From Naf-Wiki
Jump to: navigation, search

NAF Login and WGS

Each experiment has several WGS (work-group-server) for interactive work. The current list (4.4.2014) is the following


Host OS
nafhh-atlas01 SL 6.5
nafhh-atlas02 SL 6.5
nafhh-atlas03 SL 6.5
nafhh-atlas04 SL 6.5
nafhh-atlas05 SL 5.9
nafhh-atlas06 SL 5.9


Host OS
nafhh-cms01 5.8
nafhh-cms02 5.8
nafhh-cms03 6.5
nafhh-cms04 6.5
nafhh-cms05 5.10
nafhh-cms06 5.10


Host OS
nafhh-ilc01 5.8
nafhh-ilc02 6.5


Host OS
nafhh-lhcb01 6.4


Host OS
nafhh-belle01 6.5
nafhh-belle02 6.5

You can directly login to an host using ssh, e.g.: ssh

All the usual tips and tricks related to ssh (and kerberized ssh) apply. Use your preferred search engine or man ssh to find out. (Hint: Users might want to document them here:-) )

Using Kerberos

If you wish to use kerberos (kinit), you need these lines (possible not all of them) in your kerberos configuration (/etc/krb5.conf):

  DESY.DE = {
    kdc =
    kdc =
    kdc =
    admin_server =
    default_domain =
  IFH.DE = {
    kdc =
    admin_server =
    default_domain =
    krb4_get_tickets = false
    kdc = ADC11.WIN.DESY.DE
    kdc = ADC12.WIN.DESY.DE
    kdc = ADC13.WIN.DESY.DE
    kdc = ADC14.WIN.DESY.DE
    kdc = ADC15.WIN.DESY.DE
    admin_server = ADC11.WIN.DESY.DE
    default_domain = WIN.DESY.DE
    v4_instance_convert = {
      desy =
       win.desy =
    kdc =
    default_domain =
[domain_realm] = DESY.DE = NAF.DESY.DE = WIN.DESY.DE = IFH.DE

Then you can use it via

kinit -f username@DESY.DE

Usage of WGS

Be reasonable when you use the WGS. No technical resource control happens on the WGS ... so be careful and nice to your colleagues that also want to use ressources on the WGS. As a rule of thumb, use the WGS for development, short (<10min) test jobs, graphical things, ... Do not use the WGS for longer lasting processes, or processes that do not require interactive return. Such processes are best placed onto the batch system - which has much more ressources and resource control mechanisms.

(We check WGS on a daily basis, and if we find long running jobs or jobs consuming huge amounts of memory, we write an automated email.)

NAF Remote Desktop

also know as Live-Server, or NX-like Server ... are described here