Access to the CNAF resources (For the users of the SUPER project)
Introduction
Hereafter, the procedures to access the computing facilities at INFN CNAF for the users belonging to SUPER project are described.
Two profiles of users have been identified:
- Project administrators, who manage the assigned resources in the Cloud infrastructure, their allocation, and can configure and manage the user access;
- Users of the allocated resources.
Different procedures has been defined for each profile.
Project adminstrators have to follow also the procedure for the final users. |
User registration and resource access
The procedure allows to register as a CNAF user and have access to the resources allocated on Cloud @ CNAF. The procedure only needs to be done once.
The instructions for accessing the CNAF are as follows:
- Read the Acceptable Use Policy of CNAF-INFN and the rules for the processing of personal data in INFN.
- Fill in and sign, in collaboration with the INFN contact person this form. Insert as INFN contact person "Cristina Vistoli" or "Claudio Grandi"
- Contact the contact person at INFN CNAF to arrange a video call during which the face to face recognition and control of the ID card will be processed.
- Send the authorization form by e-mail to sysop@cnaf.infn.it and to user-support@lists.cnaf.infn.it
- The account will be created and a confirmation email will be sent.
- In case of problems, write to sysop@cnaf.infn.it or to user-support@lists.cnaf.infn.it
For SUPER users, they are described in detail:
- Read the Acceptable Use Policy of the CNAF-INFN and the rules for the processing of personal data in the INFN
- Download, fill in and sign the Access Authorization Form.
- Send the authorization form by e-mail to sysop@cnaf.infn.it, to user-support@lists.cnaf.infn.it and add in CC the reference people.
- For those users not associated with INFN, also send a copy of ID Card or Passport
- After the necessary checks, an account will be created on the bastion host, bastion.cnaf.infn.it, of the CNAF and the user will receive a confirmation via e-mail.
Project administration registration on Cloud@CNAF
La procedura consente di registrarsi come amministratori di risorse di progetto sull’infrastruttura Cloud@CNAF, basata su Openstack. La registrazione deve essere fatta una sola volta.
- Andare su https://iam-super.cloud.cnaf.infn.it/
- Fare login tramite il proprio identity provider (eduGAIN) oppure registrarsi manualmente
- Completare la registrazione specificando i task di SUPER per cui si intende lavorare. Aggiungere le eventuali informazioni addizionali necessarie per autorizzare la richiesta
- Accettare la AUP e sottomettere la registrazione
- Confermare la registrazione clickando sul link nella mail ricevuto in seguito alla registrazione
- Dopo la conferma dell'account da parte di un amministratore di Cloud@CNAF è possibile entrare usando il proprio IdP o usando le credenziali create manualmente (in questo caso è necessario definire una password seguendo il link nella e-mail di conferma).
The procedure allows you to register as project resource administrators on the Cloud @ CNAF infrastructure, based on Openstack. Registration only needs to be done once.
- Access the link https://iam-super.cloud.cnaf.infn.it/
- Log in via your identity provider (eduGAIN) or register manually
- Complete the registration by specifying the SUPER tasks for which you intend to work. Add any additional information needed to authorize the request
- Accept the AUP and submit the registration
- Confirm the registration by following the link in the email received
- A Cloud@CNAF administrator will confirm your account. After that, you can log in using your IdP or the credentials created manually (in this case it is necessary to define a password by following the instructions in the confirmation e-mail).
Access to the dashboard on Cloud@CNAF
The procedure allows to access the dashboard on the Cloud@CNAF OpenStack. The procedure has to be followed whenever access to resource management utilities is required
- Go to https://cloud-dashboard.cnaf.infn.it and choose "Authenticate using OpenID Connect", click on "Access"
- Choose iam-super.cloud.cnaf.infn.it/ as Identity Provider
- If required, click on "Authorize"
- In the top-right menu select the region "SDDS"
- In the "Overview" the resources allocated and available are shown
The resource configuration and the user management access are under the project administrator responsibility, who have to agree with the CNAF administrators on any changes, including the firewall configuration.
Access Cloud@CNAF resources
To access via ssh the resources created on Cloud@CNAF, it is necessary to perform the following instructions:
- Access a terminal or Command Line Interface
- ssh http://bastion.cnaf.infn.it
- Use the credentials provided during the registration phase
- Starting from here, user can connect via ssh to the resources managed by your project administrators.