Single Sign-on from Your Windows Desktop

Using GSI-SSHTerm, you can connect to multiple resources on the TeraGrid after logging in once. This Java-based terminal uses MyProxy and GSI-enabled SSH to create a single sign-on session, in which you can open windows to other resources without re-entering a password. There are several methods for launching GSI-SSHTerm, depending on your preferences. They all accomplish the same thing and use a customized GSI-enabled terminal window for your Windows machine. This page guides you through each option. Regardless of the GSI-SSHTerm option you choose, you must have Java SDK 1.5 or higher installed to run the application.

• Run from inside the User Portal via your browser
• Download, install, and run a stand-alone application
• Launch from your browser using a Java Web Start version that then runs independently of your browser
• Run inside your web browser with a Java applet

GSI-SSHTerm stores your proxy certificate locally on your personal computer. Therefore, regardless of the initial launching method you choose below and indeterminate of any subsequent launching method, you will be able to connect to additional resources without needing to supply login information again.

Warning:Don't get confused by the application names for running from your desktop. The "download" and "launch" methods are both referred to as webstart because of their underlying technology. The method to run from inside your browser is referred to as an applet. Screenshots to clarify are included below.

GSI-SSHTerm from the TeraGrid User Portal

This is the most convenient method to use GSI-SSHTerm. Once you log in to the portal, you don't have to supply your login information again to connect to a machine. In addition, documentation, your usage information, file transer applications, and ticket submission are all easily available from the portal interface. (See the portal for browser requirements.)

• Log in to the portal
• Go to My TeraGrid tab >> SSH Terminal
• Connect to desired machine; no password required

image

Stand-Alone Application: Download & Install

1. Go to the GSI-SSHTerm page at NCSA.
2. In the top box, labelled Use credentials at myproxy.teragrid.org, select Java Web Start Version. (Do not use the ncsa.uiuc.edu credential.)

   image

3. Save to your computer. If you already have the .jnlp extension mapped to another application, clicking on the link will cause your computer to try to run the application instead of saving it. Right-Click if this occurs.
4. Click on the application (teragrid.jnlp) from the location where you saved it.
5. Verify that you wish to run it when dialog boxes pop up.
6. When the term window appears, go to File >> New Connection and supply the machine name.

   image

7. Supply your TeraGrid-Wide/Portal login when requested.

Stand-Alone GSI-SSHTerm: Launch from Browser Shortcut

This method uses Java Web Start to launch GSI-SSHTerm, which then runs independently of your browser. No downloading or installing is necessary.

1. Go to the GSI-SSHTerm page.
2. In the top box, labelled Use credentials at myproxy.teragrid.org, click Java Web Start Version. (Do not use the ncsa.uiuc.edu credential.)

   image

3. Choose Open File.
4. Verify that you wish to run it when dialog boxes pop up. The application will launch and it will save a shortcut to the Web Start version for future use.
5. When the term window appears, go to File >> New Connection and supply the machine name.

   image

6. Supply your TeraGrid-Wide/Portal login when requested.

Run GSI-SSHTerm Inside Your Web Browser

The Java applet version of GSI-SSHTerm runs in your browser; closing your browser will terminate your connection. It still creates the same certificate proxies on your local machine.

1. Go to the GSI-SSHTerm page at NCSA.
2. In the top box, labelled Use credentials at myproxy.teragrid.org, click the Java Applet.

   image

3. Wait for your browser to load the Java Applet. This option runs a little more slowly than the other options.
4. Since the application accesses your local file system, it is digitally signed. You will need to verify that you wish to run the application.
5. When a term window appears, choose New Connection from the File menu.
6. Type in a hostname of the TeraGrid resource you are choosing.

   image

7. A small window appears asking for your username and password to myproxy.teragrid.org. Use your TeraGrid-wide username and password. This is the same as your TeraGrid Portal username and password.
8. When the certificate proxies are all downloaded and stored on your computer, the connection to the TeraGrid resource you chose will complete.

Opening Multiple Windows with GSI-SSHTerm

To open another session, double-click the stand-alone application, launch the Java Web Start version, or open a new browser window and run the Java applet. Choose New Connection from the File menu and type in the hostname. Because the certificate proxies are stored locally on your machine, you will login automatically.