LRZ Grid Portal: GSISSH Term's Guide

GSISSH-Term at LRZ

What is GSISSH-Term?

GSISSH-Term is a Java based terminal client application for accessing the Grid. It supports the use of grid certicates for authentication. Since this application is written in Java, it is supported on most platforms (e.g. Windows, MAC and Linux). It is also available as a Java webstart application.

Preparing for GSISSH-Term

Setting up Grid Certificates

Users would have to place the required grid certificates (CA certificates and personal certificates) appropriately in their machine before they can access LRZ's grid. Please follow the following steps:

Ensure that your grid certificates (usercert.pem and userkey.pem) are in ".globus" folder in your home directory. For Linux/Unix user, the ".globus" folder should be in $HOME. For Windows user, the ".globus" folder should be in following directory: "C:\Documents and Settings\{username}".
CA certificates and signing policies for access LRZ's grid are also required. Create a "certificates" folder in the ".globus" folder. Download and extract the content of this file [lrzGridCerts.tar.gz] into the "certificates" folder. For Linux/Unix users who have installed other grid middlewares, the content can also be extracted to "/etc/grid-security/certificates". If you choose to do so, a symbolic link "$HOME/.globus/certificates" to the target directory "/etc/grid-security/certificates" must also be created.

Setting up GSISSH-Term

The easiest way to use GSISSH-Term is to initiate it as a Java webstart application. Alternatively, you could download the source code and compile it to generate the required libraries and scripts.

For either method, you will need Java SDK 1.5 or higher installed to run the application.

1) GSISSH-TERM as a Java webstart application
To run GSISSH-Term as a Java webstart application, you would need to have Java webstart (javaws) installed on your machine. Java webstart is now included in the Java Runtime Environment (JRE) as part of your Java SE 6. You can also download an older standalone version [here]. However, the latest version is always encouraged.

To install and start GSISSH-Term via Java webstart, simply click on this link [here] and open it with Java webstart (javaws).

2) GSISSH-TERM from source
The source of GSISSH-Term can be downloaded from the GSI-SSHTerm Application project on sourceforge and is also available via the public CVS access

$JAVA_HOME must be set to the correct Java installation directory. Note that you should be using Java SDK 1.5 and or higher.

For Linux/Unix Users

To compile and generate the GSISSH-Term application:

cd sshtools
./make.sh

To run:

cd sshtools/release/GSI-SSHTerm-{version}/bin
./sshterm.sh

For Windows Users

To compile and generate the GSISSH-Term application:

cd sshtools
./make.bat

To run:

cd sshtools/release/GSI-SSHTerm-{version}/bin
./sshterm.bat

User Guide

The following window will be shown when GSISSH-Term is initiated (either via Java webstart or as a desktop application):

To create a new connection, select "File" -> "New Connection" or the shortcut icon "Create a New Connection" (first icon from the left). The following window will be displayed:

To configure a new connection, select the "Advanced" button. In the "Host" tab, please input the following information:

For hlrb2 grid users:
Hostname: a01.hlrb2.lrz-muenchen.de
Port: 2222
Username: {Can be left empty}
Authentication Methods: gssapi

For linux cluster grid users:
Hostname: lxgt2.lrz-muenchen.de
Port: 2222
Username: {Can be left empty}
Authentication Methods: gssapi

Note: For hlrb2 user, you will need to register your static ip. Please contact grid-admin@lists.lrz-muenchen.de

Now select the "Connect" button. You will be prompted to enter your "Grid Certificate Passphrase". Enter the passphrase of your grid certificate and click "Ok" or just hit the "Enter" key of your keyboard.

You should now login to LRZ's grid. Welcome!

If you face any problems, please contact grid-admin@lists.lrz-muenchen.de

Additional Authentication method for GSISSH-Term:

MyProxy server

LRZ provides a MyProxy server for users to store their grid credential. The users can retrieve their respective proxy credentials from the MyProxy server without worrying about managing their private keys and certificates. MyProxy server can be used to delegate credentials to services (e.g. gsissh) on their behalf. For more information, please refer to http://grid.ncsa.uiuc.edu/myproxy/

Before you can use MyProxy server, you would have to store a copy of your credential in the server. Please refer to the following page MyProxy for instructions on how to store your grid credential at LRZ's MyProxy server. Note that MyProxy server is open to all for use.

GSISSH-Term provides authentication via MyProxy server. To logon to LRZ using myproxy server:

Select the "GSI Defaults" of the "Connection Profile" window. Please refer to the instruction on how to get to the "Connection Profile" window. For the "Authentication Order", please select "Other Methods" to use. In the "Authentication Defaults" section, please configure for "MyProxy" as follows:

UserName: {Your username at LRZ}
Host: myproxy.lrz-muenchen.de
Port: 7512

Click on the "Connect" button. The following window will be shown.

In the "Retrieve Credentials from MyProxy" section, please enter your MyProxy passphrase. Click the "use MyProxy" button.

You should now login to LRZ's grid. Welcome!

If you face any problems, please contact grid-admin@lists.lrz-muenchen.de

Userful Tools in GSISSH-Term

File Transfer via GSISSH-Term

GSISSH-Term provides a SFTP client for secure file transfer. Select "Tools"->"SFTP Session". A new window containing the "SFTP Session" will be shown. Upload or download files by selecting the "File-> Upload Files" or "File->Download".

New Terminal Session

You are also allowed to start a "Terminal Session" via GSISSH-Term by selecting "Tools"->"Terminal Session".