-
Notifications
You must be signed in to change notification settings - Fork 1
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Deployed c5d2ee8 with MkDocs version: 1.5.3
- Loading branch information
Unknown
committed
Mar 12, 2024
1 parent
b3866e3
commit e1d490b
Showing
3 changed files
with
12 additions
and
44 deletions.
There are no files selected for viewing
Large diffs are not rendered by default.
Oops, something went wrong.
Binary file not shown.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
|
|
@@ -417,22 +417,13 @@ | |
| </li> | ||
|
|
||
| <li class="md-nav__item"> | ||
| <a href="#initial-passwords-up-to-13-feb-2024" class="md-nav__link"> | ||
| <a href="#mfa-time-based-one-time-passcode-totp" class="md-nav__link"> | ||
| <span class="md-ellipsis"> | ||
| Initial passwords (up to 13 Feb 2024) | ||
| MFA Time-based one-time passcode (TOTP) | ||
| </span> | ||
| </a> | ||
|
|
||
| </li> | ||
|
|
||
| <li class="md-nav__item"> | ||
| <a href="#mfa-time-based-one-time-passcode-totp-from-13-feb-2024" class="md-nav__link"> | ||
| <span class="md-ellipsis"> | ||
| MFA Time-based one-time passcode (TOTP) (from 13 Feb 2024) | ||
| </span> | ||
| </a> | ||
|
|
||
| <nav class="md-nav" aria-label="MFA Time-based one-time passcode (TOTP) (from 13 Feb 2024)"> | ||
| <nav class="md-nav" aria-label="MFA Time-based one-time passcode (TOTP)"> | ||
| <ul class="md-nav__list"> | ||
|
|
||
| <li class="md-nav__item"> | ||
|
|
@@ -747,22 +738,13 @@ | |
| </li> | ||
|
|
||
| <li class="md-nav__item"> | ||
| <a href="#initial-passwords-up-to-13-feb-2024" class="md-nav__link"> | ||
| <a href="#mfa-time-based-one-time-passcode-totp" class="md-nav__link"> | ||
| <span class="md-ellipsis"> | ||
| Initial passwords (up to 13 Feb 2024) | ||
| MFA Time-based one-time passcode (TOTP) | ||
| </span> | ||
| </a> | ||
|
|
||
| </li> | ||
|
|
||
| <li class="md-nav__item"> | ||
| <a href="#mfa-time-based-one-time-passcode-totp-from-13-feb-2024" class="md-nav__link"> | ||
| <span class="md-ellipsis"> | ||
| MFA Time-based one-time passcode (TOTP) (from 13 Feb 2024) | ||
| </span> | ||
| </a> | ||
|
|
||
| <nav class="md-nav" aria-label="MFA Time-based one-time passcode (TOTP) (from 13 Feb 2024)"> | ||
| <nav class="md-nav" aria-label="MFA Time-based one-time passcode (TOTP)"> | ||
| <ul class="md-nav__list"> | ||
|
|
||
| <li class="md-nav__item"> | ||
|
|
@@ -965,8 +947,7 @@ <h3 id="windows">Windows</h3> | |
| <h2 id="access-credentials">Access credentials</h2> | ||
| <p>To access Tursa, you need to use two credentials:</p> | ||
| <ul> | ||
| <li>Before 13 Feb 2024: your password <strong>and</strong> an SSH key pair protected by a passphrase.</li> | ||
| <li>After 13 Feb 2024: An SSH key pair protected by a passphrase and a Time-based One Time Passcode (TOTP)</li> | ||
| <li>An SSH key pair protected by a passphrase and a Time-based One Time Passcode (TOTP)</li> | ||
| </ul> | ||
| <p>You can find more detailed instructions on how to set up your credentials to access Tursa from Windows, macOS and Linux below.</p> | ||
| <h3 id="ssh-key-pairs">SSH Key Pairs</h3> | ||
|
|
@@ -1015,22 +996,12 @@ <h3 id="upload-public-part-of-key-pair-to-safe">Upload public part of key pair t | |
| <li>Click <em>Add</em> to associate the public SSH key part with your account</li> | ||
| </ol> | ||
| <p>Once you have done this, your SSH key will be added to your Tursa account.</p> | ||
| <p>Remember, you will need to use both an SSH key and password to log into Tursa so you will also need to collect your initial password before you can log into Tursa. We cover this next.</p> | ||
| <p>Remember, you will need to use both an SSH key and TOTP to log into Tursa so you will also need to setup your TOTP token before you can log into Tursa. We cover this next.</p> | ||
| <div class="admonition note"> | ||
