FAQ: Computers & Computing
Question:
Do I need a computer account?
Answer:
Yes. We really think you do. Unix and Windows. Getting an exchange account (i.e. slac email address) is optional and if you do, please remember to check it or set up an auto-forward to an account you do check.
Question:
When should I get a computer account?
Answer:
We would like to urge people to get computer accounts BEFORE arriving at SLAC. They are necessary for accessing data and the FACET e-log. It can take some time so please don't leave it until you actually need to use it!
Question:
How do I get a SLAC Computer Account?
Answer:
Please follow the Computing Account step as described here:
https://facet-ii.slac.stanford.edu/user-resources/registration
Email your information as requested to Christine cclarke@slac.stanford.edu.
Once you have a computer account, you can also access your training assessment to keep track of the training you have allocated and their due dates.
https://www-internal.slac.stanford.edu/esh-db/training/slaconly/bin/ETA_ReportAll.asp?opt=6
Please note that once you have your computer account, you have to complete a Cyber Security Basics Training course within 5 days: Course CS100 - Cyber Security Training for Lab Users or Course CS200 - Cyber Security Training for Employees (if you are a SLAC employee) . Failure to do so will result in the account being disabled.
This cyber security course must be taken every year to keep the account active. Failure to keep this training up-to-date will lead to computer account deletion (all data in the account will be lost).
Question:
How do I get a VPN account?
Answer:
Windows accounts should be automatically enabled for VPN.
If you don't have a Windows account, please follow Step 5 in the instructions here.
If you already have a Windows account but it isn't enabled for VPN, go here.
Question:
How do I get permission to access the control system for FACET (i.e. get added to fphysics)?
Answer:
If you would like to get access to FACET control system, for example to pull up the facethome control panel, you need to do the following...
1) Get a SLAC unix account.
2) Generate a public rsa key on your SLAC unix account.
$ ssh-keygen -t rsa
(Then hit return three times)
3) Send email to: controls-system-admins@slac.stanford.edu confirming you've generated your SSH key and copy Christine Clarke.
Give your SLAC unix account name in this email.
Christine will confirm to the controls-system-admin that you need access to FACET servers to do your work. (She may need to get in touch with you to verify that this is indeed the case as not all users need access to FACET servers.)
Once you've done this, the control-system-admin will grab your RSA key from your unix account and grant you access permission to ssh into the FACET server.
Question:
How do I access the control system / facethome?
Answer:
You need an account under fphysics to do this. See the other FAQ entry.
Once you have an account under fphysics...
Log into mcclogin.slac.stanford.edu with your usual unix account. (Mcclogin is inside the SLAC firewall. If you are outside of SLAC, you can use fastx or ssh to a gateway machine such as rhel6-64.slac.stanford.edu or you need to have VPN running. And then you can ssh to mcclogin! See some other FAQ entries for how to connect to remotely)
user@mcclogin $ ssh fphysics@facet-srv01
Choose 0 for no profile if your name does not appear on the list. Otherwise, choose the number by your name.
[fphysics@facet-srv01 ~ ]$ facethome &
Question:
How can I connect remotely?
Answer:
The IT department have put together this "Remote Worker's Toolkit" which looks like it addresses every issue - DUO, VPN and SSH. Note that Citrix might not automatically be enabled for your computing account.
FastX is a modern solution for displaying remote Linux applications (X Clients) on your desktop or laptop. FastX gives you the option of using any standard web browser to connect to your remote Linux sessions. There is also a desktop application.
Information about FastX can be found at the following URL:
https://fastx.slac.stanford.edu:3443
SLAC FastX documentation is here: https://confluence.slac.stanford.edu/pages/viewpage.action?pageId=205985167
We recommend FastX. From the FastX remote desktop, you can launch a terminal from which to ssh through to mcclogin if you want to access the controls network. You can also launch a browser window and access internal-only resources such as the e-logs.
Otherwise, you can use a linux gateway:
xterm -e ssh rhel6-64.slac.stanford.edu
Question:
How do I connect from off-site with limited bandwidth?
Answer:
We recommend FastX.
