This article explains:
- Available login servers
- Features of login servers
- Contingency route for users with network difficulties
- How to use the login servers to access resources within JASMIN
Available login servers
There are three login (bastion or gateway) servers based on the CentOS7 operating system which are available to access resources within JASMIN. Users with the
jasmin-login access role can access the following servers via SSH:
|Login server name||
||Contingency, see notes below|
If you require more detailed instructions on how to log in from different types of computer refer to the getting started category
See also NoMachine NX service which provides login to a graphical linux desktop, rather than a single terminal window.
Features of login servers
Login servers have minimal resources and software installed. They provide:
- Access to your home directory (
- Access over SSH to other hosts within JASMIN (inside the RAL firewall)
- No analysis software is installed on the login servers.
- No access to group workspaces or other volumes (but see notes on contingency route, below)
"Contingency" login servers
There are requirements on your local network which apply to accessing the login servers and the transfer servers via SSH. If you cannot meet these requirements, even after discussion with your local network admin team, a contingency route is provided in the form of login server
However, you will be limited in what you can access within JASMIN from this server. Specifically:
- You will only be able to access other SSH-based resources on JASMIN via this server
- You cannot set up SSH tunnelling to other other hosts within JASMIN
- You will not be able to access the transfer servers via SSH directly from an external host
- You can access the transfer servers via this server as a "hop", but can then only initiate an inward pull of data from an external SSH server, if available at your institution. You cannot push data directly to the transfer servers via SSH from outside in this case.
- Data transfers using Globus Online are still possible: this is the recommended method in this case.
- As an exception (compared to the other login machines), and for reasons of providing lightweight data access only, group workspaces and other volumes are mounted on this server. But you should not carry out large data transfers via this route. You are advised to use Globus Online in this case as an alternative.
How to use the login servers
For full details of how to log in, including making onward connections to other machines, please see the article "How to login"
Note: Users are not permitted to execute commands which require administrative privileges. This applies to all hosts in the managed part of JASMIN where users have SSH login access (for example
hpxfer machines). In other words, the use of
sudo is not permitted. Please be careful when typing commands, particularly if you have multiple terminal windows open on your own computer, that you do not accidentally attempt
sudoon a JASMIN machine: expect some follow-up from the JASMIN team if you do!