Project

General

Profile

Getting Accounts and Logging In at Fermilab

You must be on the MicroBooNE Collaboration member list in order to get an account (check if you are on it at-): https://www-microboone.fnal.gov/public/collaboration.html
Talk to your Institutional Board representative to get on it. The IB representative from each institution is listed on that webpage.

Instructions for getting accounts: https://fermi.service-now.com/kb_view.do?sysparm_article=KB0010797

Fermilab uses Kerberos to implement strong authentication (no passwords on the internet) when logging in to Fermilab machines.
Make sure the Fermilab KDC's are in your /etc/krb5.conf file.

Make sure your ~/.ssh/config file has default login options like the following -

ForwardX11 yes
ForwardX11Trusted yes
GSSAPIAuthentication yes
GSSAPIDelegateCredentials yes

The following example shows how to log in from a Mac with kerberos and ssh installed -

my-mac$ type kinit
kinit is /usr/bin/kinit

# case matters for FNAL.GOV, login using your Kerberos password
kinit -af -r7d <your-kerberos-principal>@FNAL.GOV 
#Note that depending on your OS, you may have -A or -a to get an address-less ticket

# this is the OpenSSH client
my-mac$ type ssh
ssh is hashed (/usr/bin/ssh) 

ssh -K your-username@uboonegpvm01.fnal.gov