// Logging-In & Passwords
Here you can find guidance about logging-in to NCCS Systems, passwords and tokens, and passwordless SSH/SCP.
Table of Contents
// System Login
Below is a table showing how to log into NCCS Systems. Most of the NCCS Systems are accessed via an intermediary "Bastion" host referred to as login.nccs.nasa.gov
|Dirac (Storage)||ssh <USERID>@login.nccs.nasa.gov||dirac|
|Discover – NASTRAN Project||ssh <USERID>@login.nccs.nasa.gov||discover-nastran|
|Remote Visualization||ssh <USERID>@login.nccs.nasa.gov||visgpu01, visgpu02|
LOGIN INSTRUCTIONS FOR NCCS SYSTEMS
// NCCS Passwords
Most NCCS computing systems and resources use a single password.
You may change your NCCS password by one of two methods:
- NCCS Password Change Interface
- Log in to any of the NCCS System and run the command "passwd.”
- Be at least 12 characters long
- Contain at least 1 number.
- Contain at least 1 uppercase letter.
- Contain at least 1 lowercase letter.
- Contain at least 1 special character.
- Will be valid for a maximum of 60 days.
- May not be reused for 24 cycles.
- Will lock after five failed attempts.
- Cannot be changed again within 24 hours.
- If you do not change your NCCS password before your current one expires, the Systems will prompt you to change your password immediately upon login.
- If you forget or lock your password, you must call NCCS User Services at 301-286-9120 to have it reset.*
*For security reasons, we will not e-mail passwords. If you do not have these numbers, we will ask for your NCCS Identification Code (the secret word, phrase, or other identifier you specified when you applied for your userid). These are security measures to ensure that we are actually talking to you and not someone pretending to be you. Note that User Services will NEVER ask you for your system password(s)---and you should never volunteer your passwords under any circumstances.
// RSA Tokens
RSA Tokens are required for all users in order to comply with NASA’s requirement for two-factor authentication. You may choose a hardware or software token, and passcodes will vary depending upon the option you choose.LEARN MORE
// Login Issues
If you are having issues logging in to an NCCS system, it could be due to one of the following reasons:
- Check the Systems Status page to see if any of the Systems are down.
- Check and verify if you are using the correct RSA Passcode, or if the token has been locked due to multiple failed login attempts. If this is the case, contact the Enterprise Service Desk – (301) 286-3100; National Toll Free: 1(877) 677-2123.
- If you have forgotten your password and it is locked (after 5 failed attempts) or it is expired (after 60 days of active use) call the NCCS User Services Group at 301-286-9120 to reset it.
// Passwordless SSH/SCP between NCCS Systems
Users may SSH or SCP within the NCCS systems without typing their NCCS passwords by setting up authorization keys.
If you wanted to do a passwordless SSH/SCP from Discover to Dirac, complete these steps:
- On Discover, create a new authorized_keys file under $HOME/.ssh.
$ chmod 0700 $HOME/.sshHit enter two times for the prompted questions. This will create a pair of private and public identity files, id_rsa and id_rsa.pub, under the .ssh directory.
$ cd $HOME/.ssh
- Copy the file id_rsa.pub into authorized_keys in the same directory. If the file authorized_keys already exists on the system, append the contents of id_rsa.pub.
$ cat id_rsa.pub >> authorized_keys
- Copy the contents of id_rsa.pub file from Discover to Dirac:
$ scp $HOME/.ssh/id_rsa.pub [userid]@dirac.nccs.nasa.gov:~/.ssh/id_rsa.pub.discover
- On Dirac, append the copied file to the authorized_keys file:
$ cat $HOME/.ssh/id_rsa.pub.discover >> $HOME/.ssh/authorized_keys
Repeat these steps within each system until their respective 'authorized_keys' files contain the keys of every other system you would like to SSH/SCP to/from.