Differences

This shows you the differences between two versions of the page.

--- federated_identity_login [2022/07/27 14:37] – pwolinsk
+++ federated_identity_login [2025/10/15 19:51] (current) – external edit 127.0.0.1
@@ Line 1: / Line 1: @@
 ==== Federated Identity with Globus ID ====
-Globus ID ([[https://www.globusid.org/faq|Globus ID]]) is an identity provider operated [[https://www.globus.org|Globus.org]], a cloud based bulk data transfer solution used by AHPCC.  A Globus ID account is required to use the Globus data transfer system, which is the recommended solution for [[moving_data | Moving Data]].  The same Globus ID account can be used to log into AHPCC clusters.  Globus ID's are free to create and can be linked to multiple identities, including those from schools with a membership in [[https://www.incommon.org/federation/|InCommon]] federation.
+Globus ID ([[https://www.globusid.org/faq|Globus ID]]) is an identity provider operated [[https://www.globus.org|Globus.org]], a cloud based bulk data transfer solution used by AHPCC.  A Globus ID account is required to use the Globus data transfer system, which is the recommended solution for [[moving_data | Moving Data]] to and from Pinnacle storage.  The same Globus ID account can be used to log into AHPCC clusters.  Globus ID's are free to create and can be linked to multiple identities, including those from schools which are members of [[https://www.incommon.org/federation/|InCommon]] federation.
+**NOTE:** To log into Pinnacle, both a Globus ID and an associated local Pinnacle account have to exist.  Simply having a Globus ID account will not be enough to log into AHPCC clusters.
-==== Using Globus ID to log into AHPCC ====
+==== Using a Globus ID to log into AHPCC ====
-**oauth-ssh** client is needed to authorized a host machine to connect to the AHPCC cluster using a Globus ID. The **oauth-ssh** is a python package that can be installed using pip:
+**oauth-ssh** client is needed to authorized a host machine to connect to the AHPCC cluster using a Globus ID. The **oauth-ssh** is a python package that can be installed using **pip** (python package manager):
 <code>
@@ Line 30: / Line 31: @@
 </code>
-Once **oauth-ssh** client is installed, your client machine (the host from which your are logging into Pinnacle) has to be authorized to connect to Pinnacle login node, **login.hpc.uark.edu**:
+Once **oauth-ssh** client is installed, your client machine (the host from which your are logging into Pinnacle) has to be authorized to connect to the Pinnacle login node, **login.hpc.uark.edu**:
 <code>
@@ Line 53: / Line 54: @@
 <code>
 [pawel@frontdesk ~]$ oauth-ssh-token authorize login.hpc.uark.edu
-/usr/local/lib/python3.6/site-packages/paramiko/transport.py:33: CryptographyDeprecationWarning: Python 3.6 is no longer supported by the Python core team. Therefore, support for it is deprecated in cryptography and will be removed in a future release.
-  from cryptography.hazmat.backends import default_backend
 Please go to this URL and login: https://auth.globus.org/v2/oauth2/authorize?redirect_uri=https%3A%2F%2Fauth.globus.org%2Fv2%2Fweb%2Fauth-code&client_id=b373be16-f444-45f7-a144-e2c99a8ab704&access_type=offline&state=_default&code_challenge=R9N64HSJVhRqt0zesM0rtzpkbg2YHe3bXW3F5S0Q9Ew&code_challenge_method=S256&response_type=code&scope=https%3A%2F%2Fauth.globus.org%2Fscopes%2Flogin.hpc.uark.edu%2Fssh
 Please enter the code you get after login here: MZzXX5GhCw7hr7uH80nU4StddODSQV
@@ Line 60: / Line 59: @@
 </code>
+Your host is now authorized for logging into login.hpc.uark.edu for 48 hours.  To log in, you can either use **oauth-ssh** client:
-To use a Globus ID, try to log into [[https://www.globus.org/|Globus]] using your school's identity provider.  The drop
+<code>
-If you do not already have a Globus ID, you can create one here: https://www.globusid.org/create?viewlocale=en_US
+[pawel@frontdesk ~]$ oauth-ssh login.hpc.uark.edu
+Last failed login: Wed Jul 27 08:14:45 CDT 2022 from 184.180.249.7 on ssh:notty
+There were 4 failed login attempts since the last successful login.
+Last login: Wed Jul 27 08:12:10 2022 from 184.180.249.7
+     Welcome to login.hpc.uark.edu - Globus Authentication test login VM
+-bash-4.2$
+</code>
+or your regular ssh client, by copying and pasting the output of **oauth-ssh-token show token login.hpc.uark.edu** at the OAuth token prompt:
+<code>
+[pawel@frontdesk ~]$ oauth-ssh-token show token login.hpc.uark.edu
+Ay525VXDNakMxKGVJ8dx0B5gl95mlj0ldjkngVdqQOOeaJ3ouVCB1gWOYkQrOKYW0oYnaX52dbOzIW92B1XHQ5mXj
+[pawel@frontdesk ~]$ ssh pwolinsk@login.hpc.uark.edu
+Enter your OAuth token:
+Last login: Wed Jul 27 09:39:10 2022 from 10.172.0.199
+     Welcome to login.hpc.uark.edu - Globus Authentication test login VM
+-bash-4.2$
+</code>