• National Institute for Computational Sciences is a UT/ORNL Partnership
Home

GSISSH

The RSA One-Time Password is the preferred way to log in to Kraken since it is the most secure and it allows access to the NICS HPSS without further authentication. When this method is unavailable, GSISSH can be used as an alternative.
More information on myproxy and grid authentication may be found here.



XSEDE Portal

The simplest way to access Kraken and Nautilus is to use the SSH terminal on the XSEDE Portal

  • Go to the XSEDE Portal, and log in
  • Go to My XSEDE -> Accounts, and connect to Kraken and/or Nautilus
  • A Java applet should load, and you should see the prompt

Standalone Java Terminal

You can use myproxy with a similar method:

  • Start the Java client, available here. By default, myproxy.teragrid.org uses your XSEDE password, and myproxy.ncsa.uiuc.edu uses your NCSA password. The applet runs in your browser, the "Web Start Version" starts a standalone Java GUI.
  • Go to File -> New Connection, and type kraken-gsi.nics.utk.edu in the pop-up box.
  • An authentication window pops up, enter your username and password for the XSEDE portal or NCSA as appropriate (it may look at your local username and try to guess).
  • You should get a prompt. File transfer is available under the Tools menu.


Logging in using Globus

To Install a Globus Client

If you already use a POSIX environment, you could install a Globus client on your machine, which would allow you to use GSISSH as you would use SSH. You can try the beta installer for the TeraGrid Client Toolkit (TCT). Please refer to the toolkit's installation and use instructions described in the README. You may also see additional installation instructions for all users (UNIX/LINUX/MAC OSX and Windows) on the XSEDE site. If you encounter any issues with this, please let us know.

If you have installed a client with the previous step, or you are coming from a system that already has Globus installed (eg, another XSEDE site), it is easy to use the client. First, get a proxy certificate as described here.

  • Please note: If the certificates proxies are not already taken care of (eg your computer), you need to use the -T flag with myproxy-logon, which downloads all of the certificates proxies to ~/.globus/certificates. If certificates are already taken care of for you (eg any NICS resource), do not use -T as it will prevent gsissh from looking in the site-wide location for certificates.

Next, use "gsissh kraken-gsi.nics.utk.edu" to connect to the resource you wish to use. If the resource you are trying to connect to accepts GSI authentication, it will log on. If not, it will probably fall back on another authentication method (prompting for an OTP passcode). At NICS, the GSI nodes (eg kraken-gsi.nics.utk.edu) accept GSI authentication, other nodes only accept OTP authentication.