General help¶
Procedure to request an account¶
You may find all the details on the request procedure in the paragraph Get a computing account.
Extension of a computing account¶
You may find all the details on the procedure in the paragraph Expiration date extention
Who is my czar and what are the czars duties?¶
The czar is the representative for her/his group or experience for CC-IN2P3. She/he is responsible for your password initialization when your account is created, or for the reset of your password whenever you forget it or it has expired. For more details: czars roles and responsabilities
Get and renew a CNRS certificate¶
The documentation on the procedures to obtain or renew a CNRS personal certificate are available at this address (French only).
Convert a certificate¶
Conversion from PKCS12 to PEM¶
To get the private key in the file ~user/.globus/userkey.pem
:
% openssl pkcs12 -nocerts -in cert.p12 -out ~user/.globus/userkey.pem
To get the certificate in the file ~user/.globus/usercert.pem
:
% openssl pkcs12 -clcerts -nokeys -in cert.p12 -out ~user/.globus/usercert.pem
Check (and change) file modes:
% chmod 0600 userkey.pem
% chmod 0644 usercert.pem
Use te openssl
command to read the content of a certificate:
% openssl x509 -text -noout -in usercert.pem
Conversion from PEM to PKCS12¶
If the certificate can be found in usercert.pem
and if the private key can be found in userkey.pem
, it is possible to generate a PKCS12 file named certif.p12
from these two files using the following command:
% openssl pkcs12 -export -out certif.p12 -inkey userkey.pem -in usercert.pem
Connect and transfer files¶
Only the SSH protocol is allowed for connections and file transfers to or from the CC-IN2P3 interactive servers. Two authentication modes are preferred: using password, or Kerberos ticket (via GSS-API). An RSA/DSA type authentication (SSH key) will grant you access, but will not initialize your Kerberos ticket.
To connect:
% ssh user@cca.in2p3.fr
To copy files:
% scp myfile user@cca.in2p3.fr:~/mydirectory/
To transfer files:
% sftp user@cca.in2p3.fr
Resources allocated to an experiment¶
To visualize the resources allocated to the experiments please refer to the links below:
Manage passwords¶
For any information on the computing accout password modification, please refer to the page Password management.
If, when trying to modify your password, you encouter the error below:
% kpasswd
kpasswd: No credentials cache found getting principal from ccache
kpasswd: Client not found in Kerberos database getting initial ticket
Please try:
% /usr/bin/kpasswd mdelmast@CC.IN2P3.FR
If this does not work, the issue involves the $PATH
: you may have modified the environment variables. Please try again with this path.
If this still does not work, please send the following commands output to our user support.
% hostname
% /usr/bin/klist -A
Change shell¶
To change your default shell, use the command changesh
with the following syntax:
% changesh --help
Usage: changesh --help | -h
changesh <shell>
Where <shell> could be bash, csh, ksh, tcsh or zsh.
Create a new group¶
The creation of a new group is subject to validation by CC-IN2P3 management. To know the request procedure, please refer to the page Group creation request.
Change group¶
The account czar of your new group must request the group change to the user support.
The new group will be assigned to your account within a day.
If you are a member of more than one group, you may switch between these groups with the command newgroup
with the following syntax:
% newgroup --help
Usage: newgroup --help | -h
newgroup --query | -q
newgroup [ --temp | -t ] [ --login | -l ] <groupname>
Change laboratory¶
The change of laboratory requires the same form mentioned in the paragraph Get a computing account.
Training to the center’s services¶
In addition to the specific documentation in these pages, you may access the support materials for the training courses organized at CC-IN2P3.