 24 Unable to connect to 136 1987 100 135 7512 Unable to connect to portalhpolinTcdg qdC J p Connection timed out If the proxy certificate repository server is down due to the maintenance or trouble refer to 1 1 Overview and access an alternative system portal c hpci nii ac jp instead If the server is neither under 41 NO HPCI CAO01 001E 09 User Guide HPCI Login Manual maintenance nor in trouble please contact your network administrator whether you can communicate to the port 7512 tcp of the HPCI Certificate Issuing System When you cannot fix the problem please contact HPCI Helpdesk https www hpci office jp contact index htm1 2 5 Login to the Login Server This section describes the two procedures available for logging in to the Login Server Select the one suitable for your client environment Windows Refer to section 2 5 1 Login with GSI SSHTerm uses Java for Windows Unix Linux MacOSX Unix Linux MacOSX Refer to section 2 5 1 Login with GSI SSHTerm uses Java for Windows Unix Linux MacOSX or 2 5 2 Login with Globus Toolkit for Unix Linux MacOSX 2 5 1 Login with GSI SSHTerm uses Java for Windows Unix Linux MacOS X Java GSI SSHTerm and your proxy certificate must be already downloaded and installed Refer to section 3 1 Installing GSI SSHTerm for instructions on installing GSI SSHTerm and 2 3 2 Download with GSI SSHTerm for do
13. your HPCI local account You do not need to click the Advanced button After clicking the OK button the Grid Certificate Proxy needed for Authentication dialog appears Fig 32 In the dialog enter the following information 32 NO HPCI CAO01 001E 09 User Guide HPCI Login Manual Grid Certificate Proxy needed for Authentice Retrieve Credentials from MyProxy 2 Host portalhpcinii ac jp Account Name myname Passphrase Use MyProxy Use a Grid certificate in pkcs12 format Filename Browse Passphrase Use Certificate gt Search for certificates in Internet Explorer or Firefox Use Certificate from Browser E Cancel Fig 32 e Hostname portal hpoi nil ac Jp e Account Name your HPCI ID not your HPCI account nor your HPCI local account e Passphrase the passphrase you specified when registering the proxy certificate After you enter the correct information click the button Use MyProxy Your proxy certificate will be automatically downloaded and you can login to the login server automatically The proxy certificate is valid for 12 hours The downloaded proxy certificate is stored automatically as shown in the table below Table 2 Table 2 Unix Linux MacOSX 1 2 To show the environment variables TMP and SUSERNAMES3 on Windows refer to section 2 3 1 3 Your proxy certificate download is now complete If you want to see the details of the downloaded pro
14. 28 29 NO HPCI CAO01 001E 09 User Guide HPCI Login Manual PS PSE eS Fr A gt EGA iTS P CPPak WAS EIT eT TC BEAMS US PU m oO PS eR Tim Ui z RUTAR ee Proxy Certificate Expiration H FS TEAS ADEIR 4E Thu Mar 22 2012 1 0 730 0900 Fig 28 Enter a passphrase consisting of 20 characters or less and try again 4 Troubleshooting for the error message VAZL A h RoT The error message VAZL A f ED CUVE is shown on the IRES OY DH kF screen Fig 22 when you have clicked the 47 button after entering an incorrect client certificate passphrase Fig 29 30 NO HPCI CAO01 001E 09 User Guide HPCI Login Manual PR Se Be SEE Er EA gt EAST T TCERGUEBH gr FETT Se77_L RTA UR PCRS Poe o Ps EL deen CO uae eure ieee Eile HPGPFID hand Certificate DIM FGz JP O test university OUstest unit GN user h2300001 Certificate Expiration Sun Mar 31 2013 12 00 00 0900 Proxy Certificate Expirati Thu Dec 1 2011 12 00 00 0900 xpiratian i Se O HORSE SSHRRER OSRD Fig 29 Enter the correct passphrase and try again 5 Troubleshooting for the error message A T 4AI 2 D NSEtELXLUT When the error message Y RAT 4172 2 3E ELUT7 is shown on the screen Fig 30 please check the error code If the error code is 526 code 3 your certificate may have expired fCERREBH SE SE LT Th 88A 7 YATALI PRELELEA EAA HbA 026
15. 40 bytes rw 1219 06 969 969 _ xviminfo 593 bytes nw 2071143 969 969 Fig 45 The Select files to upload dialog appears Fig 46 Select the file you want to upload and click the Upload button Fig 47 Fig 48 LEXI M 80x Be 288 user it r9 E PRI 27 T FAI s q4 Keath x4 J ai 5 c LEE oum hame Rf 4o 2n0WMT soon s ma Fig 46 48 NO HPCI CAO01 001E 09 User Guide HPCI Login Manual 100 Complete Uploading x Saving D XhomeXuserktest txt Estimated time left Completed 0 KB of 0 KB copied Uploading to home testuser test txt Transfer rate Fig 47 ziBi x File Navigate Favorites Tools Help Back S d 2 G5 LJ Properties t3 Delete 5 A x x Address home testuser EJ Go Name Sie Rights Modified Owner Group 4 KBdrwxr xr x 12 19 05 969 968 C globus C ssh 4 KBdrwx 12 19 06 969 969 LJ bash history 2 KB rw 42071152 969 969 Lal bash logout 33 bytes rw r r 12 19 05 969 969 LJ bash profile 176 bytes rw r r 12 19 05 969 968 _ bashrc 124 bytes rw r r 12 19 05 969 969 lesshst 40 bytes rw 1219 06 969 969 viminfo 593 bytes rw 2071143 969 12 bytes rw r r 2 07 01 19 969 Fig 48 Directories can be uploaded recursively B If you download a file
16. Download the Software Package 1 Download the latest GSI SSHTerm package from the following URL http www hpci nii ac jp software The GSI SSHTerm requires Java so install it on your PC before installing GSI SSHTerm Extract the downloaded package file and run as follows Windows Run Explorer change directory to bin and double click on the file sshterm bat Unix Linux MacOSX Change directory to bin run sshterm sh SS 2iBl xl Edit View Tools Proxy Help eb amp amp o c Be 3 on amp Connect to host x ig Host to Connect to Advanced Gancel JD Fig 53 GSI SSHTerm has successfully started if the above screen appears Fig 53 If the screen above Fig 53 does not appear and GSI SSHTerm does not start on Windows you may need to set the Java path Do one of the following and try again Assign the full pathname of the Java installation folder to the environment variable JAVA HOME Assign the full pathname of the folder bin under the java installation folder to the environment variable PATH For Windows refer to the table below 93 NO HPCI CAO01 001E 09 User Guide HPCI Login Manual Windows XP My Computer gt Properties gt Advanced gt Environment variables Windows Vista 7 Start gt Control Panel gt Advanced system settings gt Advanced gt Environment Variables 3 2 Installing Globus Toolkit This section describes th
17. ERRA 5 WES qs ze E SEO RR T SRS i ADLA Fig 12 Check the passphrase and try again 6 Troubleshooting for the error message YRT 412 271 3E ELXUT When the error message AT 412 412 RELELI is displayed on the screen Fig 13 please contact HPCI Helpdesk https www hpci office jp contact index html and send the message and the error code Fig 13 16 NO HPCI CAO01 001E 09 User Guide HPCI Login Manual 2 2 Proxy Certificate Registration You can skip this section if you will download your proxy certificate from the HPCI Certificate Issuing System as described in section 2 3 Downloading the Proxy Certificate The section 5 1 Flow of Proxy Certificate Registration and Downloading describes the difference of proxy certificate registration and downloading 2 2 1 Proxy Certificate Registration 1 Access the HPCI Certificate Issuing System For details refer to 2 1 1 2 On the HPCI SEBHEES TTA AT 4 4 2a screen click the amp XBSgIEBHERX TT link This will bring you to the RIFET form Fig 14 STRSEBH SE Fr rd A 77 gt ESET T TC PPE AAS FET RTL PIRSA RUFI C S SOLO FS ARR TEAL o Ust UI CHR O 5704 user test ac jp C2JP O test university OU test unit CN user h2300001 Sun Mar 31 2013 12 00 00 0900 Proxy Gertificate Exnirati Thu 12011 12 00 00 0900 xpiratian ace Ci MAL ALORS REA T SCAMS TT abedefzhijkImnopgrstuvewxyzABODEF GHIJKLMINOPC
