NERSCPowering Scientific Discovery Since 1974

Project Accounts

Overview

Project accounts are designed to facilitate collaborative computing by allowing multiple users to use the same account.  All actions performed by the project account are traceable back to the individual who used the project account to perform those actions via gsisshd accounting logs. 

Requesting a Project Account

Please note: the method described below is currently unavailable.  To request a project account please send an email to consult@nersc.gov describing your needs.

PI's, PI proxies and project managers are allowed to request a project account.  In NIM do "Actions->Request a Project Account" and fill in the form.  Select the repository that the Project Account is to use from the drop-down menu, "Sponsoring Repository". Enter the name you want for the account (8 characters maximum) and a description of what you will use the account for and then click on the "Request Project Account" button.  You will be notified by email as to whether or not your request is approved.  There is a limit of one project account per repository.

Managing Project Account Users

PI's, PI proxies and project managers are also allowed to manage their repo's project account users.  In NIM just do a quick search on the name of your repository and then click on the "Project Access" tab. Under the section on "Assign Project Access Privs to a User", select the username and Certificate DN for the people who should have access to the project account. They will then appear under the "Authorized Users List" section. To disable access for any user simply delete their certificate info by clicking on the "Remove" button.  Note that the grid-mapfile gets updated every 30 minutes so it takes a bit of time for changes to take effect.

Project Account Access

To access your project account login to "carvergrid.nersc.gov" as yourself and then run the following commands:

ssh carvergrid.nersc.gov
export GLOBUS_LOCATION=/usr/common/osg/gsissh/globus
source /usr/common/osg/gsissh/globus/etc/globus-user-env.sh
myproxy-logon -s nerscca.nersc.gov # [Enter your NIM password for the MyProxy pass phrase]
 
gsissh localhost -p 2222 -l <project account name>