For LANL Users

 

SNL Internal Webpages

For Users with Cross Realm

For Users with SNL Kerberos

  • Username: SNL username
  • Password: SNL CryptoCard or Yubikey

 

Secure Gateway (SRNGate)

For Users with Cross Realm Account

SSH to srngate.sandia.gov

% ssh -l username@lanl.gov srngate.sandia.gov

Use the passcode from your SNL issued CryptoCard  as your password when prompted.From srngate.sandia.gov, get Kerberos credentials

  • Welcome "username" to the ssh gateway
  • 1 – ssh session
  • 2 – kinit Acquire kerberos credentials
  • 3 – remove stored host keys for a hostname
  • Q – Quit
  • Enter a selection from above: 2

At the password prompt, enter LANL CryptoCard passcode. You will get back to the menu options above, select option 1 to ssh to to a specific system Try the system name e.g.“redsky”. If that doesn’t work, try a specific login node name. Login nodes are usually in -login[1,2,…] format.** Note: Access through srngate.sandia.gov requires two passcodes. The first passcode is obtained from your SNL CryptoCard and the second passcode is obtained from your site’s (CryptoCard)

 ***Note: If you have a Yubikey (incerts into computer) rather than Crypocard (In gray plastic folder)  , you will authencate t SRNGate with;

SNL UserID

Yubikey pin  then press gold button to autofill the rest.

For Users with SNL Kerberos

Use the instruction at http://hpc.sandia.gov/access/SSH.html

Classified (SCN) Access

For Users with Cross Realm Account

From your LANL red workstation:

% ssh -l redcap

% kinit -f

(to obtain forwardable Kerberos credentials using red cryptocard otp)

% ssh -l @machinename.sandia.gov

For Users with SNL Kerberos

  • Username: SNL Classified Username
  • Password: SNL CryptoCard