This shows you the differences between two versions of the page.
| Both sides previous revision Previous revision Next revision | Previous revision | ||
|
quick:login [2026/06/25 15:37] bbarsch [Process] |
quick:login [2026/10/09 14:04] (current) ccrosby [Process] |
||
|---|---|---|---|
| Line 1: | Line 1: | ||
| - | ===== Logging into the Lengau cluster ===== | + | :!: **IMPORTANT** |
| + | |||
| + | **You must ensure that your profile on the [[https:// | ||
| + | |||
| + | Generic email addresses (e.g., Gmail, Yahoo, etc.) are no longer accepted as the primary email address for your account. | ||
| + | |||
| + | As a result, users currently registered with personal email addresses have been temporarily blocked from accessing Lengau until their email address is updated. | ||
| + | |||
| + | **What you need to do:** | ||
| + | |||
| + | * Log in to the CHPC User Portal as normal. | ||
| + | * If your account uses a personal email address, you will be prompted immediately to update it. | ||
| + | * Enter your valid institutional or company email address. | ||
| + | * Once validated, the MFA page will appear and a verification code will be sent to your new email address. | ||
| + | * Enter the verification code to complete login. | ||
| + | |||
| + | Note: Your password has not changed. If you have forgotten your password, please use the password reset option. The reset instructions will be sent to your insitutional registered email address. | ||
| + | |||
| + | After successfully updating your email, access to Lengau will be restored within **24 hours**. | ||
| + | |||
| + | ====== Logging into the Lengau cluster | ||
| As of 20 June 2026, the Lengau login procedure has been made much more secure. | As of 20 June 2026, the Lengau login procedure has been made much more secure. | ||
| - Multi-factor authentication on the user portal | - Multi-factor authentication on the user portal | ||
| Line 5: | Line 25: | ||
| - [[guide: | - [[guide: | ||
| - | ==== Process ==== | + | ===== Process |
| This is the process for logging into Lengau for the first time once services have been restored: | This is the process for logging into Lengau for the first time once services have been restored: | ||
| - | - Login to the [[https:// | + | - Login to the [[https:// |
| - Complete MFA verification using the 6-digit code sent to your email (valid for 2 hours). | - Complete MFA verification using the 6-digit code sent to your email (valid for 2 hours). | ||
| - [[https:// | - [[https:// | ||
| - Create your SSH keys (if none exist) and copy the contents of public key to a text file. | - Create your SSH keys (if none exist) and copy the contents of public key to a text file. | ||
| - | - Load the contents of the public key file onto the cluster through the [[http:// | + | - Load the contents of the public key file onto the cluster through the [[https:// |
| - SSH to Lengau using your CHPC username. | - SSH to Lengau using your CHPC username. | ||
| - | The process is demonstrated in [[https:// | + | The process is demonstrated in [[https:// |
| - | === Frequently Asked Questions === | + | ===== Frequently Asked Questions |
| Before asking for help, please take a look at our [[quick: | Before asking for help, please take a look at our [[quick: | ||
| - | === Multi-factor authentication on the user portal === | + | ===== Multi-factor authentication on the user portal |
| - | Users manage their profile data on the [[https:// | + | Users manage their profile data on the [[https:// |
| - | === Virtual Private Network into the CHPC network === | + | ===== Virtual Private Network into the CHPC network |
| - | A VPN is used to restrict access to the CHPC network to registered CHPC users. | + | A VPN is used to restrict access to the CHPC network to registered CHPC users. |
| - | === Cluster login by means of ssh-keys only === | + | For more information see the [[guide: |
| + | |||
| + | ==== Checklist ==== | ||
| + | If you are experiencing difficulties, | ||
| + | - Check basic network connectivity | ||
| + | - Check for presence of other VPN connections | ||
| + | - Confirm no other open WireGuard connections on the same configuration file | ||
| + | - Check nature of error message - is this a VPN or ssh failure? | ||
| + | - Check local firewalling on workstation | ||
| + | - Check with IT department that UDP port 51820 is open to vpn.chpc.ac.za | ||
| + | - Check if same workstation and config work on alternative network, such as with cellphone hotspot | ||
| + | - Does '' | ||
| + | - Try to do an ssh login on 10.128.15.127 | ||
| + | - Reboot workstation | ||
| + | - Submit a [[https:// | ||
| + | |||
| + | ===== Cluster login by means of ssh-keys only ===== | ||
| To increase security without incurring too much unnecessary effort, cluster login is by means of ssh-keys only. Passwords are inherently insecure and easy to get wrong. | To increase security without incurring too much unnecessary effort, cluster login is by means of ssh-keys only. Passwords are inherently insecure and easy to get wrong. | ||
| + | |||
| + | ===== DTN node access ===== | ||
| + | |||
| + | Access to the DTN node for large file transfers, including large '' | ||
| + | |||
| + | The DTN node '' | ||
| + | |||
| + | ====1. Install the Google Authenticator app on your phone==== | ||
| + | |||
| + | Open the appropriate application install app for your phone: | ||
| + | * Android devices use the Google Play Store [[https:// | ||
| + | * Apple devices use the Apple App Store [[https:// | ||
| + | |||
| + | ====2. Add your cluster key to the Authenticator app==== | ||
| + | |||
| + | ssh into the login node '' | ||
| + | |||
| + | Configure google authenticator for your account by running the command | ||
| + | |||
| + | google-authenticator -s ~/ | ||
| + | |||
| + | This will ask you several questions. | ||
| + | |||
| + | Do you want authentication tokens to be time-based (y/n) | ||
| + | | ||
| + | Answer '' | ||
| + | |||
| + | A QR code will then be displayed. | ||
| + | |||
| + | * Open Authenticator on your phone | ||
| + | * Tap on the multi-colour **+** button to add a new key | ||
| + | * Tap on **Scan a QR code** | ||
| + | * Point your phone' | ||
| + | |||
| + | > Note that the QR code may scroll off the top of the screen. | ||
| + | |||
| + | Once the code is accepted and a new key, named **login2:** folowed by your cluster user name, will appear in the Autheticator app list of codes. | ||
| + | |||
| + | Now continue to answer the '' | ||
| + | |||
| + | Important: Answer **y** (and press Enter) to //all// the questions to set up strong security. | ||
| + | |||
| + | ====Connecting to the DTN node==== | ||
| + | |||
| + | Now you can '' | ||
| + | |||
| + | Verification code: | ||
| + | |||
| + | Open the Authenticator app on your phone and look for the 6 digits below the **login2:** label. | ||
| + | |||
| + | |||