Using PDC resources

1
Using PDC resources

• Ice informationhttp//ice-www.pdc.kth.se
• PDC information
• http//www.pdc.kth.se
• Support informationhttp//www.pdc.kth.se/systems_
  support/
• AFS (File system)
• Kerberos (Security)

2
User Environment

• File systems
• AFS Home directories
• Local unix file system
• /scratch local scratch file system
• Modules handles PATH, MANPATH,
• module add i-compilers
• module show i-compilers
• module list
• module avail

3
Security Kerberos basics
4
Kerberos5 commands
If Behind NAT

• kinit Proves your identity
• kinit --no-addresses -f -l 12h
  gpr03-70_at_NADA.KTH.SE
• gpr03-70_at_NADA.KTH.SE's Password
• klist List your kerberos tokens
• ice-ws01 gpr03-70 klist
• Credentials cache FILE/tmp/krb5cc_501
• Principal gpr03-70_at_NADA.KTH.SE
• Issued Expires Principal
  
• Aug 9 175515 Aug 16 175515
  krbtgt/NADA.KTH.SE_at_NADA.KTH.SE

Forewardable
5
Kerberos5 commands (cont.)

• kdestroy removes your ticket file
• gt kdestroy
• gt klist
• klist No ticket file /tmp/krb5cc_22557
• v4-ticket file /tmp/tkt22557
• klist No ticket file (tf_util)
• kpasswd change your passwd

6
Kerberos enabled commands

• Remote login and secure X-windows redirect
• rxtelnet -f ice-something.pdc.kth.se
• To change your passwd
• Unix/Linux users use the 'kpasswd' gotten in
  your
• travelkit, on your own desktop/laptop machine,
  this
• is preferably done prior to any login.
• PC/Ktelnet click for 'connections,' then click
  for
• 'Change password/Kerberos5' and set your new
  passwd.

7
Kerberos enabled commands (cont.)

• Transferring files with ftp (having forwardable
  tickets)
• ice-ws01 gpr03-70 ftp ice01.pdc.kth.se
• Connected to ice01.pdc.kth.se.
• 220 ice01.pdc.kth.se FTP server (Version
  6.00Heimdal 0.7.1) ready.
• Trying GSSAPI...
• Authenticated to ltftp/ice01.pdc.kth.se_at_NADA.KTH.SE
  gt
• Authentication successful.
• Name (ftp.pdc.kth.sepgr03-70)
• S232-Kickstart-installed Bambi RedHat Linux at
  PDC Thu Nov 3 140233 CET 2005
• S232 User gpr03-70 logged in.
• S230 Password not necessary
• Remote system type is UNIX.
• Using binary mode to transfer files.
• ftpgt

8
AFS commands

• http//www.pdc.kth.se/support/afs-tour.html
• tokens List your afs tokens -
• gt module add afsws
• gt tokens
• Tokens held by the Cache Manager
• (AFS ID 22557) tokens for afs_at_nada.kth.se
  Expires Aug 19 0338
• (AFS ID 22557) tokens for afs_at_pdc.kth.se Expires
  Aug 19 0338
• --End of list--
• kauth/kdestroy automatically does afslog/unlog
• klist -T lists your AFS tokens as well as
  Kerberos tickets

9
More AFS

• fs Directory access management
• gt fs setacl MyDirectory myfriend rl
• gt fs listacl MyDirectory
• gt fs setacl MyDirectory myfriend none
• gt fs setacl MyDirectory systemanyuser rl
• gt fs help
• gt fs help setacl
• pts ACL group management
• gt pts member alice
• gt pts creategroup alicebuddies
• gt pts adduser myfriend1 alicebuddies
• gt pts examine alicebuddies
• gt pts help adduser
• Putting it all together
• gt fs setacl MyProjectDir alicebuddies write
  (rwlidk)
• gt fs setacl public_html systemanyuser read (rl)

10
Your web

• Copy stuff to your web catalog
• gt mkdir /public_html
• gt fs copyacl /Public /public_html
• gt cp STUFF /public_html
• Will result in URL
• http//ice-www.pdc.kth.se/gpr03-XX/

11
Printing

• lpr/lpd
• queue auto
• hostname ice-bw.pdc.kth.se
• Generic PostScript

12
Machine room in Stockholm