Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Panel

Step 2: Become authorized to connect to the LCLS control system

First you must generate an ssh key; click here for instructions.

You will need to become a member of one of the following shared accounts in order to gain access to the LCLS control system:

LCLS

Shared Account

FACET

Shared Account

ASTA UED & DEV

Shared Account



Type of User

physics

LCLS physicists

lclsops

LCLS operators

acclegr

engineers, maintenance, etc.

iocegr

software developers

fphysics

use your unix account

physicists account

lclsops

facetops

use your unix account

Operators account

acclegr

facclegr

use your unix account

engineers, maintenance

softegr

fsoftegr

use your unix account

software developers

epicsioc

fepicsioc

n/a

deactivated account

epicsmgr

fepicsmgr

n/a

EPICS manager account

laci

faci

acctf

Start/stop processes

Send email to Ken Brobeck informing him that you have generated your ssh key, and request that he add you to one of the shared acocunts listed above.

...

Panel

Step 4: Configure SecureCRT

After installing SecureCRT, follow these instructions to configure it.

1. Enable forwarding of displays
Open SecureCRT
Close the Connect window
In the Options menu, select Global Options
Click Default Session
Click Edit Default Settings button
Click Remote/X11
Check Forward X11 packets box
Click OK
Click Yes
Click OK

2. Map delete keys and copy select
Click Default Session
Click Edit Default Settings button
Click Mapped Keys
Check Backspace send delete
Check Delete sends backspace
Click OK
Click Terminal
Check Copy on select
Check Paste on middle button
Click OK

3. SSH2 Authentification
Open SecureCRT
Close the Connect window
In the Options menu, select Global Options
Click Default Session
Click Edit Default Settings button
Click SSH2
Check GSSAPI and move up to top of Authentification list
Highlight GSSAPI, and click Properties
Select Method Auto Detect and Delegation Full, Click OK
Check Kerberos under Key exchange
Check Kerberos w/Group Exchange under Key exchange
Check diffie-hellman-group under Key exchange
Check diffie-hellman-group14 under Key exchange
Check diffie-hellman under Key exchange
Click OK
Click Yes
Click OK

4. Create a profile to connect to lcls-prod02mcclogin
Click the Connect icon (the leftmost icon at the top of the SecureCRT window)
Click the New Session icon (the third icon from the left in the Connect window)
Click Next
For Hostname, enter lcls-prod02mcclogin.slac.stanford.edu
For Username, enter your Unix account name
For Session name, type lcls-prod02 mcclogin
Click Finish

LCLS Home Short-Cuts

Panel

Step 5 (optional): Set up one-click access to LCLS Home (from SLAC network)

These instructions will automate step 5, allowing you to load LCLS Home very easily using SecureCRT.

Open SecureCRT
In the Connect window, click the New Session icon (the third icon from the left)
Click Next
For Hostname, type lcls-prod02mcclogin.slac.stanford.edu
For Username, enter your Unix account name
Click Next
For Session name, type LCLS Home (SLAC network)
Click Finish
Right-click LCLS Home (SLAC network) and select Properties
Click Logon Scripts
Check Automate logon box
Uncheck Hide box
For the first Expect line, type lcls-prod02 $  $mcclogin
For the first Send line, type ssh physics@lcls-srv02 or  or lclsops@lcls-srv02 or acclegr@lcls-srv02, depending on which group account you were added to in Step 2
For the second Expect line, type ]:
For the second send line type the profile number, such as 0
For the third Expect line, type ~UWC_TOKEN_START~1288207725688~UWC_TOKEN_END~
For the third Send line, type lclshome
Click OK

Now when you load SecureCRT and click LCLS Home (SLAC network), LCLS Home will load automatically.

Panel

Step 6 (optional): Set up one-click access to LCLS Home (from offsite)

These instructions will automate step 5, allowing you to load LCLS Home very easily using SecureCRT.

Open SecureCRT
In the Connect window, click the New Session icon (the third icon from the left)
Click Next
For Hostname, type floramcclogin.slac.stanford.edu
For Username, enter your Unix account name
Click Next
For Session name, type LCLS Home (offsite)
Click Finish
Right-click LCLS Home (offsite) and select Properties
Click Logon Scripts
Check Automate logon box
Uncheck Hide box
For the first Expect line, type $
For the first Send line, type ssh lcls-prod02mcclogin
For the second Expect line, type lcls-prod02 mcclogin $
For the second Send line, type ssh physics@lcls-srv02 or lclsops@lcls-srv02 or acclegr@lcls-srv02, depending on which group account you were added to in Step 2
For the third Expect line, type ~UWC_TOKEN_START~1288207725689~UWC_TOKEN_END~
For the third Send line, type lclshome
Click OK

Now when you load SecureCRT and click LCLS Home (offsite), LCLS Home will load automatically.

...

Panel

If you cannot bring up the lclshome from a SecureCRT window

  1. double check the X11 forward has been set.
  2. See Step 4.1 above.

If the error message when trying to bring up lclshome is something like

physics@lcls-srv02 $ Xlib: connection to "localhost:12.0" refused by server
Xlib: Invalid MIT-MAGIC-COOKIE-1 key
xterm Xt error: Can't open display: localhost:12.0

  1. Verify that you've implimented Step 4.3

If you still cann't bring up lclshome

  1. Verify that you have X-Win32 running. You should see an X icon on the menu bar. If the X-Win32 icon isn't there, then start X-Win32 and try to bring up lclshome again.

If you are still having trouble.

  1. Use the SSH2 program Putty and SSH to lcls-prod02mcclogin
  2. Bring up an xterm on lcls-prod02 mcclogin by typing "xterm &"

If an xterm appears. then the problem is with the SecureCRT setup, and you will need to contact your desktop admin.
If an xterm does not appear, then the problem is more than likey likely a security (firewall) issue and you will need to contact your desktop admin.