Access Restrictions and Password Requirements

Many maintainance operations require special privileges. Some of these are described below.

Logging in to the glast account on glastlnx*

Many maintainance operations require logging in as glast on one of the glastlnx* boxes.

To Do We should add some documentation on the new AFS based system for logging in as glast.

Escrow

The Unix escrow command allows passwords to be accessed by authorized users.

To Do We should add some documentation here.

VPN

Many monitoring operations are inaccessible from outside of SLAC since the required access is blocked at the SLAC firewall for security reasons. If you are off-site and want to perform one of these operations you will need to get your SLAC account VPN enabled, and then use VPN to connect to SLAC before performing the operation. 

Some instructions exist for doing this for windows XP. 

• VPN on Windows XP (see Configuring PPTP/VPN on Windows XP)
• Also see: VPN via Microsoft Point to Point Tunneling Protocol

It is also simple to set up VPN from Linux or Mac OSX but we do not currently have any instructions for doing so.

Root Access on glastlnx* servers

If root access is required to fix a problem, contact: Navid Golpayegani or unix-admin.