18. GRSTUN WAY z1234587890 59 0 x en Toner o CFE STATES Y m oe Fig 14 Click the U7RY RUIZ ASEAN radio button fill in the ERRE A 3 EABR and 7 RIL Z fields and click the T button to store the Proxy Certificate in the proxy certificate repository 17 NO HPCI CAO01 001E 09 User Guide HPCI Login Manual e EFRA s RZIL Z your client certificate passphrase e EZ AZAR select a term of validity in hours for the proxy certificate you are going to register eo XXEEEBIE NAZL X passphrase required when you obtain the proxy certificate from the repository o HEIRE I NAZL A FEE same passphrase as the above 3 The R RERE T screen is displayed Fig 15 when your proxy certificate has been successfully registered HRERS SETARA gt SATS REIHE FET HPCFID hz agdaaa Certificate DM FG JP O test university Oll test unit GM user h 2300001 Sun Mar 31 2013 120000 0900 Proxy Certificate Thu Dec 1 2011 1200 00 0900 Expiration PERS HAS OST SE TLEL o Fig 15 The Proxy Certificate is stored in the repository 2 2 1 1 Troubleshooting 1 Troubleshooting for the error message VAZL A 4 AJIULCKTZ amp U The error message 7 VAZL A 4 A JJUCKTZ amp UN is shown on the CXESIEBHEESETTIESRA J screen Fig 14 when you have clicked the 3 fT button without entering anything into the EIEBHEE VA ZL 7X or RERE VA ZL X fiel
19. I Login Manual 2 2 1 Proxy Certificate HPCI Shared Storage User Registration Manual Proxy Certificate stored in the Proxy Certificate Repository SSH certificate based authentication HPCI Login Manual 2 5 Login to the Login Server HPCI Login Manual 2 3 1 Download via the HPCI Certificate Issuing System lt e e c om Proxy Certificate Repository l I I I I 1 Proxy Certificate HPCI Login Manual delegated from the I I I Y 2 3 2 Download with GSI SSHTerm proxy certificate 2 3 3 Download with Globus Toolkit stored in the Proxy Certificate User MEUS M 7 Fig 54 D By accessing the Certificate Issuing System you can issue a proxy certificate delegated from your client certificate and private key and then register the proxy certificate to the Proxy Certificate Repository Refer to 2 2 1 Proxy Certificate Registration 2 You can download the proxy certificate delegated from your proxy certificate stored in the Proxy Certificate Repository Refer to 2 3 2 Download with GSI SSHTerm and 2 3 3 Download with Globus Toolkit Alternatively as shown by Y in Fig 54 by accessing the Certificate Issuing System you can download the proxy certificate delegated from your client certificate and private key directly to your PC Refer to 2 3 1 Download via the HPCI Certificate Issuing System 3 When you login to a lo
20. If you want to download a file select File gt Download from menu Fig 49 ETE 0 x File Navigate Favorites Tools Help C New folder D LJ Properties t3 Delete i amp A Upload Files Ctrl V z5 Download Ctrl C Ctrl R 4 KBdrwxr xr x 12 19 O5 969 4 KBdrwx 12 19 06 969 968 Alt X 2 KB rw 207 1152 969 969 bash logout 33 bytes rw r r 12 19 05 969 969 __ bash profile 176 bytes rw r r 12 19 05 969 968 bashrc 124 bytes rw r r 12 19 05 969 969 E 40 bytes rw 1219 O6 969 969 593 bytes rw 2071143 969 12 bytes rw r r 2 07 01 19 969 Fig 49 The Select destination location dialog appears Fig 50 Select the folder you want to download a file to and click the Copy button Fig 51 Fig 52 49 NO HPCI CAO01 001E 09 User Guide HPCI Login Manual x 588 c user P Sie Fe C3 elobus BURP 7r 4b 3252 S4 EEaXUb SE 74 i 5 PEE coe em E Mie 2842 sacar wu Fig 50 100 Complete Downloading 8l x Saving home testuser test txt ninm HUI Estimated time left Completed 0 KB of 0 KB copied Downloading to D home user test txt Transfer rate Close Fig 51 Sauser OOOO O O E I RED RTV SRE WD AWIW ae FELAD E D home user z RiRBNS 2011 11 15 14 31 1KB 2012 02 07 1319
21. R 53 3 1 1 Download the SertwarePacKa8EG tuse aona E OTO R A EN 53 3A dS ballime Globus Tookiborasin nn E a E 54 3 2 1 CEMO O 54 3 2 2 MeO rA TOO 8 IO 1 2 AE 57 9 9 High performance bulk data transfer with SCP sse theatre teetn tns tte tees st attend 58 57 aM eR i iN i TC EN a TS a ER PR a 60 PO cin o P ETE RETE 61 9 1 Flow of Proxy Certificate Registration and Downloading sette tnne 61 NO HPCI CAO01 001E 09 User Guide HPCI Login Manual 1 Introduction 1 1 Overview This document is the Login Manual for the HPCI environment This document describes how to login to the login server for users of the HPCI computing and storage resources Users need to perform the following steps Obtain a certificate First you need to obtain a client certificate to login Single Sign On to the HPCI environment For details refer to 2 1 Obtaining a Certificate Obtain a proxy certificate Next you need to obtain the proxy certificate generated from your client certificate to login Single Sign On to the HPCI environment For details refer to 2 2 Proxy Certificate Registration and 2 3 Downloading the Proxy Certificate Login and transfer files to the login server After obtaining the proxy certificate you can login and transfer files to the login server For details refer to 2 5 Login to the Login Server and 2 6 Tra
22. USSPBEuUL SETADgu3um pimexMELTZEES CO uae eure nra p HPGPFID hand Certificate DIM FG JP O test university OUstest unit GN userhz300001 Certificate Expiration Sun Mar 31 2013 12 00 00 0900 Proxy Certificate Expirati Thu Dec 1 2011 12 00 00 0900 xpiration Ts max M HRERS AIHERBR OSRD Fig 26 Enter a passphrase and try again 2 Troubleshooting for the error message 6 MFLULEAALTCESL The error message 6 MFLILEAALTKCKTESL is shown on the CIS ipBHZEZ fTI S R A J screen Fig 22 when you have clicked the 447 button after entering a passphrase consisting of less than six characters Fig 27 28 NO HPCI CAO01 001E 09 User Guide HPCI Login Manual PRESET dE 4 73 gt REAR Sei D RRE gr FEIT TD TENERE Ug pues Yon k tame Tire ui zo pu mem Esempi HPCGI ID he s0001 Certificate DN C JP Ostest university OU test unit ON ueer hes00001 Sun Apr 1 2012 080000 0900 Proxy Certificate ER Thu Mar 22 2012 170 7 30 0900 Expiration ABS TOAS AAEE OARS Fig 27 Enter a passphrase consisting of six characters or more more than 12 characters are recommended and try again 3 Troubleshooting for the error message 20 MFLIBFAALTCESL The error message 20 MFLILFAALTCTESL is shown on the ERRER TIARA 7J screen Fig 22 when you have clicked the 3 fT button after entering a passphrase consisting of more than 20 characters Fig
23. Web site openssl x509 in hash value O noout fingerprint shal SHAI Fingerprint Fingerprint HPCI CA certificates are now trusted You need to obtain the latest CRL at regular intervals The following script registered on crontab will obtain the latest CRL and store it in the user directory automatically vi root getCrl sh bin sh CERTDIR globus certificates SERVER www hpci nii ac jp CRL CA hpcica crl usr bin wget P SCERTDIR http SSERVER ca SCRL CA HASH CA usr bin openssl crl in SCERTDIR SCRL CA noout hash bin mv SCERTDIR SCRL CA SCERTIDIR S HASH CA r0 chmod x getCrl sh 96 NO HPCI CAO01 001E 09 User Guide HPCI Login Manual o crontab e DO Jbin sh getCrl sh 3 2 2 Mac OS X 10 6 10 7 10 8 2 1 Preparation The following needs to be done to prepare for installation Install Xcode Install Xcode from the App Store Install Command Line Tools Run Xcode select Xcode gt Preferences gt Downloads gt Components gt Command Line Tools gt Install Create the installation directory Create a directory for installing libtool 2 4 2 and Globus Toolkit S mkdir SHOME Local Install libtool 2 4 2 Download the libtool 2 4 2 source package from the following URL and run the commands shown http y rftpmirror gn uscorg ldibbtool tar zxf libtool 2 4 2 tar gz cd libtool 2 4 2 configure prefix HOME Local libtool 2 4 2 make
