38,760
edits
SSH Keys Pilot/en: Difference between revisions
Jump to navigation
Jump to search
Updating to match new version of source page
(Updating to match new version of source page) |
(Updating to match new version of source page) |
||
| Line 1: | Line 1: | ||
<languages /> | <languages /> | ||
In our continuous efforts to secure our national infrastructure, we have implemented a new feature in the CCDB whereby public SSH keys can be uploaded to your account and used to connect to our clusters ([[Cedar]], [[Graham]], [[Béluga/en|Béluga]] and [[Niagara |Niagara and Mist]]). | In our continuous efforts to secure our national infrastructure, we have implemented a new feature in the CCDB whereby public SSH keys can be uploaded to your account and used to connect to our clusters ([[Cedar]], [[Graham]], [[Béluga/en|Béluga]], and [[Niagara |Niagara and Mist]]). | ||
We have received positive feedback from the community. | We have received positive feedback from the community. | ||
SSH keys will be the only way to authenticate on Niagara and Mist starting January 24, 2022. | SSH keys will be the only way to authenticate on '''Niagara and Mist''' starting on January 24, 2022. | ||
== Important dates == | == Important dates == | ||
'''Starting on November 1, 2021''': Authentication on Niagara and Mist | '''Starting on November 1, 2021''': Authentication on Niagara and Mist only accepted SSH keys that had been uploaded to the CCDB. Keys that were only in <tt>.ssh/authorized_keys</tt> no longer worked. | ||
'''Every Monday of November 2021''': From 10:00AM to noon Eastern time, authentication on Niagara and Mist | '''Every Monday of November 2021''': From 10:00AM to noon Eastern time, authentication on Niagara and Mist was only possible with SSH keys. Authentication using passwords was disabled. | ||
'''December 1, 2, 3 and 6, 7 2021''': From 09:00AM to 01:00PM Eastern time, authentication on Niagara and Mist | '''December 1, 2, 3 and 6, 7 2021''': From 09:00AM to 01:00PM Eastern time, authentication on Niagara and Mist was only possible with SSH keys. Authentication using passwords was disabled. | ||
'''December 8, 9, 10 and 13, 14, 15 2021''': From 09:00AM to 03:00PM Eastern time, authentication on Niagara and Mist | '''December 8, 9, 10 and 13, 14, 15 2021''': From 09:00AM to 03:00PM Eastern time, authentication on Niagara and Mist was only possible with SSH keys. Authentication using passwords was disabled. | ||
'''January 10-14, 17-21 2022''': From 10:00AM to 05:00PM Eastern time, authentication on Niagara and Mist | '''January 10-14, 17-21 2022''': From 10:00AM to 05:00PM Eastern time, authentication on Niagara and Mist was only possible with SSH keys. Authentication using passwords was disabled. | ||
'''From January 24, 2022''': Authentication on Niagara and Mist will only be possible with SSH keys. | '''From January 24, 2022''': Authentication on '''Niagara and Mist''' will only be possible with SSH keys. | ||
== What you need to do == | == What you need to do == | ||
| Line 28: | Line 28: | ||
'''If you know how to use SSH keys''', | '''If you know how to use SSH keys''', | ||
# Create your SSH key pair from your workstation. | # Create your SSH key pair from your workstation. | ||
# Upload your SSH public key to your CCDB account by connecting to https://ccdb.computecanada.ca/ssh_authorized_keys. After a few minutes, you should be able to authenticate on Niagara or Mist | # Upload your SSH public key to your CCDB account by connecting to https://ccdb.computecanada.ca/ssh_authorized_keys. After a few minutes, you should be able to authenticate on Niagara or Mist. | ||
# If the <tt>.ssh</tt> folder in your <tt>$HOME</tt> directory contains a file named <tt>authorized_keys</tt>, it should be deleted. | # If the <tt>.ssh</tt> folder in your <tt>$HOME</tt> directory contains a file named <tt>authorized_keys</tt>, it should be deleted. | ||
# Log out of the cluster and log in again. | # Log out of the cluster and log in again. | ||
| Line 36: | Line 36: | ||
== Support == | == Support == | ||
If you | If you have questions or need assistance, please contact [[technical support]]. | ||