// Logging-In & Passwords

Here you can find guidance about logging-in to NCCS Systems, passwords and tokens, and passwordless SSH/SCP.

Table of Contents


// System Login

Below is a table showing how to log into NCCS Systems. Most of the NCCS Systems are accessed via an intermediary "Bastion" host referred to as login.nccs.nasa.gov

SYSTEM LOGIN COMMAND HOSTNAME
ADAPT ssh <USERID>@adaptlogin.nccs.nasa.gov N/A
Dataportal ssh <USERID>@login.nccs.nasa.gov dataportalnew
Dirac (Storage) ssh <USERID>@login.nccs.nasa.gov dirac
Discover ssh <USERID>@login.nccs.nasa.gov discover
Discover – NASTRAN Project ssh <USERID>@login.nccs.nasa.gov discover-nastran
Remote Visualization ssh <USERID>@login.nccs.nasa.gov visgpu01, visgpu02














LOGIN INSTRUCTIONS FOR NCCS SYSTEMS


// NCCS Passwords

Most NCCS computing systems and resources use a single password. 

PASSWORD RESET

You may change your NCCS password by one of two methods:

  1. Change Password

  2. Log in to any of the NCCS System and issue the customary password-changing command "passwd.”

PASSWORD GUIDELINES

Passwords must:

    • Be at least 12 characters long
    • Contain at least 1 number
    • Contain at least 1 uppercase letter
    • Contain at least 1 lowercase letter
    • Contain at least 1 special character

  • Passwords will be valid for a maximum of 60 days

  • Passwords may not be reused for 24 cycles

  • Passwords will lock after 5 failed attempts

  • Passwords cannot be changed again within 24 hours

PASSWORD CHANGE/RECOVERY

  • If you do not change your NCCS password before your current one expires, the Systems will prompt you to change your password immediately upon login.

  • If you forget or lock your password, you must call NCCS User Services at 301-286-9120 to have it reset.*

*For security reasons, we will not e-mail passwords. If you do not have these numbers, we will ask for your NCCS Identification Code (the secret word, phrase, or other identifier you specified when you applied for your userid). These are security measures to ensure that we are actually talking to you and not someone pretending to be you. Note that User Services will NEVER ask you for your system password(s)---and you should never volunteer your passwords under any circumstances.

RSA Tokens


RSA Tokens are required for all users in order to comply with NASA’s requirement for two-factor authentication. You may choose a hardware or software token, and passcodes will vary depending upon the option you choose.


LEARN MORE

// Login Issues

If you are having issues logging in to an NCCS system, it could be due to one of the following reasons:

  1. Check the Systems Status page to see if any of the Systems are down.

  2. Check and verify if you are using the correct RSA Passcode, or if the token has been locked due to multiple failed login attempts. If this is the case, contact the Enterprise Service Desk – 301-286-3100.

  3. If you have forgotten your password and it is locked (after 5 failed attempts) or it is expired (after 60 days of active use) call the NCCS User Services Group at 301-286-9120 to reset it.

// Passwordless SSH/SCP

Users may SSH or SCP within the NCCS systems without typing their NCCS passwords by setting up authorization keys.

EXAMPLE:

To configure passwordless SCP or SSH from Discover to Dirac, use the following steps:

  1. On Discover, create a new authorized_keys file under $HOME/.ssh.$ chmod 0700 $HOME/.ssh $ cd $HOME/.ssh $ ssh-keygenHit enter two times for the prompted questions. This will create a pair of private and public identity files, id_rsa and id_rsa.pub, under the .ssh directory.

  2. Copy the file id_rsa.pub into authorized_keys in the same directory. If the file authorized_keys already exists on the system, append the contents of id_rsa.pub.$ cat id_rsa.pub >> authorized_keys

  3. Copy the contents of id_rsa.pub file from Discover to Dirac:$ scp $HOME/.ssh/id_rsa.pub [userid]@dirac.nccs.nasa.gov:~/.ssh/id_rsa.pub.discover

  4. On Dirac, append the copied file to the authorized_keys file:$ cat $HOME/.ssh/id_rsa.pub.discover >> $HOME/.ssh/authorized_keysOnce the authorized_keys file is in place on both Dirac and the NCCS HPC systems, you can start using passwordless SCP and SSH.