24. arstuuwyz ABOCDEFGHIJEL MNOPGRETUNMVWXNZ 123456788077 3 820 x lar Tox A 7 JE REEBWEeHE Y Fig 10 Enter a passphrase consisting of 20 characters or less and try again 4 Troubleshooting for the error message i LU EE PRSEBHEEOD NA ZUL ZAT 831L c t IL The error message iT LU VETE RSIEBHHZEOD RIL ALEEA is shown on the FIRER IA h AF screen Fig 5 Fig 6 when you have clicked the 3847 button after entering two passphrases that do not match Fig 11 14 NO HPCI CAO01 001E 09 User Guide HPCI Login Manual FT GEDEAESE ETIN AE AL gt BFL ee ok FAS EIT er E user h2300001 SRL Vs SE E zs cun SRL Vs uds ub wm SRL VEETSIEBR EOD ASL EP 8L E A MAL CALI rODxuweBHde k6mcosE l abedetzhijklmnopgrstuvwxyzSBCDEFGHIIEKLMMOPGRS TUVWEY 1 234567000 3 9z0 x la Nb 7 UE RESEPERGd T Fig 11 Make sure you have entered the same passphrase in both boxes and try again 5 Troubleshooting for the error message Zi fE OO TET REBHEEOD VA ZL AT IEULCOUX E AC The error message XXE OD BFE OD VA ZUL AT IEUKGSU amp E A is shown on the ER FRIEBHEES fT 4 n AIRA 7J screen Fig 6 when you have clicked the 3 fT button after entering an incorrect old client certificate passphrase Fig 12 15 NO HPCI CA01 001E 09 User Guide HPCI Login Manual C JP O test university OU test unit CN user h2300001 weno e mcam a SALA Ver EEBHRE D mum SRL ET
25. btaining a Centea 6 gt ame orco re E eo Or ee Ore 7 2 1 1 Iss ing d Ollent Gert CAS ceana a A entonaben MM EE 7 2 2 Proxv Gerutcate Re CIS EAC ON sires ees idm EM M LM ML EM EE 17 2 2 1 Proxy GCE CAUC FREES CEALIOT ES und oci EAT AT Ee et ELLE 17 2 3 Downloadins the Proxy Gert e e He eee ee mus teo de TL Ea ER PT IM d Dd IE 24 2 3 1 Download via the HPCI Certificate Issuing System essent ttes 24 2 3 2 Download witli GSI S9bl Fertur otn to e e E AR RUE AR RI XM FN GER S nM sache 31 2 3 9 Download with Globus FoolkIt z itii tee ertet eoo is eta ldesk esas edes tu eee euius 36 2 4 Dploadirs the Proxv GerFHTIG EB stad etri od tra ioUtx iet adis tU ttr aant e tata ttti sri es e A Ep em E EE EE 39 2 4 1 Upload With ALO US Eolo AEN E Rm 39 2 5 Losin tothe bos Ser VI aani E a ana a 42 2 5 1 Login with GSI SSHTerm uses Java for Windows Unix Linux MacOSX s 42 2 5 2 Login with Globus Toolkit for Unix Linux MacOSYX eet tnter tentent 45 20 Lanstermne Hes to tne Osim Serve ust de ibas bns aM ELEME 47 2 6 1 Transfer with GSI SSHTerm uses Java for Windows Unix Linux MacOSX sss 47 2 6 2 Transfer with Globus Toolkit for Unix Linux MaCOSX cccsssssesseessessecseessessecseessecsessesseeseeeeeseeseeseeesees 50 Appendice Instaline Ol CAE OS oeri hss tae a data Nh lesa la 53 9d sdnstellins CSI S SE TENN nuc men ben xa Wax ubt ek E EY eu uu exu ug ue vau npn E e RR eA EU
26. codet 3 9 Fig 30 Renew your client certificate and try again Please contact HPCI Helpdesk https www hpci office jp contact index html regarding any other error codes 2 3 2 Download with GSI SSHTerm This subsection describes the procedure for downloading your Proxy Certificate using the MyProxy client function of GSI SSHTerm 31 NO HPCI CAO01 001E 09 User Guide HPCI Login Manual Please refer to section 3 1 Installing GSI SSHTerm for instructions on installing the software and refer to section 2 2 Proxy Certificate Registration for instructions on registering of your proxy certificate 1 Start GSI SSHTerm Windows Run Explorer change directory to bin and double click on the file sshterm bat Unix Linux MacOSX Change directory to bin run sshterm sh GSI SSHTerm has successfully started if the following screen appears Fig 31 View Tools Proxy Help Sale Ble 4 x g l Connect to host x ig Host to Connect to Advanced Cancel e L Fig 31 If the screen above Fig 31 does not appear and GSI SSHTerm does not start on Windows check your Java settings refer to section 3 1 1 2 Download the proxy certificate from the proxy certificate repository and login to the login server Enter the hostname of the login server and click the OK button The hostname of the login server should have been provided by the HCPI system providers that issued
27. ds in the entry form Fig 16 18 NO HPCI CA01 001E 09 User Guide HPCI Login Manual HPCT ID h2300001 HPOI Account user test ac ip Certificate DN C2JP Oztest university OU test unit CN user h2300001 Sun Mar 31 2013 12 00 00 0900 Proxy Certificate Thy Dec 1 2011 12 00 00 0900 Expiration l HEAS Foal a Seeds oe MABL ABAAILTOUEAL to Fig 16 Enter the required passphrases and try again 2 Troubleshooting for the error message 6 NFLLIEAALTCKESL The error message 6 MFLULEAALTCTESL is shown on the amp XBSgIEBHEESETTIESR A 7J screen Fig 14 when you have clicked the 3 fT button after entering a passphrase consisting of less than six characters Fig 17 19 NO HPCI CA01 001E 09 User Guide HPCI Login Manual 2 C2JP O test university OU test unit CN user h2300001 Sun Mar 31 2013 12 00 00 0900 Proxy Certificate Dec 1 2011 12 00 00 0900 Expiration 73 BABE CEST HESSE BFL EADIUCGEAU te Fig 17 Enter a passphrase consisting of six characters or more more than 12 characters are recommended and try again 3 Troubleshooting for the error message 20 X ELEARAJJUCKTZ amp UN The error message 20 MFLIFAALTCERSL is shown on the 5 H HT 1HSRA J screen Fig 14 when you have clicked the 3 fT button after entering a passphrase consisting of more than 20 characters Fig 18 20 NO HPCI CA01 001E 09 Us
28. e procedure for installing Globus Toolkit The following are the procedures for CentOS 5 6 and MacOSX 10 6 10 7 10 8 2 3 2 1 CentOS 5 6 1 Preparation To build the Globus Toolkit from source all of the following software should be installed Required software gcc tar sed make libtool ltdl devel Openssl devel perl perl Archive Tar CentOS 5 only perl Compress Zlib CentOS 5 only perl IO Zlib perl Test Simple perl XML Parser 2 Download the Software Package Download the Globus Toolkit source package from the following URL Check the information about Globus Toolkit listed in the space of the National Institute of Informatics of HPCI Contents Management System for Information Sharing and download the recommended version If there is no information regarding Globus Toolkit download the latest version 54 NO HPCI CAO01 001E 09 User Guide HPCI Login Manual Globus Toolkit http www globus org toolkit downloads HPCI Contents Management System for Information Sharing https www hpci office jp info In this document we describe the installation procedure for using Gt5 2 2 all source installer tar gz 3 Installing Create a user globus any UID is okay useradd u 968 m globus mkdir p usr local globus chown globus globus usr local globus globus tar zxf gt5 2 2 all source installer tar gz globusS ed gt5 2 2 all source installer globus configure prefix usr
29. elpolsnlg cp In sections 2 1 1 Issuing a Client certificate 2 3 2 1 Troubleshooting and 2 3 3 1 Troubleshooting added the availability of portal c hpci nii ac jp in case of trouble on portal lt NpGL Ni tae ep In sections 2 1 1 1 Troubleshooting 2 2 1 1 Troubleshooting 2 3 1 1 Troubleshooting and 2 3 3 1 Troubleshooting changed the term system administrator to HPCI Helpdesk In sections 2 3 3 Download with Globus Toolkit 2 5 2 Login with Globus Toolkit for Unix Linux MacOSX and 2 6 2 Transfer with Globus Toolkit for Unix Linux MacOSX changed the filename of downloaded proxy certificate to x509up u UID Added the troubleshooting in sections 2 3 3 1 Troubleshooting 4 2 3 3 1 Troubleshooting 5 2 4 1 1 Troubleshooting and 2 5 1 1 Troubleshooting In section 3 2 1 CentOS 5 6 added how to check the Globus Toolkit version to be installed NO HPCI CAO01 001E 09 User Guide HPCI Login Manual Added the section 5 Appendix Modified the term HPCI Certificate Issue System to HPCI Certificate Issuing System Replaced the platform dependent character with the one byte character 2014 11 11 In section 2 1 1 Issuing a Client certificate 1 added how to bookmark HPCI Certificate Issuing System In section 2 1 1 Issuing a Client certificate 2 added the description of the link for switching language Updated Fig 2 and
