How to get an account on CMS machines and Kerberos tricks



Anyone doing CMS analysis or software development tasks can get an account on the CMS machines. A good starting point about CMS computing is the CMS web site you are reading. More information about general accounts at Fermilab can be found at the Computing Division's web site. Note: If you already have a CMS account but have no kerberos principal and cryptocard, please go to Step 3 directly and do so as soon as possible.

You need to follow these steps to get a CMS account (you may skip to Step 2 or 3 if you already have a valid ID or account):




Step 1 Get a Valid Fermilab ID

To get an account, first check that you have a valid Fermilab ID or Visitor ID (VID). If you already have a valid VID skip to the next step. If you don't, or have an XID (external ID) or your VID expired, please apply for a new VID.

If you are at Fermilab, or will come here soon, go to the Fermilab Users' Office and get a VID. Otherwise, you have to fill a Users' Office Identification Verification Form (PS) (HTML). Please use the PS form if you can.

The form must be filled out and signed by you. Please fill out as much as you can, leaving any parts that are specific to on-site visitors blank. Then fax the form to Hans Wenzel at (630)840-2783. You will receive an acknowledgement from Hans once you have been assigned a VID.


Step 2. Get a fnalu account and CMS account

If you already have an account on fnalu skip to the next paragraph. Otherwise, you can apply for an account on the central fnalu cluster via a Computer Account Request Form. Where it asks for Supervisor/Spokesperson, list Dan Green (E-mail address: dgreen@fnal.gov). Near the bottom of the form, choose fnalu.

Once you get an fnalu account, email wenzel@fnal.gov to request an account on the cms machines.

But this is not over yet....


Step 3. Get a Kerberos principal and cryptocard


The final step would be to get a kerberos principal and cryptocard. Since Fermilab has been fully kerberized since the end of 2001, this is the only way to access your account. For further information about the Fermilab Kerberos implementation, please read the Strong Authentication at Fermilab Documentation. You need fill in a form called "Form to Request Kerberos Principal and/or Related Items".

You will receive an e-mail when the cryptocard is available, then you have to call Yolanda Valadez at (630)840-8118 to get the kerberos principal password. Hans will take care of shipping the cryptocard which will be the only way to access Fermilab computers from outside machines without kerberos software on them.


Step 4. Information for first-time CMS account users


After you get your CMS account and cryptocard, the first thing you may want to do is to modify your startup file after you log in. This is essential if you plan to use CMS software (the reason why you want to get a CMS account! :). If you use csh or tcsh, please put the following lines in your .cshrc file:

****************************************

# Get ups environment, and then setup the shrc product
#
if ( -f "/afs/fnal.gov/ups/etc/setups.csh" ) then
        source "/afs/fnal.gov/ups/etc/setups.csh"
endif

if ( { ups exist shrc } ) then
    setup shrc
endif

#setup cms environment
source /afs/fnal.gov/files/code/cms/setup/cshrc

#setup access to objectivity
source /afs/fnal.gov/files/code/cms/utils/objyenv.csh 6.0

*****************************************
On cmsun1, put the following two lines into your startup file before setting up the cms environment:

*****************************************

#to get gmake
setup gtools

#to sccess cvs
setup cvs

******************************************

If you have any questions, or need additional support with this, please e-mail: cms_computing@fnal.gov or helpdesk@fnal.gov

Last Update: February 22, 2002
Yujun Wu