Access prerequisites

From HLRS Dgrid
Jump to: navigation, search

Access

For an introduction to the access and usage of the BW-Grid cluster see our

Manual for accessing with Globus/GSI-SSH

Prerequisites

In the following description, several links to pages using the https protocol are contained. If your browser just displays an error message which looks like this:

Untrusted2.png

This just means that you don't have yet the certificate of that server installed in your browser. You do this by clicking on add an exception and then get Certificate. From then on, you should not get the message anymore on that particular server:

Getcert2.png


Grid User Certificate

Before applying for Access to the resources of the D-Grid infrastructure the user must own or get a Grid User Certificate:

During the procedure of applying for a certificate you will be requested to print out a form and show up at the Grid Registrierungsstelle (RA) and show your passport to identify yourself. If you have already a grid certificate and want to extend it, make sure you fill in the fields exactly the same as in your existing certificate (otherwise a new account will be created).

For user certificates requested at the Universität Stuttgart (RA_ID=123) make an appointment (contact: dgrid-support@dgrid.hlrs.de) and visit Martin Hecht, or Jochen Buchholz, or Thomas Beisel at the HLRS for activation.

Use a browser which can handle certificates, e.g. Firefox, (Linux users: don't use Konqueror, MAC OS Users: When you use Safari for requesting certificates, it stores the private key in the Keyring application, but when you try to import the approved certificate, it may end up as a text file in your downloads folder. Rename it as a pem file and manually import it into the keyring application. From there you can re-export it together with the private key in p12 format, or directly import the email-attachment into the keyring application).

After your certificate has been activated, you will receive an email which contains a link from which you can import the activated certificate into your browser (for firefox) and there is an attachment (which allows to import the certificate into internet explorer by saving it and double clicking on the .pem file).

If the import fails you might have to integrate further certificates from the security chain (see https://www.pki.dfn.de/root/globalroot/)

Memorize your passwords and also take care of your e.g. firefox master password, which is also needed to receive the certificate.

Other authorities are for example the following ones:

export the certificate

Your Grid user certificate is stored in your browser. You have to export it if you want to use it in some other program, and also as a backup in case you delete it by accident. Using firefox you can display your certificates through a button in the Edit | Properties | Advanced | Encryption-tab. Selecting the certificate, can create a backup *.p12 file.

Zertifikate2b.png

VO membership

The next step is to join a Membership in an existent Virtual Organization (VO). You need your certificate to be activated before proceeding with this step. You can join VO's like BW-Grid or InGrid, which is a D-Grid Project. To join one of the Virtual Organizations (VO's) you have to register:

The registration at the VO's is also usually a two-step procedure, which is explained on the pages of each VO.

Access through Grid Middleware

This is the preferred way. see Grid Access about how to set up the client software on your local computer.

Direct Access

Our users from Stuttgart can connect to the frontends frbw.dgrid.hlrs.de / frwab.dgrid.hlrs.de via ssh with their usual hlrs-account. Note that for jobs submitted from sessions with these accounts, depending on the terms and conditions for the account, the computing time may be charged according to our usage model Billed usage for academic users.