Getting Accounts and Logging In at Fermilab¶
You must be on the MicroBooNE Collaboration member list in order to get an account (check if you are on it at-): https://www-microboone.fnal.gov/public/collaboration.html
Talk to your Institutional Board representative to get on it. The IB representative from each institution is listed on that webpage.
Instructions for getting accounts: https://fermi.service-now.com/kb_view.do?sysparm_article=KB0010797
Fermilab uses Kerberos to implement strong authentication (no passwords on the internet) when logging in to Fermilab machines.
Make sure the Fermilab KDC's are in your /etc/krb5.conf file.
Make sure your ~/.ssh/config file has default login options like the following -
ForwardX11 yes ForwardX11Trusted yes GSSAPIAuthentication yes GSSAPIDelegateCredentials yes
The following example shows how to log in from a Mac with kerberos and ssh installed -
my-mac$ type kinit kinit is /usr/bin/kinit # case matters for FNAL.GOV, login using your Kerberos password kinit -af -r7d <your-kerberos-principal>@FNAL.GOV #Note that depending on your OS, you may have -A or -a to get an address-less ticket # this is the OpenSSH client my-mac$ type ssh ssh is hashed (/usr/bin/ssh) ssh -K firstname.lastname@example.org