| <p class="admonition-title">Note</p> | ||
| <p>If you want to connect to Tursa from more than one machine, e.g. from your home laptop as well as your work laptop, you should generate an ssh key on each machine, and add each of the public keys into SAFE. </p> | ||
| </div> | ||
| <h3 id="initial-passwords-up-to-13-feb-2024">Initial passwords (up to 13 Feb 2024)</h3> | ||
| <p>The SAFE web interface is used to provide your initial password for logging onto Tursa (see the <a href="https://epcced.github.io/safe-docs/safe-for-users/">SAFE | ||
| Documentation</a> for more details on requesting accounts and picking up passwords).</p> | ||
| <div class="admonition note"> | ||
| <p class="admonition-title">Note</p> | ||
| <p>You may now change your password on the Tursa machine itself | ||
| using the <em>passwd</em> command or when you are prompted the first time you | ||
| login. This change will not be reflected in the SAFE. If you forget your | ||
| password, you should use the SAFE to request a new one-shot password.</p> | ||
| </div> | ||
| <h3 id="mfa-time-based-one-time-passcode-totp-from-13-feb-2024">MFA Time-based one-time passcode (TOTP) (from 13 Feb 2024)</h3> | ||
| <h3 id="mfa-time-based-one-time-passcode-totp">MFA Time-based one-time passcode (TOTP)</h3> | ||
| <p>You will need to use both an SSH key and time-based one-time passcode to log into Tursa so you will | ||
| also need to <a href="https://epcced.github.io/safe-docs/safe-for-users/#how-to-turn-on-mfa-on-your-machine-account">set up a method for generating a TOTP code</a> before you can log into Tursa. </p> | ||
| <h4 id="first-login-from-a-new-account-password-required">First login from a new account: password required</h4> | ||
|
|
@@ -1060,10 +1031,7 @@ <h3 id="logging-in">Logging in</h3> | |
| Tursa:</p> | ||
| <pre><code>ssh [email protected] | ||
| </code></pre> | ||
| <ul> | ||
| <li>Before 13 Feb 2024: You will first be prompted for your machine account password. Once you have entered your password successfully, you will then be prompted for the passphrase associated with your SSH key pair.</li> | ||
| <li>After 13 Feb 2024: You will first be prompted for the passphrase associated with your SSH key pair (if it is not already added to a local SSH Agent) and then for your TOTP. </li> | ||
| </ul> | ||
| <p>You will first be prompted for the passphrase associated with your SSH key pair (if it is not already added to a local SSH Agent) and then for your TOTP. </p> | ||
| <p>You need to enter both credentials correctly to be able to access Tursa.</p> | ||
| <div class="admonition tip"> | ||
| <p class="admonition-title">Tip</p> | ||
|
|
@@ -1088,7 +1056,7 @@ <h3 id="logging-in">Logging in</h3> | |
| <p>Your password has now been changed</p> | ||
| </div> | ||
| <h2 id="host-keys">Host Keys</h2> | ||
| <p>Adding the host keys to your SSH configuration file provides an extra level of security for your connections to ARCHER2. The host keys are checked against the login nodes when you login to ARCHER2 and if the remote server key does not match the one in the configuration file, the connection will be refused. This provides protection against potential malicious servers masquerading as the ARCHER2 login nodes.</p> | ||
| <p>Adding the host keys to your SSH configuration file provides an extra level of security for your connections to Tursa. The host keys are checked against the login nodes when you login to Tursa and if the remote server key does not match the one in the configuration file, the connection will be refused. This provides protection against potential malicious servers masquerading as the Tursa login nodes.</p> | ||
| <h3 id="tursadiracedacuk">tursa.dirac.ed.ac.uk</h3> | ||
| <div class="highlight"><pre><span></span><code>tursa.dirac.ed.ac.uk ssh-rsa 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 | ||
|
|
||
|
|
||