Information about FastX can be found at the following URL:
https://fastx.slac.stanford.edu:3443
SLAC FastX documentation is here: https://confluence.slac.stanford.edu/pages/viewpage.action?pageId=205985167
Please send in a request to ithelp@slac.stanford.edu if you encounter an issue.
Question:
What linux machines can I ssh to off-site?
Answer:
https://confluence.slac.stanford.edu/display/SCSPub/Home
Question:
What firewall controls are there between SLAC and the outside world?
Answer:
The network firewall controls certain types of connections between SLAC buildings and the Internet.
Details are here:
https://confluence.slac.stanford.edu/pages/viewpage.action?pageId=213884374
For the majority of people, these controls are totally fine! You can ssh and ping from the outside to machines in SLAC buildings and essentially all the usual outgoing traffic is permitted.
However, some developers who write programs which access resources on the Internet via non-standard protocols, or those who access SLAC resources using non-standard applications from external locations, may need to get additional applications or ports onto the approved list.
If you are concerned, please discuss this with your facility point of contact and allow for some addtional time in setting up computers on the building networks.
Question:
What do I do if I forget my computing account details or get locked out of my account?
Answer:
For windows and unix account details (VPN is the same as windows), please email ithelp@slac.stanford.edu or go to B050 computing help-desk.
If your account is disabled because you missed the deadline for the Cyber Security training (see the separate FAQ item on this training), complete the training before contacting the ithelpdesk. They will not restore your computing account until the training has been completed.
After you have completed the Cyber Security training. your SLAC Windows account will be automatically re-activated within 24 hours. Alternately, you may send a copy of your training certificate to ithelp@slac.stanford.edu during IT Help Desk working hours to have your account manually re-enabled.
The it help desk will also help with forgotten passwords.
IT Help Desk Contact Information
ithelp@slac.stanford.edu
+1 650.926.4357
Monday through Friday, 7 am to 5 pm
Question:
What is Cyber Security training and how often is the refresher?
Answer:
If you are not a lab employee, complete the following training within 5 days of being given your computing account:
Course CS100 - Cyber Security for Laboratory Users Training
This course must be taken every year to keep the account active.
SLAC employees should take Course CS200.
SLAC Cyber Security Training is required to maintain a SLAC computer account. If you do not complete the training within 31 days of its due date, access to your SLAC computer account will be blocked. You will not be able to log in again until after you complete the required training.
How to Complete SLAC Cyber Security Awareness Training:
If you are using a computer issued by SLAC Computing or are using VPN, you can click the blue Launch Web Course button on this page: https://www-internal.slac.stanford.edu/esh-db/training/slaconly/bin/cata...
Otherwise:
Go here to complete the web based training: http://training.slac.stanford.edu/web-training.asp
You can use your Windows computer account. If you cannot use your Windows account, you can use your SLAC ID# (found by searching for your name in the SLAC Phone Directory) and the password for the training is slac2005
When the course is completed, credit for completing the course will be downloaded into the SLAC training database. There is a test at the end of this course, and typically a passing grade of 80% or better is required to receive credit.
NOTE: We recommend you save a copy of your certificate of successful completion at the end of all online trainings modules
Question:
How do I keep my computing accounts active?
Answer:
A SLAC windows computing account will automatically deactivate if it is not used. A user needs to login at least once every two months. We recommend that you login once a month so there is little risk of the account getting deactivated.
Please let me know if you have any questions.
"Log in" means to a SLAC managed machine. If you are offsite, this will be a remote desktop. There is a remote workers toolkit and Linux server information. Also, you could just login to your Office365 webmail if you have a windows email account. You can login to the web browser. (Note though that if you have a unix mailbox or just have a forwarding SLAC email in place, then you will not have access to Office365).
It will also automatically deactivate if the cyber security training is out of date. The cybersecurity training needs to be taken every year. If you don't have a SLAC email address you may not get notification of this. You should be able to check the training status in the user portal though.
Finally, you also need to change your passwords every 6 months.
Question:
What are the contact details for the IT help desk?
Answer:
