wiki.chpc.ac.za

This page is read only. You can view the source, but not change it. Ask your administrator if you think this is wrong.
:!: **IMPORTANT**

**You must ensure that your profile on the [[https://users.chpc.ac.za/|CHPC User Portal]] has your institution or company email address.**

Generic email addresses (e.g., Gmail, Yahoo, etc.) are no longer accepted as the primary email address for your account.

As a result, users currently registered with personal email addresses have been temporarily blocked from accessing Lengau until their email address is updated.

**What you need to do:**

  * Log in to the CHPC User Portal as normal.
  * If your account uses a personal email address, you will be prompted immediately to update it.
  * Enter your valid institutional or company email address.
  * Once validated, the MFA page will appear and a verification code will be sent to your new email address.
  * Enter the verification code to complete login.

Note: Your password has not changed. If you have forgotten your password, please use the password reset option. The reset instructions will be sent to your insitutional registered email address.

After successfully updating your email, access to Lengau will be restored within **24 hours**.

====== Logging into the Lengau cluster ======
As of 20 June 2026, the Lengau login procedure has been made much more secure.  There are three layers of security:
  - Multi-factor authentication on the user portal
  - [[https://users.chpc.ac.za/vpn|Virtual Private Network into the CHPC network]]
  - [[guide:sshkeys|SSH login using keys only]]

===== Process =====
This is the process for logging into Lengau for the first time once services have been restored:

  - Login to the [[https://users.chpc.ac.za/|CHPC User Portal]] using your username (registered email address) and password.
  - Complete MFA verification using the 6-digit code sent to your email (valid for 2 hours).
  - [[https://users.chpc.ac.za/vpn/|Configure and download]] your unique VPN profile, then connect to the CHPC VPN.
  - Create your SSH keys (if none exist) and copy the contents of public key to a text file.
  - Load the contents of the public key file onto the cluster through the [[https://users.chpc.ac.za/ssh-user/|ssh-keys management page]] on the user portal.
  - SSH to Lengau using your CHPC username.  If you have not loaded the keys at the previous step, you will be prompted to do so now at the login prompt.

The process is demonstrated in [[https://youtu.be/Fq6xT-KjlQ0|this video]].

===== Frequently Asked Questions =====
Before asking for help, please take a look at our [[quick:login_FAQ|Login FAQ]]


===== Multi-factor authentication on the user portal =====
Users manage their profile data on the [[https://users.chpc.ac.za/|CHPC user portal]].  To protect the integrity of the cluster login credentials as well as private information, logging into this web-based user portal will require the user to enter a 6-digit code which will be sent automatically to their registered email address.  Contact the [[https://users.chpc.ac.za/helpdesk/|CHPC helpdesk]] immediately if you notice such any such email not triggered by yourself.

===== Virtual Private Network into the CHPC network =====
A VPN is used to restrict access to the CHPC network to registered CHPC users.  In addition, each registered user may have only one open VPN connection at any given time.  Get your WireGuard configuration file on the [[https://users.chpc.ac.za/vpn|CHPC user portal]].  Additional client software install instructions are available on the [[https://www.wireguard.com/install/|WireGuard web page.]]  

For more information see the [[guide:vpn|CHPC VPN]] guide.

==== Checklist ====
If you are experiencing difficulties, work through this checklist:
  - Check basic network connectivity
  - Check for presence of other VPN connections
  - Confirm no other open WireGuard connections on the same configuration file
  - Check nature of error message - is this a VPN or ssh failure?
  - Check local firewalling on workstation
  - Check with IT department that UDP port 51820 is open to vpn.chpc.ac.za
  - Check if same workstation and config work on alternative network, such as with cellphone hotspot
  - Does ''nslookup lengau.chpc.ac.za'' return an IP address?  It should be  10.128.15.127
  - Try to do an ssh login on 10.128.15.127
  - Reboot workstation
  - Submit a [[https://users.chpc.ac.za/helpdesk|helpdesk]] request for assistance

===== Cluster login by means of ssh-keys only =====
To increase security without incurring too much unnecessary effort, cluster login is by means of ssh-keys only.  Passwords are inherently insecure and easy to get wrong.  Ssh-keys are easy to set up and make subsequent logins much easier.  The process is explained [[guide:sshkeys|on this page]].

===== DTN node access =====

Access to the DTN node for large file transfers, including large ''pip'' and ''git'' builds, is by application only.  Send your request to be added to the DTN node access group to our Helpdesk.

The DTN node ''dtn.chpc.ac.za'' is protected by additional two-factor authentication using the [[https://en.wikipedia.org/wiki/Google_Authenticator|Google Authenticator]] app.  Once your DTN access request is granted please follow the instructions below to set up the authentication.

====1. Install the Google Authenticator app on your phone====

Open the appropriate application install app for your phone:
  * Android devices use the Google Play Store [[https://play.google.com/store/apps/details?id=com.google.android.apps.authenticator2&hl=en-GB|link]]
  * Apple devices use the Apple App Store [[https://apps.apple.com/us/app/google-authenticator/id388497605|link]]

====2. Add your cluster key to the Authenticator app====

ssh into the login node ''lengau.chpc.ac.za'' as usual.

Configure google authenticator for your account by running the command

  google-authenticator -s ~/.google_authenticator_ssh 

This will ask you several questions.  The first question is

  Do you want authentication tokens to be time-based (y/n) 
  
Answer ''y'' for yes and press ENTER.

A QR code will then be displayed.  Before going any further, you need to scan this QR code using the Authenticator app on your phone:

  * Open Authenticator on your phone
  * Tap on the multi-colour **+** button to add a new key
  * Tap on **Scan a QR code**
  * Point your phone's camera at the screen making sure the QR code is in the box

>  Note that the QR code may scroll off the top of the screen.  Enlarge your ssh terminal window or reduce the font size so that the code is fully visible.

Once the code is accepted and a new key, named **login2:** folowed by your cluster user name, will appear in the Autheticator app list of codes.

Now continue to answer the ''google-authenticator'' questions on the cluster.

Important: Answer **y** (and press Enter) to //all// the questions to set up strong security.

====Connecting to the DTN node====

Now you can ''ssh'' to the DTN node at ''dtn.chpc.ac.za''.  This connection will use your ssh key (like for ''lengau'') to connect and then you will be prompted for the Authenticator code.  Ensure that you distinguish between the passphrase for your key and the request for the Authenticator code:

  Verification code:

Open the Authenticator app on your phone and look for the 6 digits below the **login2:** label.  Type those in and press ENTER.
wiki.chpc.ac.za

User Tools

Site Tools

Page Tools
