To access via ssh the Tier-1 user interfaces (UI) first is necessary to connect to bastion.cnaf.infn.it, the CNAF gateway. To request an account on this gateway please follow the procedure available here: https://www.cnaf.infn.it/utenti-faq/.
UI are machines with batch system, grid middleware and file management tools. The general purpose UI is ui-tier1.cr.cnaf.infn.it but also experiment dedicated UIs exist:

• ui01-gamma
• ui02-gamma
• ui-ams
• ui01-ams
• ui7-auger
• ui-borexino
• ui-cdf
• ui-cuore
• ui-dampe
• ui-darks
• ui-demo
• ui-enubet
• ui01-foot
• ui02-foot
• ui-gerda
• ui-herd
• ui01-icarus
• ui02-icarus
• ui-juno
• ui-km3
• ui01-lhcb
• ui01-lhcf
• ui01-pamela
• ui-qcdlat
• ui-tier1
• ui01-virgo
• ui02-virgo
• neutrino-01 (131.154.161.32)

Password policies

Whenever the password account has to be set, the policies below must be followed:

• the new password must be different from the previous 5;
• the minimum length password needs to be 10 characters;
• at least, 3 of the following 5 classes must be used (uppercase, lowercase, numbers, symbols, not-printable characters).

x2go

Due to popular demand, we set up a x2go server on our main UI, ui-tier1.cr.cnaf.infn.it.

The connection still requires the user to cross our jump host (bastion.cnaf.infn.it) hence the user must setup the x2go client specifying to use a proxy server; xfce is the only option as session manager. See the included picture as a reference.

The support of this service is still experimental, we must evaluate the impact on both the jump host and the user interface itself: these are shared nodes and we are not sure the available resources are enough to stand the overhead of this service.

N.B. It is recommended to download the version 4.1.2.0-2018.06.22 of the x2go client, as it seems to work better than the latest one.