Skip to content
login.rst 5.98 KiB
Newer Older
Michael Krause's avatar
Michael Krause committed
Access and Login
================

To gain access your account needs to be added to the **mpibgrid** access group.
Drop us an E-Mail if you would like to join, there are no restrictions, we
simply would like to talk to you beforehand.


SSH Terminal
------------

Access to the Tardis is provided via secure shell. On Mac OSX and Linux machines
Michael Krause's avatar
Michael Krause committed
the :program:`ssh` program should be already installed. To get an instant shell on the
Michael Krause's avatar
Michael Krause committed
tardis run:
Michael Krause's avatar
Michael Krause committed
::
Michael Krause's avatar
Michael Krause committed

   ssh <YOUR_USERNAME>@tardis.mpib-berlin.mpg.de

On Windows you might want to try `Putty
<http://www.chiark.greenend.org.uk/~sgtatham/putty/>`_.  For a while now we
also have a `web shell <https://tardis.mpib-berlin.mpg.de/>`_ for when there is
no SSH client available.

On the first connection you will be prompted to accept a host fingerprint.
This is to authenticate the host and to prevent so-called man in the middle
attacks on your connection. The fingerprint should be either one of the
following:

```
+---------+---------+-------------------------------------------------+
| Cipher  | Algo    | Fingerprint                                     |
+---------+---------+-------------------------------------------------+
| RSA     | MD5     | b3:c5:6a:3a:e1:cf:ca:38:57:43:19:1e:fc:45:eb:f4 |
| RSA     | SHA-256 | EwUlbWfFa27S9IickmNrEjbKp8yYafJ4+ga+fl4MDU0=    |
+---------+---------+-------------------------------------------------+
| DSA     | MD5     | 47:3a:37:7f:73:00:9d:c1:8c:9f:f7:bb:8d:fa:67:e6 |
| DSA     | SHA-256 | yAlL0wPyid03FzCkjvUXRBKxjEPY3UlvdaoNbv2sZXA=    |
+---------+---------+-------------------------------------------------+
```
Michael Krause's avatar
Michael Krause committed

SSH File Transfer
-----------------

There are a number of (graphical) clients to help you transfer and mange files
and directories on the Tardis. For the most common operating systems we
recommend the following but you are of course free to use whatever you want.


Linux
^^^^^
Most modern Linux Desktops come with SSH already built-in to their file
manager. In Ubuntu you can simply use ``sftp://`` or ``ssh://`` as a protocol
in Nautilus:

.. image:: ../img/nautilus.png
   :width: 80%

Michael Krause's avatar
Michael Krause committed
Open the following URL in your file manager (CTRL-L) ::

Michael Krause's avatar
Michael Krause committed
   ssh://YOUR_USERNAME@tardis.mpib-berlin.mpg.de/home/mpib/
Michael Krause's avatar
Michael Krause committed

Michael Krause's avatar
Michael Krause committed
Mac OSX
^^^^^^^

Michael Krause's avatar
Michael Krause committed
Apple has unfortunately not implemented the ``ssh://`` protocol family into their finder. A workaround is the `osxfuse`_ project, possibly but not necessarily in combination with `macfusion`_:
Michael Krause's avatar
Michael Krause committed

.. image:: ../img/osxfuse.png
   :width: 80%

Michael Krause's avatar
Michael Krause committed
1. Download and install `osxfuse`_ and make sure to tick the "Compatibility Layer for MacFuse" option
2. Reboot your machine
3. Either use ``sshfs`` in the command line or download and install `macfusion`_:

Michael Krause's avatar
Michael Krause committed
In Macfusion
Michael Krause's avatar
Michael Krause committed
   1. add a new profile with the hostname ``tardis.mpib-berlin.mpg.de`` and your username
   2. in the Tab **SSH Advanced** add :samp:`-o defer_permissions` to the options field
   3. mount the new profile by clicking on mount
   4. open in finder either by looking for it or click the cogs icon and then *Reveal*
Michael Krause's avatar
Michael Krause committed


Michael Krause's avatar
Michael Krause committed
Windows
^^^^^^^
The most common utility to transfer files on Windows is `WinSCP <http://winscp.net/eng/download.php>`_:

.. image:: ../img/winscp.png
   :width: 80%
Michael Krause's avatar
Michael Krause committed

Michael's avatar
Michael committed

Mounting File Servers
---------------------

You can transfer files directly from the tardis to our file servers, without
taking the detour through your client. There are multiple ways to *mount* the
servers.