30. er myproxy logon s portal hpci nii ac jp 1 wrong HPCI ID t 1 Enter MyProxy pass phrase Failed to receive credentials ERROR from myproxy server No credentials exist for username wrong HPCI ID Check the HPCI ID and try again 3 Troubleshooting for the error message Bad password The error message Bad password is displayed when you have run the command with an incorrect passphrase user myproxy logon s portal hpci nii ac jp 1 HPCI ID t 1 Enter MyProxy pass phrase wrong passphrase Failed to receive credentials ERROR from myproxy server 37 NO HPCI CAO01 001E 09 User Guide HPCI Login Manual Bad password invalid credential passphrase Check the passphrase and try again 4 Troubleshooting for the error message Connection refused The error message Connection refused is displayed when a communications failure has occurred between your local PC and the proxy certificate repository server user myproxy logon s portal hpci nii ac jp 1 HPCI ID t 1 Unable to connect to 136 197 100 155 7512 Unable to connect to portal hpci nii ac jp Connection refused You need to communicate to the port 7512 tcp of the HPCI Certificate Issuing System Please contact your network administrator to make sure that the port is open When you cannot fix the problem please contact HPCI Helpdesk https www hpci office jp contact index html 5 Troubleshooting for the error mes
31. er Guide HPCI Login Manual HPCIID h2300001 HPGI Account user test ac jp Certificate DN C JP O test university OU test unit CN user h2300001 Sun Mar 2013 12 00 00 0900 Proxy Certificate Thu Dec 1 2011 12 00 00 0900 Expiration 2 TEEE FAAIL TSS t Fig 18 Enter a passphrase consisting of 20 characters or less and try again 4 Troubleshooting for the error message RIL AA HZ CHET The error message JNZIL AAHMjEZ0 CLVET is shown on the 4 amp ESEIEBHEEA UY DH F screen Fig 14 when you have clicked the 47 button after entering an incorrect client certificate passphrase Fig 19 21 NO HPCI CA01 001E 09 User Guide HPCI Login Manual HPCTI ID h2300001 ara cet Certificate DIN C P O test university OU test unit CN user h2300001 Sun Mar 2013 12 00 00 0900 Proxy Certificate Expiration L AEN ELEME Thu Dec 1 2011 12 00 00 0900 Fig 19 Check the passphrase and try again 5 Troubleshooting for the error message VAZL X 75 ALEHA for the Proxy certificate The error message VAZL AX2 ALEEA is shown on the 4 amp XSEEBHEE ETT IE SR A DN screen Fig 14 when you have clicked the 47 button after entering two passphrases for the Proxy Certificate that do not match Fig 20 22 NO HPCI CA01 001E 09 User Guide HPCI Login Manual C JP O test university OU test unit CN user h2300001
32. er x Retrieve Credentials from MyProxy A Host portal hpciniiac ip Account Name myname Passphrase Use a Grid certificate in pkcs12 format Filename Browse Passphrase P Use Certificate Search for certificates in Internet Explorer or Firefox Use Certificate from Browser C Cancel Fig 42 If the dialog Grid Certificate Proxy needed for Authentication Fig 42 appears after clicking the OK button on the connection screen Fig 41 there is no proxy certificate on your machine or the proxy certificate on your machine has expired Refer to section 2 3 2 Download with GSI SSHTerm and try again 3 If you do not receive any error message but cannot login the login server and see the message Disconnected at the bottom of the screen If you do not receive any error message cannot login the login server and see the message Disconnected at the bottom of the screen check the following folders for old files such as the HPCI CA self signed certificate and the Signing Policy Windows XP C XDocuments and Settings lt username gt globus certificates 44 NO HPCI CAO01 001E 09 User Guide HPCI Login Manual Windows Vista 7 C Users lt username gt globus certificates Unix Linux MacOSX Delete the old files and try again 4 Troubleshooting for the error message Problem while accessing MyProxy MyProxy get failed When the error message Problem while access
33. ered here will be required when you issue the proxy certificate as described in section 2 2 Proxy Certificate Registration and 2 3 Downloading the Proxy Certificate 10 NO HPCI CAO01 001E 09 User Guide HPCI Login Manual 6 The FR FREBHES TISE I screen is displayed Fig 7 when your certificate has been successfully issued VF aEBHa TETTE 71 gt STIS 6 TR T ul BH SS FETT sc f HPCEID h2e00001 Certificate DN O JP O test university OUstest unit GN userhz300001 ST aBHERDS DTASETULELAE Fig 7 Your certificate is stored in the repository on the HPCI Certificate Management System You do not need to do the above procedure again until after the expiration date of your client certificate You need to download the proxy certificate generated with your client certificate to access to the login server Proceed to the section 2 3 Downloading the Proxy Certificate 2 1 1 1 Troubleshooting 1 Troubleshooting for the error message LEFT IREO VA ZL A AJUCKIZSsU The error message LU EE ERSEBHEEOD NA ZUL AAJUCKIZ amp UN is shown on the F z S TIARA J screen Fig 5 Fig 6 when you have clicked the 3 fT button without entering a passphrase in the entry form Fig 8 11 NO HPCI CA01 001E 09 User Guide HPCI Login Manual T me CH user h2300001 ALA Veg T AAS 1 gelo SRL VS FEHB OM DL REATO TIZA to QUE zr OS AFLA FA ETERO SASL ARAALTCRAL to
34. ertificate 2 3 Downloading the 3 Appendix Installing Registration Proxy Certificate applications 2 4 Uploading the Proxy 25 Login to the Login 2 6 Transferring files to Certificate Server the Login Server Fig 1 NO HPCI CAO01 001E 09 User Guide HPCI Login Manual In order to login to the login server you need to perform the following steps For Windows Unix Linux MacOSX 1 2 1 1 Issuing a Client certificate 2 2 2 1 Proxy Certificate Registration 3 2 3 2 Download with GSI SSHTerm 4 2 6 1 Transfer with GSI SSHTerm uses Java for Windows Unix Linux MacOSX Users uses Java for Windows Unix Linux MacOSX Preparation 3 1 Installing GSI SSHTerm 2 1 1 Issuing a Client certificate certificate is already issued 2 3 1 Download via the HPCI Certificate Issuing System 2 2 1 Proxy Certificate Registration download the proxy certificate onto your PC 2 5 1 Login with GSI SSHTerm uses Java for 2 3 2 Download with Windows Unix Linux MacOSX GSI SSHTerm 2 6 1 Transfer with GSI SSHTerm uses Java for Windows Unix Linux MacOSX Successful login to the login server NO HPCI CAO01 001E 09 User Guide HPCI Login Manual For Unix Linux MacOSX using the command line 1 2 1 1 Issuing a Client certificate 2 2 3 1 Download via the HPCI Certificate Issuing System 3 3 2 Installing Globus Toolkit 4 2 5 2 Login with Globus Toolkit for Unix Linu
35. erver sending incremental file list test txt sent 102064 bytes received 3lbytes 2347 01 bytes sec total size is 104857600 speedup is 1027 06 If the following error occurs your Proxy Certificate may have expired userS gsiscp P 2222 test txt FQDN of Login Server Permission denied publickey gssapi keyex gssapi with mic password keyboard interactive lost connection Rerun the command with the additional option v If the following error message is displayed your certificate has expired user gsiscp v P 2222 test txt FQDN of Login Server GobD Minor Stacus Error Chain globus_gsi_gssapi Error with gss context globus lt osi gssapais Error with GSI redential globus_gsi_gssapi Error with gss credential handle globus credentials Error with credential The proxy credential jtmo x5s09up u UD 51 NO HPCI CAO01 001E 09 User Guide HPCI Login Manual with subject C JP O Test University OU Test Unit CN Test User CN 1480426253 expired 90 minutes ago debugl No more authentication methods to try Permission denied publickey gssapi keyex gssapi with mic password keyboard interactive lost connection Renew your proxy certificate refer to section 2 3 Downloading the Proxy Certificate for details and try again 92 NO HPCI CAO01 001E 09 User Guide HPCI Login Manual 3 Appendix Installing applications 3 1 Installing GSI SSHTerm 3 1 1
