// Logging-In & Passwords

The below table shows how to connect to NCCS Systems. Most systems are accessed via an intermediary "Bastion" host referred to as login.nccs.nasa.gov. For more details, see the full Login Instructions for NCCS Systems.

NOTE: These instructions are for users who have configured DIRECT MODE access to NCCS systems.

SYSTEM LOGIN COMMAND HOSTNAME
ADAPT ssh <USERID>@login.nccs.nasa.gov adapt
Dataportal ssh <USERID>@login.nccs.nasa.gov dataportal
Dirac (Storage) ssh <USERID>@login.nccs.nasa.gov dirac
Discover ssh <USERID>@login.nccs.nasa.gov discover
Discover – NASTRAN Project ssh <USERID>@login.nccs.nasa.gov discover-nastran

Most NCCS computing systems and resources require the NCCS LDAP Password.

PASSWORD RESET

You may change your NCCS password by one of two methods:

  1. NCCS Password Change Interface
  2. Log in to any of the linux-based NCCS Systems and run the command "passwd.”

PASSWORD GUIDELINES

Passwords must:

  • Be at least 12 characters long
  • Contain at least 1 number.
  • Contain at least 1 uppercase letter.
  • Contain at least 1 lowercase letter.
  • Contain at least 1 special character.

Passwords:

  • Will be valid for a maximum of 60 days.
  • May not be reused for 24 cycles.
  • Will lock after five failed attempts.
  • Cannot be changed again within 24 hours.

PASSWORD CHANGE/RECOVERY

  • If you do not change your NCCS password before your current one expires, the system will prompt you to change your password immediately upon login.

  • If you forget or lock your password, you must open a ticket to reset it with NCCS User Services.

*For security reasons, NCCS User Services will not e-mail passwords. If you need a temporary password, User Services will ask for your NASA Security Questions over the phone. These measures are to ensure someone is not pretending to be you. Note that User Services will NEVER ask you for your system password(s) – and you should never volunteer your passwords under any circumstances.

//  SSH between Discover Login Nodes

Changes due to PIV-M requirements have led to disabled password access between Discover login nodes. Users must set up an ssh key pair and put the public key in their $HOME/.ssh/authorized_keys file to move between login nodes. Use the default name/file and the default of no passphrase:

ssh-keygen -t ecdsa
cat $HOME/.ssh/id_ecdsa.pub >> $HOME/.ssh/authorized_keys

This setup only needs to be done once, though keys can be replaced or others can be added. Just make sure the .pub key is added to the authorized_keys file.