Project Accounts

Overview

Project accounts are designed to facilitate collaborative computing by allowing multiple users to use the same account.  All actions performed by the project account are traceable back to the individual who used the project account to perform those actions via gsisshd accounting logs. 

Requesting a Project Account

PI's, PI proxies and project managers are allowed to request a project account.  In NIM do "Actions->Request a Production Project" and fill in the form.  Enter your repository, the name you want for the account (8 characters maximum) and a description of what you will use it for and then click on "Request Project".  You will be notified as to whether or not your request is approved.  There is a limit of one project account per repository.

Managing Project Account Users

PI's, PI proxies and project managers are also allowed to manage their repo's project account users.  In NIM just do a quick search on the name of your project account and then use the "Grid Certificates" tab to enter the certificate info for the people who should have access to the project account.  To disable access for any user simply delete their certificate info.  Note that the grid-mapfile gets updated every 30 minutes so it takes a bit of time for changes to take effect.

Project Account Access

To access your project account with your doegrids certificate first login to a PDSF interactive node as yourself and then do the following commands:

module load osg
grid-proxy-init
/usr/common/nsg/gsissh/bin/ssh localhost -p 2222 -l <project account name>

Alternatively you can get a proxy using myproxy-logon instead of grid-proxy-init:

myproxy-logon -s nerscca.nersc.gov

In this case you use your NIM password instead of your GRID pass phrase.