36. ge 2 1 Obtaining a Certificate You need to obtain your client certificate in order to login to the HPCI resources using Single Sign On SSO All certificates have an expiration date and you will need to go through this process again to re issue the certificate once it expires This chapter describes how to obtain a client certificate 2 1 1 Issuing a Client certificate 1 Access the HPCI Certificate Issuing System HPCI Certificate Issuing System Hhttpst DOPtalohpoluidd ec If you cannot access portal hpci nii ac jp refer to the section 1 1 Overview and access an alternative system portal c hpci nii ac jp If you want to bookmark the URL of HPCI Certificate Issuing System please do it after successful login Fig 4 Because the URL of Primary Center Selection screen Fig 2 is generated each time of your access the bookmark may be useless 2 You will be automatically redirected to the Primary Center Selection screen Fig 2 Select the Primary Center that you chose when you registered the HPCI ID and click the Select button Once the Login for Primary Center screen appears Fig 3 enter your HPCI account information and click the H7 47 button You can switch language of the text on the screen by clicking the link Change language to English or ARRITUR Z NO HPCI CAO01 001E 09 User Guide HPCI Login Manual HPCI Federation Select a primary center In order to access this service you must
37. gin server of an HPCI system provider using GSI SSHTerm GSI SSHTerm will automatically download the proxy certificate delegated from your proxy certificate stored in the Proxy Certificate Repository as shown by 2 in Fig 54 to your PC and authenticate against the server with this proxy certificate At this time GSI SSHTerm will store to the login server a proxy certificate delegated from the proxy certificate downloaded to your PC Refer to 2 5 Login to the Login Server 61 NO HPCI CAO01 001E 09 User Guide HPCI Login Manual When you transfer files between the HPCI shared storage and the login server you have to authenticate against the storage with the delegated proxy certificate on the login server Refer to HPCI Shared Storage User Manual 62
38. hpciniiac jp Account Name mmname Passphrase Use a Grid certificate in pkcs12 format Filename Browse Passphrase Use Certificate Search for certificates in Internet Explorer or Firefox Use Certificate from Browser EL Gancel Fig 36 Check the passphrase and try again 3 Troubleshooting for the error message MyProxy Bad username and or password The error message MyProxy Bad username and or password is shown when you have entered an incorrect HPCI ID or passphrase Fig 37 Grid Certificate Proxy needed for Authentica Xj MyProxy Bad username and or password Retrieve Credentials from MyProxy 2 Host portalhpciniiac ip Account Name mymame Passphrase Use a Grid certificate in pkcs12 format Filename E Browse Passphrase A Use Certificate Search for certificates in Internet Explorer or Firefox Use Gertificate from Browser p Fig 37 Enter the correct HPCI ID or passphrase and try again 4 If you do not receive any error message but cannot login the login server and see the message Disconnected at the bottom of the screen If you do not receive any error message cannot login the login server and see the message Disconnected at the bottom of the screen check the following folders for old files such as the HPCI CA self signed certificate and the Signing Policy Windows XP C XDocuments and Settings lt username gt globus certificates Wind
39. ibboleth DS Required for Shibboleth authentication refer to 2 1 1 Required for access to the HPCI Certificate Issuing client host ANY HPCI Certificate Issuing System System refer to 2 1 1 client host ANY HPCI Certificate 1512 Required for Uploading and ssuing System downloading the proxy certificates refer to 2 3 and 2 4 CP client host ANY Login Server 2222 gsissh gsiscp refer to 2 5 and 2 6 cl ient host ANY IdP server of the 443 Required for Shibboleth Primary Center authentication refer to 2 1 1 3 NO HPCI CAO01 001E 09 User Guide HPCI Login Manual As of lOctober 2012 use the following configuration information CA repository 136 187 100 132 www hpci ni i ac jp Shibboleth DS 136 187 100 134 ds hpci ni i ac jp HPCI Certificate Issuing System 136 187 100 135 portal hpci nii ac jp 157 1 137 20 portal c hpci nii ac jp IdP server of the Primary Center URL reached through the following steps 1 Access the HPCI Certificate Issuing System with your Web browser 2 Select your Primary Center on the Primary Center Selection screen and then 3 be automatically redirected to the Login for Primary Center screen Login Server IP address of the login server Please contact the HPCI system m providers or check the HPCI office website for the correct address NO HPCI CAO01 001E 09 User Guide HPCI Login Manual 2 Usa
40. ied publickey gssapi keyex gssapi with mic password keyboard interactive Refer to section 2 3 Downloading the Proxy Certificate for information regarding storing certificate files save 46 NO HPCI CAO01 001E 09 User Guide HPCI Login Manual the Proxy Certificate in tmp x509up_u UID and try again 2 6 Transferring files to the Login Server This section describes the two procedures available for transferring files to the Login Server Select the one suitable for your client environment Windows gt Refer to section 72 61 Transfer with GSI SSHTerm uses Java for Windows Unix Linux MacOSX Unix Linux MacOSX Refer to 2 6 1 Transfer with GSI SSHTerm uses Java for Windows Unix Linux MacOSX or 72 6 2 Transfer with Globus Toolkit for Unix Linux MacOSX 2 6 1 Transfer with GSI SSHTerm uses Java for Windows Unix Linux MacOS X Refer to 3 1 Installing GSI SSHTerm for instructions on installing GSI SSHTerm if you have not installed it already First start GSI SSHTerm and connect to the login server For details refer to section 2 5 1 Login with GSI SSHTerm uses Java for Windows Unix Linux MacOSX Next select Tools gt SFTP Session from the menu Fig 43 Fig 44 GSI SSHTerm esissh handai e elsd kns nec co jp i j l xl File Edit View Tools Proxy Help O Q WE RvrcSessin ata BW OD 9 e 22358 Last login a Terminal Session Alt G from gsissh handai g elsd k
41. ing MyProxy MyProxy get failed Fig 35 is shown refer to 2 3 2 1 Troubleshooting 1 2 5 2 Login with Globus Toolkit for Unix Linux MacOS X Refer to section 3 2 Installing Globus Toolkit for instructions on installing Globus Toolkit By default the command gsissh uses the file tmp x509up u UID as the proxy certificate If you store your proxy certificate in a different location assign the certificate path to the environment variable X509 USER PROXY and export or setenv the variable before running the command 1 Obtain a proxy certificate from the proxy certificate repository For details refer to section 2 3 Downloading the Proxy Certificate 2 Run gsissh user yourPC S gsissh p 2222 FQDN of the login server Last login Mon Jul 26 12 34 56 2010 from xxx xxx ne jp user loginserver By default gsissh enables you to connect to another login server or Gfarm storage from the server you logged in because GSI SSHTerm automatically creates your proxy certificate on the server you logged into certificate creation is delegated If you do not need to access other servers or Gfarm storage and do not want to delegate your credential add the option o GSSAPIDelegateCredentials no 2 5 2 1 Troubleshooting If you encounter the following error rerun the command with the additional v option to print debagging messages user gsissh p 2222 FQDN of Login Server Permission denied
42. local globus globus make gsi openssh gsi myproxy tee installer log globusS make install globus exit vi etc profile d globus sh export GLOBUS LOCATION usr local globus source GLOBUS LOCATION etc globus user env sh vi etc profile d globus csh setenv GLOBUS LOCATION usr local globus source GLOBUS LOCATION etc globus user env csh 4 Trusting certificate issued by HPCI CA Access the following URL via a Web browser to obtain the following files HPCI CA 99 NO HPCI CAO01 001E 09 User Guide HPCI Login Manual https www hpci nii ac jp ca HPCI CA self signed certificate Select CA Information from the menu on the screen and click the HPCI CA self signed Certificate link to download the file hocica pem zip Signing Policy file Select CA Information from the menu on the screen and click the Signing Policy link to download the file hpcica signing policy zip CRL Select CA Information from the menu on the screen and click the CRL download link Create the directory to store the trusted certificates and extract and store the retrieved files mkdir p globus certificates cd globus certificates unzip hpcica pem zip unzip hpcica signing policy zip mv hpcica crl openssl crl in hpcica crl noout hash For HPCI CA self signed certificate run the following command and check whether the output value of the fingerprint matches the one on the
43. make install 2 Download the Software Package 97 NO HPCI CAO01 001E 09 User Guide HPCI Login Manual Refer to section 3 2 1 2 Download the Software Package 3 Installing Run the following commands mkdir HOME Local gt5 2 2 export CPPFLAGS 1 HOME Local libtool 2 4 2 include export LDFLAGS L HOME Local libtool1 2 4 2 lib tar zxf gt5 2 2 all source installer tar gz cd gt5 2 2 all source installer configure prefix HOME L F l gt5 2 2 with flavor gcc64dbg make gsi openssh gsi myproxy tee installer log vi SHOME bashrc export GLOBUS LOCATION HOME Local gt5 2 2 PATH S GLOBUS LOCATION bin PATH vi HOME bash profile if f S SHOME bashrc then source SHOME bashrc S source SHOME bashrc S mkdir SGLOBUS LOCATION etc ssh 4 Trusting certificate issued by HPCI CA Refer to section 3 2 1 4 Trusting certificate issued by HPCI CA 3 3 High performance bulk data transfer with SCP It is said that high performance data transfer with scp is difficult due to the data encryption involved when using the SSH protocol This difficulty is mainly caused by two factors One is the communication delay the other is the bottleneck caused by the cryptographic overhead Researchers at the Pittsburgh Supercomputing Center worked to solve 08 NO HPCI CAO01 001E 09 User Guide HPCI Login Manual these problems and the GSI SSH included in Globus Toolkit you ins
44. ns nec co jp testuserBgs Q9 Secure Tunneling Alt Z t SFTP Session Alt B Keygen Ke Options o esissh handai t elsd kns nec cajp 22 47 NO HPCI CA01 001E 09 User Guide HPCI Login Manual CC 8 olx File Navigate Favorites Tools Help e 9 6a o EA reo C Address home testuser EJ Go Size Riehts Modified Owner Group fu globus LL i 4 KBdrwxr xr x 12 19 05 969 C3 ssh 4 KBdrwx 12 19 06 969 __ bash history 2 KB rw 2071152 969 bash logout 33 bytes rw r r 12 19 05 969 bash profile 176 bytes rw r r 12 19 05 969 bashrc 124 bytes rw r r 12 19 05 969 lesshst 40 bytes rw 1219 O6 969 viminfo 593 bytes rw 2071143 969 o Connected to gsissh handai e elsd kns nec coip Fig 44 A If you want to upload a file If you want to upload a file select File gt Upload File from menu Fig 45 RC IEEE lolx File Navigate Favorites Tools Help C New folder LJ Q Properties fi Delete n1 amp m Upload Files Ctrl V Go ODownioad Ovi Size mms Modified Owner Group E Rename CtritR 4 KBdrwxr xr x 12 19 05 969 969 Exit Alex 4 KBdrwx 12 19 06 969 969 m 2 KB rw 2071152 969 969 bash logout 33 bytes rw r r 12 19 05 969 969 LJ bash profile 176 bytes rw r r 12 19 05 969 969 7 bashrc 124 bytes rw r r 12 19 05 969 969 lesshst
45. nsferring files to the Login Server Install and configure necessary applications You need to install several applications to login to the login server For details refer to 3 Appendix Installing applications In order to login to the HPCI environment you must have already acquired an HPCI ID You are also required to be a member of an approved research project and have an HPCI account You can check information about the maintenance and trouble by the mail from HPCI Helpdesk or at the web page EIRA gt EMAAR on HPCI Contents Management System for Information Sharing If you cannot access HPCI Certificate Issuing System portal hpci nii ac jp due to system failure you can try to access an alternative system portal c hpci nii ac jp instead However availability of the service is depending on seriousness of trouble HPCI Contents Management System for Information Sharing https www hpci office jp info In this document bold characters in the command image are the commands you need to execute run the command as the privileged user root in Unix Linux MacOSX run the command as a non privileged user not root in Unix Linux MacOSX C X run the command in the command prompt on Windows NO HPCI CAO01 001E 09 User Guide HPCI Login Manual 1 2 Flow The numbers in the following figure correspond to the section numbers in this document Fig 1 User 2 1 Obtaining a Certificate 2 2 Proxy C
46. ows Vista 7 C Users lt username gt globus certificates Unix Linux MacOSX ef GlODUS Certificates 39 NO HPCI CAO01 001E 09 User Guide HPCI Login Manual Delete the old files and try again 2 3 3 Download with Globus Toolkit This subsection describes the procedure for downloading your Proxy Certificate using Globus Toolkit which is produced by Globus Alliance Please refer to section 3 2 Installing Globus Toolkit for instructions on installing the software If you want to download the proxy certificate with Globus Toolkit you first need to store the proxy certificate in the repository refer to the section 2 2 Proxy Certificate Registration for details 1 Obtain your proxy certificate from the repository user myproxy logon s portal hpci nii ac jp 1 HPCI ID t term of validity of proxy cert hours Enter MyProxy pass phrase lt enter the passphrase of your proxy certificate A credential has been received for user user in tmp x509up u UID If you omit the option t term of validity of proxy cert hours the term of validity is set to either the term of validity of the proxy certificate stored in the repository or 12 hours whichever is shorter The proxy certificate is stored in the file tmp x509up u UID by default If you want to store it in another location assign the file path in which you want to store the proxy certificate to the environment variable X509
47. ows XP Vista 7 x509up_u_ USERNAMES 2 1 To show the environment variables 3 TMP on Windows refer to the following table To show the environment variables Windows XP My Computer gt Properties gt Advanced gt Environment variables If TMP exists as both a System and User variable use the User variable User Variables override System variables Windows Vista 7 Start gt Control Panel gt Advanced stem settings gt Advanced gt Environment Variables If TMP exists as both a System and User variable use the User variable User Variables override System variables 2 To show the environment variables TMP and USERNAME on Windows run the following commands at the command prompt C gt echo STMP C DOCUME 1 user LOCALS 1 Temp 9 lt display the value of STMP C gt echo SUSERNAMES user lt display the value of USERNAME Internet Explorer 6 on Windows XP If you use Internet Explorer 6 on Windows XP the following dialog appears Fig 24 Select Dr ILERE d amp and save the certificate with a name following the naming rule in Table 1 26 NO HPCI CAO01 001E 09 User Guide HPCI Login Manual h2300001 proxy pem amp Fit RO Pa eRe LTS h 300001 proxy pem 774 JES pem File 2 3 KE ret HATHSFIT httpz portalhpciniiac jp CAD HC TEL e S adios A CSESU O u254 CBKOX Fig 24 Internet Explorer 9 on Windows 7 If you use Internet E
48. pem by default If you want to use different files assign the file paths of the certificate and the private key to the environment variables X509 USER CERT and X509 USER KEY respectively and export or setenv these variables before running the command 2 4 1 1 Troubleshooting When you encounter an error you can obtain debugging messages by re running the command with the additional option v 1 Troubleshooting for the error message Bad passphrase The error message Bad passphrase is displayed when you have entered an incorrect password for your client certificate user myproxy init s portal hpci nii ac jp c 24 Your identity C JP O NII OU HPCI CN user Enter GRID pass phrase for this identity lt enter wrong password Error Couldn t read user key Bad passphrase for key in home user globus userkey pem Use debug for further information grid proxy init failed Check the password and try again 2 Troubleshooting for the error message Couldn t verify the authenticity The error message Couldn t verify the authenticity is displayed when your certificate may have expired user myproxy init s portal hpci nii ac jp c 24 Your identity C JP O NII OU HPCI CN user Enter GRID pass phrase for this identity Creating proxy Error Couldn t verify the authenticity of the user s credential to generate a proxy from Use debug for further information grid proxy init failed
49. publickey gssapi keyex gssapi with mic password keyboard interactive 45 NO HPCI CAO01 001E 09 User Guide HPCI Login Manual 1 Troubleshooting for an error message like expired 0 minutes ago The following error means your Proxy Certificate has expired user gsissh v p 2222 FQDN of Login Server Goo Minor Status Error Chain globus gsi gssapi Error with gss context globus gsi gssapi Error with GSI credential globus gsi gssapi Error with gss credential handle globus credential Error with credential The proxy credential tmp x509up_u UID with subject C JP O Test University OU Test Unit CN Test User CN 474218049 expired 0 minutes ago debugl No more authentication methods to try Permission denied publickey gssapi keyex gssapi with mic password keyboard interactive Renew your proxy certificate refer to section 2 3 Downloading the Proxy Certificate for details and try again 2 Troubleshooting for the error message Could not find a valid proxy certificate file location The following error means the Proxy Certificate may have been stored in the wrong location user gsissh v p 2222 FQDN of Login Server Attempt 2 globus credential Error reading proxy credential globus sysconfig Could mot find a valid proxy certilicate file location globus sysconfig Error with key filename globus sysconfig File does not exist tmp x509up_u UID is not a valid file Permission den
50. rtificates in Internet Explorer or Firefox Use Certificate from Browser aL Cancel Fig 39 e Hostname portal hpci nii ac jp e Account Name your HPCI ID not your HPCI account nor your HPCI local account e Passphrase the passphrase you specified when registering the proxy certificate After you enter the correct information click the button Use MyProxy Your proxy certificate will be automatically downloaded and you can login to the login server 2 0 1 1 Troubleshooting 1 Troubleshooting for the error message A problem occurred in loading your credentials The error message A problem occurred in loading your credentials Fig 40 is displayed when the downloaded proxy certificate on your client machine is corrupt GSI SSHTerm Authentication x 4 problem occurred in loading your credentials Details i i Fig 40 Select Proxy Destroy Proxy from the menu and delete the downloaded proxy certificate from your client machine then refer to section 2 3 2 Download with GSI SSHTerm and try again 43 NO HPCI CAO01 001E 09 User Guide HPCI Login Manual 2 If the dialog Grid Certificate Proxy needed for Authentication Fig 42 appears after clicking the OK button on the connection screen Fig 41 e O amp amp 9 Cc Be 9 4 x78 l Connect to host x ig Host to Connect to Advanced Gancel Fig 41 Grid Certificate Proxy needed for Auth
51. sage Connection timed out The error message Connection timed out is displayed when a communications failure has occurred between your local PC and the proxy certificate repository server or the proxy certificate repository server is down user myproxy logon s portal hpci nii ac jp 1 HPCI ID t 1 Unable to connect to 136 157 100 135 7512 Unable to connect to portal hpci nii ac jp Connection timed out If the proxy certificate repository server is down due to the maintenance or trouble refer to 1 1 Overview and access an alternative system portal c hpci nii ac jp instead If the server is neither under maintenance nor in trouble please contact your network administrator whether you can communicate to the port 7512 tcp of the HPCI Certificate Issuing System When you cannot fix the problem please contact HPCI Helpdesk https www hpci office jp contact index htm1 38 NO HPCI CAO01 001E 09 User Guide HPCI Login Manual 2 4 Uploading the Proxy Certificate You do not need to upload the proxy certificate to the proxy certificate repository in order to use HPCI resources but it is possible to use your client certificate to create the proxy certificate on your local PC You can then upload it to the repository by following the instructions below This section describes the procedures available for uploading the proxy certificate to the repository Select the one that is suitable for your client en
52. select a primary center in which you have your HPCI account Recently used primary centers co center Glear Enter primary center name Or choose from a list OO center v Remember my selection for this session w BASI COSA Please do not bookmark this page The bookmark may be useless because the URL of this page is generated each time of your access Need assistance Contact HPC Helpdesk with description INTERNET Fig 2 Primary Center XX Login Page XX Login Page gt Hass ISA Fig 3 3 The HPCI Certificate Issuing System screen is displayed Fig 4 after successfully logging in to the HPCI Certificate Issuing System HPCIaEBHzrSE TT AF h2 ef al ASAT FEAST 77 D F XD 47 Za TIe RRAZ B scd TLD ST EEBHEEA OLD FE ERE d BEL CUTE s X ETEA OLD FAERERFIRIUAGA CO HPCID 38550 FFAS SE Pedo HA STAs NAIL AB CP Fig 4 4 Click on the zi HA 47 link to display the E amp F RIEHBHERZ TI form If you issue a certificate the certificate for the first time NO HPCI CA01 001E 09 User Guide HPCI Login Manual The 25 iE AR 447 screen should look like Fig 5 HFCT ID h2300001 HPGI Account user test ac jp Certificate DM Certificate Expiration FAL Nae moule ze SRL E TEARI i RE Fig 5 If you have already issued the certificate The TR F EEBHEES TT screen should look like Fig 6 NO HPCI CAO01 001E 09 User Guide HPCI Login Manual
