Access to the CNAF resources

Introduction

Hereafter, the procedures to access the computing facilities at INFN CNAF are described.

Two profiles of users have been identified:

Project administrators, who manage the assigned resources in the Cloud infrastructure, their allocation, and can configure and manage the user access;
Users of the allocated resources.

Different procedures has been defined for each profile.

Important Note

Project adminstrators have to follow also the procedure for the final users.

User registration and resource access

The procedure allows to register as a CNAF user and have access to the resources allocated on Cloud @ CNAF. The procedure only needs to be done once.

The instructions for accessing the CNAF are as follows:

Read the Acceptable Use Policy of CNAF-INFN and the rules for the processing of personal data in INFN.
Fill in and sign, in collaboration with the INFN-CNAF contact person this form. Insert as INFN-CNAF contact person your collaboration/experiment responsible person.
Contact the contact person at INFN CNAF to arrange a video call during which the face to face recognition and control of the ID card will be processed.
Send the authorization form by e-mail to sysop@cnaf.infn.it and to user-support@lists.cnaf.infn.it
The account will be created and a confirmation email will be sent.
In case of problems, write to sysop@cnaf.infn.it or to user-support@lists.cnaf.infn.it

Project administration registration on Cloud@CNAF

The procedure allows you to register as project resource administrators on the Cloud @ CNAF infrastructure, based on Openstack. Registration only needs to be done once.

Access the link https://iam.cnaf.infn.it/

Log in via your identity provider (eduGAIN) or register manually
Complete the registration by specifying the collaboration/experiment for which you intend to work. Add any additional information needed to authorize the requestand clik on "Request"

Confirm the registration by following the link in the email received
A Cloud@CNAF administrator will confirm your account. After that, you can log in using your IdP or the credentials created manually (in this case it is necessary to define a password by following the instructions in the confirmation e-mail).

Access to the dashboard on Cloud@CNAF

The procedure allows to access the dashboard on the Cloud@CNAF OpenStack. The procedure has to be followed whenever access to resource management utilities is required

Go to https://cloud-dashboard.cnaf.infn.it and choose "Authenticate using: OpenID Connect", click on "Access"

Choose iam.cnaf.infn.it/ as Identity Provider

If required, click on "Authorize"
After login In, in the top-right menu where you see select the region "SDDS"
In the "Overview" the resources allocated and available are shown

The resource configuration and the user management access are under the project administrator responsibility, who have to agree with the CNAF administrators on any changes, including the firewall configuration.

Access Cloud@CNAF resources

To access via ssh the resources created on Cloud@CNAF, it is necessary to perform the following instructions:

Access a terminal or Command Line Interface
ssh bastion.cnaf.infn.it
Use the credentials provided during the registration phase
Starting from here, user can connect via ssh to the resources managed by your project administrators.

Page tree

0) Registration_generic