// Logging-In & Passwords
Here you can find guidance about logging-in to NCCS Systems, passwords and tokens, and passwordless SSH/SCP.
Table of Contents
// System Login
Below is a table showing how to log into NCCS Systems. Most of the NCCS Systems are accessed via an intermediary "Bastion" host referred to as login.nccs.nasa.gov
|Dirac (Storage)||ssh <USERID>@login.nccs.nasa.gov||dirac|
|Discover – NASTRAN Project||ssh <USERID>@login.nccs.nasa.gov||discover-nastran|
|Remote Visualization||ssh <USERID>@login.nccs.nasa.gov||visgpu01, visgpu02|
LOGIN INSTRUCTIONS FOR NCCS SYSTEMS
// NCCS Passwords
Most NCCS computing systems and resources use a single password.
You may change your NCCS password by one of two methods:
- Change Password
- Log in to any of the NCCS System and issue the customary password-changing command "passwd.”
- Be at least 12 characters long
- Contain at least 1 number
- Contain at least 1 uppercase letter
- Contain at least 1 lowercase letter
- Contain at least 1 special character
- Passwords will be valid for a maximum of 60 days
- Passwords may not be reused for 24 cycles
- Passwords will lock after 5 failed attempts
- Passwords cannot be changed again within 24 hours
- If you do not change your NCCS password before your current one expires, the Systems will prompt you to change your password immediately upon login.
- If you forget or lock your password, you must call NCCS User Services at 301-286-9120 to have it reset.*
*For security reasons, we will not e-mail passwords. If you do not have these numbers, we will ask for your NCCS Identification Code (the secret word, phrase, or other identifier you specified when you applied for your userid). These are security measures to ensure that we are actually talking to you and not someone pretending to be you. Note that User Services will NEVER ask you for your system password(s)---and you should never volunteer your passwords under any circumstances.
// Login Issues
If you are having issues logging in to an NCCS system, it could be due to one of the following reasons:
- Check the Systems Status page to see if any of the Systems are down.
- Check and verify if you are using the correct RSA Passcode, or if the token has been locked due to multiple failed login attempts. If this is the case, contact the Enterprise Service Desk – 301-286-3100.
- If you have forgotten your password and it is locked (after 5 failed attempts) or it is expired (after 60 days of active use) call the NCCS User Services Group at 301-286-9120 to reset it.
// Passwordless SSH/SCP
Users may SSH or SCP within the NCCS systems without typing their NCCS passwords by setting up authorization keys.
To configure passwordless SCP or SSH from Discover to Dirac, use the following steps:
- On Discover, create a new authorized_keys file under $HOME/.ssh.
$ chmod 0700 $HOME/.ssh $ cd $HOME/.ssh $ ssh-keygenHit enter two times for the prompted questions. This will create a pair of private and public identity files, id_rsa and id_rsa.pub, under the .ssh directory.
- Copy the file id_rsa.pub into authorized_keys in the same directory. If the file authorized_keys already exists on the system, append the contents of id_rsa.pub.
$ cat id_rsa.pub >> authorized_keys
- Copy the contents of id_rsa.pub file from Discover to Dirac:
$ scp $HOME/.ssh/id_rsa.pub [userid]@dirac.nccs.nasa.gov:~/.ssh/id_rsa.pub.discover
- On Dirac, append the copied file to the authorized_keys file:
$ cat $HOME/.ssh/id_rsa.pub.discover >> $HOME/.ssh/authorized_keysOnce the authorized_keys file is in place on both Dirac and the NCCS HPC systems, you can start using passwordless SCP and SSH.