Michael Krause's avatar
Michael Krause committed
.. warning::
Michael's avatar
Michael committed

Michael Krause's avatar
Michael Krause committed
    When you work on network folders on the tardis there is no such thing as trash.
    When you accidentally remove a folder, it is **gone**. This also accounts for
    mounted network folders! Please remember that restoring network file server
    backups are extremely costly and take a lot of time.  Also note that the Tardis
    itself (i.e. your Home Directory) does **not** have a backup at all.
Michael's avatar
Michael committed

SMBNetFs
^^^^^^^^

Michael Krause's avatar
Michael Krause committed
When you login with your password the folder :file:`MPIB-SAMBA` should be
populated with all the detected file servers, like :file:`mpib06, mpib10 or
dfs1`. You can simply navigate to the desired folder and use :program:`cp, mv,
rm etc` on those folders:
Michael's avatar
Michael committed

.. code-block:: bash
Michael's avatar
Michael committed

   krause@master:~> $ cd MPIB-SAMBA/dfs1
   krause@master:~/MPIB-SAMBA/dfs1> $ ls
   Bibliothek  FB-ABC  FB-ARC  FB-GG  FB-LIP  Misc  MPFG-Affekt
   MPFG-Musik  MPFG-REaD  MPRG-NSC  mrt  PR  User  Verwaltung
   ZentraleDienste
   krause@master:~/MPIB-SAMBA/dfs1> $


Michael's avatar
Michael committed
After a while the automatic access granting ticket will expire and you might see an error like this:

.. code-block:: bash
Michael's avatar
Michael committed

    krause@master:~> $ ls MPIB-SAMBA/mpib11
    ls: cannot open directory MPIB-SAMBA/mpib11: Permission denied

Michael Krause's avatar
Michael Krause committed
In that case you can run the script :program:`remount-smbnetfs.sh` to manually
refresh your ticket and re-mount the network folders in :file:`MPIB-SAMBA/`. No
shell or program may access the folder at that time.
Michael's avatar
Michael committed

udevil
^^^^^^

Michael Krause's avatar
Michael Krause committed
Udevil is a helper program to manually mount specific folders to your home
directory and it works like this:
Michael's avatar
Michael committed

Michael's avatar
Michael committed
Create a mount location (once):

.. code-block:: bash
Michael's avatar
Michael committed

    krause@master:~> $ mkdir NetworkFolders

Michael's avatar
Michael committed
Now mount a folder with this command:

.. code-block:: bash
Michael's avatar
Michael committed

Michael's avatar
Michael committed
    krause@master:~> $ udevil mount -t cifs smb://$USER@mpib-berlin.mpg.de/SHARE_NAME NetworkFolders/
Michael's avatar
Michael committed

Michael's avatar
Michael committed
It will ask you for your password, example:

.. code-block:: bash
Michael's avatar
Michael committed

Michael's avatar
Michael committed
    krause@master:~> $ udevil mount -t cifs smb://krause@mpib-berlin.mpg.de/fb-lip NetworkFolders/
Michael's avatar
Michael committed
    Password:
    Mounted //mpib-berlin.mpg.de/fb-lip at /home/mpib/krause/NetworkFolders

    krause@master:~> $ ls NetworkFolders/!MAC
    LIP  ConMem  EEG-Desktop  GWAS  IBSM  IT  LIP-Allgemein  LIP-NSC-Babystudy
    LNDG  MRI-ERGO  MRT-intern  PACSArchiv  Senscog  StructuralPlast  StruktData  Telefonstudio


Michael's avatar
Michael committed
If you want to mount another folder either create a different target directory or **unmount** the old folder first:

.. code-block:: bash
Michael's avatar
Michael committed

    krause@master:~> $ udevil umount NetworkFolders/
    krause@master:~> $

Michael Krause's avatar
Michael Krause committed
You can check all your currently mounted folders with :program:`mount` and filtering by
your username with :program:`mount | grep $USER`.
Michael's avatar
Michael committed

Michael Krause's avatar
Michael Krause committed
.. _osxfuse: http://osxfuse.github.io/
.. _macfusion: http://macfusionapp.org/