To gain access to Ramses, you need to fulfill three requirements (in any order):
- apply for a project
- secure the connection with ssh keys (first factor)
- secure the connection with SSH keys (first factor)
- set up a second authentication factor (2FA)
Apply for a **user account**:
...
...
@@ -63,7 +63,7 @@ For security reasons, you can't login with a combination of username and passwor
If you own a [Yubikey](https://en.wikipedia.org/wiki/YubiKey) hardware token, you can also use it (in [OTP](https://en.wikipedia.org/wiki/One-time_password) mode) as the second authentication factor instead of Cisco Duo. If you are interested in using a Yubikey, please contact the [HPC-Team](mailto:hpc-mgr@uni-koeln.de). Please note: we can't provide Yubikeys to users, but it could be a worthwhile investment for about 50€.
After you have successfully enrolled in Duo and prepared your SSH Key, please send your key.
After you have successfully enrolled in Cisco Duo and prepared your SSH key pair, please send your _public_ key to us.
### 2.2 SSH access, keys and things
Quick summary, if you just need a reminder:
...
...
@@ -156,7 +156,7 @@ Ramses has currently two login servers available:
`ramses4.itcc.uni-koeln.de`
#### Login to `ramses1`
When logging in to **ramses1**, the public key you sent us is authenticated with your host's private key (1st factor, you will be asked for the ssh passphrase, unless you have ssh-agent configured as described above). If successful, a verification request is automatically pushed to the Duo-app on your device where you need to confirm the login (2nd factor).
When logging in to **ramses1**, the public key you sent us is authenticated with your host's private key (1st factor, you will be asked for the SSH passphrase, unless you have ssh-agent configured as described above). If successful, a verification request is automatically pushed to the Duo-app on your device where you need to confirm the login (2nd factor).
On your terminal you should see something like this:
