Single Sign-on (SSO) from Your Desktop (Mac OSX/UNIX/Linux)

Home > User Info > Access > SSO from Your Desktop (Mac OSX/UNIX/Linux)

Logging in to the TeraGrid using only your TeraGrid-wide password is easy using GSISSH from your UNIX/LINUX/MacOSX laptop or desktop. Once you download the required components, MyProxy and GSISSH, you will be able to initiate a session on any TeraGrid resource where you have an allocation and log in only once during the session, no matter how many commands you execute or how many resources you access. GSISSH allows you to utilize all Globus Security Infrastructure- (GSI-) enabled features of the TeraGrid from your desktop.

Your account will be configured on TeraGrid resources for you, using the default certificate issued for the TeraGrid by the NCSA Certificate Authority (CA). Your account information packet will contain your TeraGrid-wide login. After a completing the installation below on your desktop, you will be able to initiate a session, and start computing immediately.

Download and Installation of MyProxy and GSISSH

Download and unpack the Globus Toolkit installer for your system from http://www.globus.org/toolkit/downloads/. To install MyProxy and GSISSH:

1. Change your directory to the location of the installer:

   $ cd gt4*-installer

2. Using the configure script and make files to install the package:

   $ ./configure --prefix=$HOME/globus
   $ make gsi-myproxy gsi-openssh
   $ make install

Ignore any Ant or Java errors, as they aren't needed for installing MyProxy and GSISSH.

3. Then set your environment variables:

   For CSH
   $ setenv GLOBUS_LOCATION $HOME/globus
   $ setenv MYPROXY_SERVER myproxy.teragrid.org
   $ setenv MYPROXY_SERVER_PORT 7514
   $ source $GLOBUS_LOCATION/etc/globus-user-env.csh
   
   For Bash
   $ GLOBUS_LOCATION=$HOME/globus
   $ MYPROXY_SERVER=myproxy.teragrid.org
   $ MYPROXY_SERVER_PORT=7514
   $ export GLOBUS_LOCATION MYPROXY_SERVER MYPROXY_SERVER_PORT
   $ . $GLOBUS_LOCATION/etc/globus-user-env.sh

4. Add these environment variables to your .cshrc, .login, .bashrc, or .profile so you don't need to run them again the next time you login.


Install the NCSA CA certificate

To use the TeraGrid MyProxy server, you must have the NCSA CA certificate and signing policy file installed. Use these commands to get and install the certificates:

$ mkdir -p ~/.globus/certificates
$ cd ~/.globus/certificates
$ wget http://ca.ncsa.uiuc.edu/4a6cd8b1.0
$ wget http://ca.ncsa.uiuc.edu/4a6cd8b1.signing_policy
$ wget http://ca.ncsa.uiuc.edu/4a6cd8b1.r0

Note: The certificates end in 1's (ones) not L's.

If you do not have wget installed on your machine, you can also use curl.



Logging into the TeraGrid

Once you have MyProxy and GSI-SSH installed, you can retrieve your certificate proxies and connect to any TeraGrid resource. You only need to enter your TeraGrid-wide username and password once. Your TeraGrid-wide username and password are the same as your User Portal username and password:

myproxy-logon -T -l username
Enter MyProxy pass phrase:
A credential has been received for user username in /tmp/x509up_u25555.
Trust roots have been installed in /home/username.globus/certificates/ .

After receiving your certificate proxies, you can use the GSI-enabled commands to connect to any resource without being challenged for a password. These commands include gsissh, gsiscp, and gsisftp.