SNL Internal Webpages
For Users with Cross Realm
- Username: LANL username@lanl.gov
- Password: the LANL CryptoCard
For Users with SNL Kerberos
- Username: SNL username
- Password: SNL CryptoCard or Yubikey
Secure Gateway (SRNGate)
For Users with Cross Realm Account
SSH to srngate.sandia.gov
% ssh -l username@lanl.gov srngate.sandia.gov
Use the passcode from your SNL issued CryptoCard as your password when prompted.From srngate.sandia.gov, get Kerberos credentials
- Welcome "username" to the ssh gateway
- 1 – ssh session
- 2 – kinit Acquire kerberos credentials
- 3 – remove stored host keys for a hostname
- Q – Quit
- Enter a selection from above: 2
At the password prompt, enter LANL CryptoCard passcode. You will get back to the menu options above, select option 1 to ssh to to a specific system Try the system name e.g.“redsky”. If that doesn’t work, try a specific login node name. Login nodes are usually in -login[1,2,…] format.** Note: Access through srngate.sandia.gov requires two passcodes. The first passcode is obtained from your SNL CryptoCard and the second passcode is obtained from your site’s (CryptoCard)
***Note: If you have a Yubikey (incerts into computer) rather than Crypocard (In gray plastic folder) , you will authencate t SRNGate with;
SNL UserID
Yubikey pin then press gold button to autofill the rest.
For Users with SNL Kerberos
Use the instruction at http://hpc.sandia.gov/access/SSH.html
Classified (SCN) Access
For Users with Cross Realm Account
From your LANL red workstation:
% ssh -l redcap
% kinit -f
(to obtain forwardable Kerberos credentials using red cryptocard otp)
% ssh -l @machinename.sandia.gov
For Users with SNL Kerberos
- Username: SNL Classified Username
- Password: SNL CryptoCard