For LLNL Users

SNL Internal Webpages

For LLNL Users with Cross Realm

• Username: LLNL username@spectrum.llnl.gov
• Password: the kerberos password of the day obtained from https://lc.llnl.gov/getkrbpw/ *(Requires authentication)

For LLNL Users with SNL Kerberos

• Username: SNL username
• Password: SNL CryptoCard or Yubikey

Secure Gateway (SRNGate)

For LLNL Users with Cross Realm

• SSH to srngate.sandia.gov
  • % ssh -l username@spectrum.llnl.gov srngate.sandia.gov
  • Use the passcode from your SNL issued CryptoCard  as your password when prompted.
• From srngate.sandia.gov, get Kerberos credentials
  • Welcome "username" to the ssh gateway

• • 1 – ssh session
  • 2 – kinit Acquire kerberos credentials
  • 3 – remove stored host keys for a hostname
  • Q- Quit
  • Enter a selection from above: 2

At the password prompt, enter Livermore 1-day Kerberos password. You will get back to the menu options above, select option 1 to ssh to to a specific system Try the system name e.g.“redsky”. If that doesn’t work, try a specific login node name. Login nodes are usually in -login[1,2,…] format. ** Note: Access through srngate.sandia.gov requires two passcodes. The first passcode is obtained from your SNL CryptoCard or Yubikey and the second passcode is obtained from your site (One-day kerberos password)

  ***Note: If you have a Yubikey (inserts into computer) rather than Crypocard (In gray plastic folder), you will authenticate SRNGate with;

SNL UserID

Yubikey pin  then press gold button to autofill the rest.

For Users with SNL Kerberos

Use the instruction at http://hpc.sandia.gov/access/SSH.html

Classified (SCN) Access

For LLNL Users with Cross Realm

For Users with SNL Kerberos

• Username: SNL username
• Password: SNL CryptoCard