Access to CC-IN2P3

Access by identity federation

The connection to the services provided by the CC-IN2P3 and accessible through web interface is most often achieved by authentication via the identity federation eduGAIN or RENATER. This type of connection allows automatic validation of the account on first access and implements a Single Sign On system, based on the user’s reference e-mail.

Some services require manual registration for users not recognized by identity federation. Many institutional domains are listed in the federation: please check the presence of your institutional guardianship on the respective WAIF pages below. Please contact, if necessary, user support.

Computing account

To receive access onto the computing platform, please heed the following request procedure:

  1. read the Charters for the use of resources

  2. fill in the application form on CC Sign Up and print the final PDF document

  3. sign and have your responsibles (account czar and lab director) sign the document

  4. submit (or ask your account czar to send) a request to user support attaching the scan of the signed document.

Your czar will inform you about the opening of your account. In the case you lose your password, your czar should be your first contact.

Attention

Do not propose logins such as abbreviation, nickname, fun, initials: they will be rejected, without second choice request.

Only institutional emails will be accepted to be associated to computing accounts.

Important

Any subsequent modification to an initial submitted form (error, explanatory comment) or any question about the request treatment has to be included in the original ticket submitted to the Support Unit.

Should an already registered user change her/his laboratory affiliation, and only in such an instance, a new request form should be filled out (selecting Change of laboratory). The document will be signed by the new user’s responsibles.

Account management

Upon creation, a user account is associated with a laboratory and at least one group. For more details, please check the definition of laboratory and group paragraph below.

Most of the information about a user account activity may be found on the User Portal. Here below we give the CLI commands as well as some suggestions to check and manage such information.

To manage your password, please refer to the paragraph Password management.

To know the information associated to your account use the command laboinfo with the following syntax (the expected output is shown):

% laboinfo -u <userid>
"userid"  "Last name"  "First name"  "last manual connection date"  "expiration date"  "group list"  "lab code"  "e-mail"

To know the principal group associated to your user account:

% id -gn

Without the option –gn the command will list all the groups your account is associated with.

To change your principal group with a group your account is already associated with, use the command newgroup with the following syntax:

% newgroup --help

Usage: newgroup   --help  | -h
       newgroup   --query | -q
       newgroup [ --temp  | -t ] [ --login | -l ] <groupname>

The --temp option allows to change the group temporarily and only in the active session where the command is executed. At logout the group change is cancelled. On any other session the account will be on its former group and not the one defined temporaily.

The --login option allows to load the chosen group login environment.

To be associated to a new group, the account czar of the new group must request the change to the user support.

To change your associated e-mail, the owner of the account or the account czar of the owner simply need to send a request to user support and provide the account login and the new e-mail.

Attention

If a group or e-mail change is caused by a change in the user’s affiliation, please follow the steps explained in the computing account request (Change of laboratory) paragraph before submitting a change request.

Expiration date extension

The first computing account’s expiration date is set when the creation request is submitted. The account czar may request an extension submitting a ticket to support utilisateurs. The expiration date extension cannot be more than 3 years even for a permanent member.

Definition of laboratory and group

The laboratory is the hierarchical organization administratively responsible for the user. It is represented by the laboratory director and/or by the account czar. They sign the user account request form.

The group corresponds to an experiment or collaboration the user is working on; it is associated with the user account as a Unix group. The group manager is the request czar, who validates the access to the group resources. A user can therefore be associated with several groups, but with only one laboratory.

Group creation request

The creation of a new group is subject to validation by CC-IN2P3 management. To request the creation of a new group, please submit your request to our user support, specifying the following information:

  • Administrative definition of the group

    • group name (8 characters max.)

    • administrative manager (last and first names, email)

    • information on request czar of the group:

      • last name, first name, email

      • login of the calculation account (if any)

      • laboratory / institute

      • email of the CNRS Standard certificate (if any)

    • other relevant czars:

      • provide the same information as the czar of the group

  • Group activity (please define it in a few words)

    • for instance: high energy physics, nuclear physics, astronomy, biology, Earth science, human science, …

  • Estimates of the resources required for the incoming year:

    • CPU (HS06.h)

    • GPU (hours)

    • storage

    • specify any other relevant need

    • for more information please refer to the page Resources requests