Procedure to request an account¶
You may find all the details on the request procedure in the paragraph Get a computing account.
Extension of a computing account¶
You may find all the details on the procedure in the paragraph Expiration date extention
Who is my czar and what are the czars duties?¶
The czar is the representative for her/his group or experience for CC-IN2P3. She/he is responsible for your password initialization when your account is created, or for the reset of your password whenever you forget it or it has expired. For more details: czars roles and responsabilities
Get and renew a CNRS certificate¶
The documentation on the procedures to obtain or renew a CNRS personal certificate are available at this address (French only).
Convert a certificate¶
Conversion from PKCS12 to PEM¶
To get the private key in the file
% openssl pkcs12 -nocerts -in cert.p12 -out ~user/.globus/userkey.pem
To get the certificate in the file
% openssl pkcs12 -clcerts -nokeys -in cert.p12 -out ~user/.globus/usercert.pem
Check (and change) file modes:
% chmod 0600 userkey.pem % chmod 0644 usercert.pem
openssl command to read the content of a certificate:
% openssl x509 -text -noout -in usercert.pem
Conversion from PEM to PKCS12¶
If the certificate can be found in
usercert.pem and if the private key can be found in
userkey.pem, it is possible to generate a PKCS12 file named
certif.p12 from these two files using the following command:
% openssl pkcs12 -export -out certif.p12 -inkey userkey.pem -in usercert.pem
Connect and transfer files¶
Only the SSH protocol is allowed for connections and file transfers to or from the CC-IN2P3 interactive servers. Two authentication modes are preferred: using password, or Kerberos ticket (via GSS-API). An RSA/DSA type authentication (SSH key) will grant you access, but will not initialize your Kerberos ticket.
% ssh firstname.lastname@example.org
To copy files:
% scp myfile email@example.com:~/mydirectory/
To transfer files:
% sftp firstname.lastname@example.org
Resources allocated to an experiment¶
To visualize the resources allocated to the experiments please refer to the links below:
For any information on the computing accout password modification, please refer to the page Password management.
If, when trying to modify your password, you encouter the error below:
% kpasswd kpasswd: No credentials cache found getting principal from ccache kpasswd: Client not found in Kerberos database getting initial ticket
% /usr/bin/kpasswd mdelmast@CC.IN2P3.FR
If this does not work, the issue involves the
$PATH: you may have modified the environment variables. Please try again with this path.
If this still does not work, please send the following commands output to our user support.
% hostname % /usr/bin/klist -A
To change your default shell, use the command
changesh with the following syntax:
% changesh --help Usage: changesh --help | -h changesh <shell>
Where <shell> could be bash, csh, ksh, tcsh or zsh.
Create a new group¶
The creation of a new group is subject to validation by CC-IN2P3 management. To know the request procedure, please refer to the page Group creation request.
The account czar of your new group must request the group change to the user support.
The new group will be assigned to your account within a day.
If you are a member of more than one group, you may switch between these groups with the command
newgroup with the following syntax:
% newgroup --help Usage: newgroup --help | -h newgroup --query | -q newgroup [ --temp | -t ] [ --login | -l ] <groupname>
The change of laboratory requires the same form mentioned in the paragraph Get a computing account.