53. talled in section 3 2 Installing Globus Toolkit contains the results of their research You do not need to worry about communication delay if you use Linux because window size is automatically optimized However the bottleneck caused by the cryptographic overhead will be improved by specifying Multi Threaded AES CTR mode Run scp with the option oCipher aes 128 192 256 ctr or caes 128 192 256 ctr It has been proven that this option enables data transfer speeds of over 1 Gbps even with network delays of several tens of ms http www psc edu networking projects hpn ssh mt aes ctr results gif Reference http www psc edu networking projects hpn ssh faq php http www psc edu networking projects hpn ssh papers al4 rapier pdf You can also use Gfarm fast staging command for high performance data transfer Refer to the gfpcopy command in the document HPCI 24 A FL FHx 27 Jv HPCI STO1 001 P 12 99 NO HPCI CAO01 001E 09 User Guide HPCI Login Manual 4 Glossary CRL Certificate Revocation List A list of certificates or more specifically a list of serial numbers for certificates that have been revoked Globus Toolkit An open source toolkit for building computing grids developed and provided by the Globus Alliance grid mapfile A file containing entries mapping certificate subjects to local user names This file can also serve as an access control list for GSI enabled services
54. vironment Not available in Windows OS 2 4 1 Upload with Globus Toolkit BEEN oie 2 4 1 Upload with Globus Toolkit This subsection describes the procedure for uploading the Proxy Certificate using the command line tool myproxy init provided by Globus Toolkit Refer to section 3 2 Installing Globus Toolkit for instructions on installing the software Use the tool to create a proxy certificate using the client certificate on your PC and upload it to the repository The following example will create and upload a proxy certificate valid for 24 hours user myproxy init s portal hpci nii ac jp c 24 Your identity C JP O NII OU HPCI CN user Enter GRID pass phrase for this identity lt enter the passphrase for your private key Creating proxy Proxy Verify OK LOU p oxy 15 valid until Mon gum 27 Leesa 2011 Enter MyProxy pass phrase x lt enter the passphrase for upload to the repository Verifying Enter MyProxy pass phrase x lt enter the passphrase again A proxy valid for 24 hours 1 0 days for user user now exists on portal hpci nii ac jp If you omit the option c 24 the term of validity is set to 168 hours 7 days The maximum value that you can set is the term of validity of your client certificate 39 NO HPCI CAO01 001E 09 User Guide HPCI Login Manual The command myproxy init uses files globus usercert pem and globus userkey
55. wnloading your proxy certificate Windows Run Explorer change directory to bin and double click on the file sshterm bat Unix Linux MacOSX Change directory to bin run sshterm sh GSI SSHTerm has successfully started if the following screen appears Fig 38 SI SSHTe Inl x File Edit View Tools Proxy Help 5 C i amp 9 Ble 8 4 x J L FA Connect to host a Host to Connect to Advanced Gancel 42 NO HPCI CAO01 001E 09 User Guide HPCI Login Manual If the above screen Fig 38 does not appear and GSI SSHTerm does not start on Windows check your Java settings refer to section 3 1 1 On the screen above Fig 38 enter the hostname of the login server and click the OK button to login to the login server with GSI authentication The hostname of the login server should have been provided by the HCPI system providers that issued your HPCI local account You do not need to click the Advanced button If you have not yet downloaded the proxy certificate the Grid Certificate Proxy needed for Authentication dialog appears Fig 39 In the dialog enter the following information Grid Certificate Proxy needed for Authentic x Retrieve Credentials from MyProxy 2 Host portalhpciniiac jp Account Name myname Passphrase Use MyProxy Use a Grid certificate in pkcs12 format Filename Browse Passphrase Use Certificate Ca Search for ce
56. x MacOSX 5 2 6 2 Transfer with Globus Toolkit for Unix Linux MacOSX Users Unix Linux MacOSX 3 1 Installing GSI SSHTerm 3 2 Installing Globus Toolkit SS J 2 1 1 Issuing a Client certificate certificate is already issued 2 2 1 Proxy Certificate Registration 2 3 2 Download with GSI SSHTerm 2 3 1 Download via the HPCI Certificate Issuing System 2 3 3 Download with Globus Toolkit download the proxy certificate onto your PC 2 5 2 Login with Globus Toolkit for 2 5 1 Login with GSI SSHTerm uses Unix Linux MacOSX Java for Windows Unix Linux MacOSX 2 6 2 Transfer with Globus Toolkit 2 6 1 Transfer with GSI SSHTerm for Unix Linux MacOSX uses Java for Windows Unix Linux MacOSX successful login to the login server NO HPCI CAO01 001E 09 User Guide HPCI Login Manual 1 3 Operating Environment Browser Firefox 7 or later Internet Explorer 6 or later Safari 5 Google Chrome 18 GSI SSHTerm Windows XP Vista 32bit Windows 7 32 64bit Linux CentOS 6 32bit Ubuntu 12 04TLS openSUSE 12 2 Mac OS X 10 6 10 7 10 8 2 Globus Toolkit Linux CentOS 5 6 32bit Mac OS X 10 6 10 7 10 8 2 You need to open the following ports Firewall configuration TCP Source address Source Destination address Destination Comments PA rm ue rem l CP client host ANY CA repository 80 Required to get 443 information from the HPCI CA Certificates CRL refer to 3 TCP Sh
57. xplorer 9 on Windows 7 the following dialog appears on the bottom of the screen Fig 25 Click the W button to the right of the RIF button select 44 BII2 4107 CRT and download the certificate using a name following the naming rule in Table 1 kd gt l E I eo we https portal h O ag cx e nii ac jp A amp RELATE Birk T n TEHEGIEBH EEIT Certificate DN FGz JP Oz test university Oll test unit GN user h 2300001 Certificate Expiration sun Mar 31 2013 1400 00 0900 Thu Dec 1 2011 12 00 00 0900 m SOO Ff olen wee lt Oh ee UL TS IFIS BI PEL CRA JAZO s RUTHK lt 0 x Fig 25 portal hpci nii ac jp 3 h2300001 proxy pem 4 21 KB lt D FER If the above dialog Fig 24 or Fig 25 does not appear click the C45 link on the 4 amp XSgIEBHES TT screen Fig 23 to display the dialog Proceed to section 2 5 Login to the Login Server to access the login server 2 NO HPCI CAO01 001E 09 User Guide HPCI Login Manual 2 3 1 1 Troubleshooting 1 Troubleshooting for the error message VAZL A 4 AJIULCKTZ amp U The error message 7 VAZL A 4 A JJUCKTZ amp UN is shown on the CXSSIEBHEESETT ESRA J screen 4 n Fig 22 when you have clicked the 3 fT button without entering anything into the EIEBHEE RIL box in the entry form Fig 26 SPRGEBH SEE Er EF gt EAST T Peak FAS FETT S IILGIItERIEAJER
58. xy certificate select Proxy gt Proxy Info from the menu Fig 33 Disk Proxy Information x Proxy Information Storage Local File D tmp xS09uputestuser SS Identity C JP O Test University OU Test Unit CN Test User CS Subject versity OU Test Unit CN Test User ON 1631769300 CN 1241 754328 CN 84 7296861 Issuer JP OzTest University OU Test Unit CN Test User GN 1631 769300 GN 1 241 754328 Lifetime 0 days O hours 57 minutes 59 seconds Type RFC 3820 compliant impersonation proxy Fig 33 33 NO HPCI CAO01 001E 09 User Guide HPCI Login Manual 3 When you exit GSI SSHTerm you have to choose whether you want to delete the downloaded proxy certificate Fig 34 GSI SSHTerm x 27 You have a proxy certificate stored on a disk which may have been created by this terminal do you want to delete it Z QD If you want to delete the proxy certificate click the IELY button otherwise click the L L Z button In general click the L L Z button to leave the proxy certificate on the client machine By doing this GSI SSHTerm uses this proxy certificate next time and you can login to the login server by simply entering the hostname of the login server in the Connect to host dialog Fig 31 If you do not want to leave the proxy certificate on the client machine click the d LV button to delete the proxy certificate In this case refer to section 2 3 2

HPCI Login Manual

Contents

Download Pdf Manuals

Related Search

Related Contents