Overview

As an external NRC collaborator, you can access the AI for Design (Trixie) Cluster using the Bastion Host. External collaborators include non-NRC researchers, industrial partners, and vendors.

You can access only those folders on Trixie that are required for your project. Requests for access to Trixie and specific projects must be made by your NRC research contact; you cannot request access to a system yourself.

Once granted access, you will have two sets of credentials issued to access the cluster:

Account	Purpose	User name format (example: John Doe)
PUB	Provides access to the external bastion host and used for the LoginTC second factor authentication	A combination of your first and last name. E.g.: john.doe@pub.nrc-cnrc.gc.ca
Trixie System	Provides access to Trixie	admin.firstname.lastname E.g.: admin.john.doe

Your NRC contact, or an NRC system administrator, will provide you with the PUB and Admin user names and passwords that you require to access the NRC systems. Note that on first login, you will be required to change your password. Please note: during the password change, the first prompt asks for a confirmation of your existing password prior to requesting a new one.

LoginTC Application Setup

Before you attempt your first login, the following initial installation and configuration of LoginTC must be implemented.

• Upon user creation, you will receive an email to setup and initialize the LoginTC application (for iOS, Android, or the Chrome web browser) which is used as a second factor authentication into Trixie
• Set up LoginTC using the directions provided to you by email

Accessing Trixie with LoginTC 2-Factor Authentication

In order to access Trixie, you will need to use an SSH client. Please note that you cannot access Trixie using a web browser. On Mac OSX and Linux, SSH is installed by default. On Windows you will need to install Putty if it is not installed already. You can download Putty from the following website:

Putty Website

Initialize SSH Connection with Mac OSX / Linux

For Mac OSX and Linux you can open a new terminal and connect to trixie.nrc-cnrc.gc.ca via ssh using your PUB account and the following command

ssh -l <firstname.lastname>@pub.nrc-cnrc.gc.ca trixie.nrc-cnrc.gc.ca

Initialize SSH Connection with Windows

For Windows, you can create a Putty profile to SSH into the bastion server

Under Session

1. Set Host Name (or IP address): <firstname.lastname>@pub.nrc-cnrc.gc.ca@trixie.nrc-cnrc.gc.ca
2. Set Port: 22
3. Add a name for Saved Sessions – perhaps Bastion
   
   
4. Click Save

Once the settings have been saved, you can double click on the name in the list of Saved Sessions to open a session to the bastion server.

Logging in for the First Time

When you login for the first time you will be forced to change your password for both your Pub account and your Trixie admin account. Please note that when you do this, you will be prompted for your original (or current) password first and then you will be prompted to enter your new password twice.

In the following procedure, the information printed in the images may not be the same as what you will see when you login. However the steps will be the same.

Please perform the following steps to access Trixie.

1. When you login using one of the methods above, you will be prompted to authenticate with your LoginTC application. The message should appear as follows:
   
2. Press 1 followed by the Enter key and then check your LoginTC device as setup above to approve the login request
3. If a message similar to the one below appears, then simply type in yes to the prompt as shown below
   
4. After you complete the two-factor authentication process in LoginTC you will be prompted to enter your PUB account password and then you will be forced to change your password. You should see a message similar to the one below – remember to enter your original password first and then enter your new password twice.
   
5. The system will automatically log you out, thus, you will need to login again using your new password
6. Once you have successfully logged in, you will be logged into the bastion server – your screen should look similar to the following
   
7. If you have your credentials for the trixie.res.nrc.gc.ca server you can skip this step. Otherwise, you will now need to contact the administrator who provided you with your credentials for the bastion server to obtain your credentials for the Trixie server
8. You will need to login to Trixie next. From the bash prompt, use SSH to log into trixie.res.nrc.gc.ca with your Trixie admin.<firstname.lastname> account and password with a similar command as the following.
   ssh admin.<firstname.lastname>@trixie.res.nrc.gc.ca
9. If a message similar to the one below appears, then simply type in yes to the prompt as shown below
   
10. You will be prompted to enter your Trixie admin account password and then you will be forced to change your password. You should see a message similar to the one below – remember to enter your original password first and then enter your new password twice.
    
11. The system will automatically log you out, thus, you will need to login again using your new password
12. Once you have successfully logged in, you will be logged into Trixie – your screen should look similar to the following
    

After successful authentication, you should see the Trixie cluster login banner with terms and be placed in a shell in your home directory on the cluster, similar to the image above.

Note that you will be placed in your home directory which only you have access to. For more information on the cluster and its usage, please see the:

Home Page

Changing passwords

Passwords on the PUB and RES accounts expire after 90 days and must be changed.If you do not change your password, you will be locked out of the system.

Watch for the pop-up message notifying you to change your password, or set yourself a reminder to change your password before the 90-day expiry.

If you get locked out of your account due to an expired password for any account, notify your NRC contact who can have the password reset.

Change Your PUB Password

You can change your PUB password by logging into the following website. The site allows you to manage your PUB account. Please use the following format for your username john.doe@pub

PUB Account Management

Please note that the Reset Password feature will not work if you do not fill in the security questions on the website. Therefore it is strongly recommended that you fill in the security questions so that you can reset your password if necessary.

Change Your Admin Password via Linux Terminal

1. Ensure you are logged into the Trixie server (trixie.res.nrc.gc.ca)
2. Type passwd then hit Enter
3. You will be prompted for your original (or current) password first and then you will be prompted to enter your new password twice. You should see a message similar to the one below – remember to enter your original password first and then enter your new password twice.
   
   
4. The system will automatically log you out, thus, you will need to login again using your new password

Related Topics

External Access Advanced Configuration

File Transfers