Access & Setup

• Accessing the System
• Palo Alto VPN

Accessing the System

Requirements

• You must be a member of the power group
• Valid Tel Aviv University username and password
• If connecting from outside the TAU network: TAU VPN must be active

Login Node

All access to the cluster is via SSH through the login node:

slurmlogin.tau.ac.il

Your connection is automatically load-balanced across powerslurm-login, powerslurm-login2, and powerslurm-login3.

Connecting via SSH

ssh your_username@slurmlogin.tau.ac.il

With an SSH key:

ssh -i /path/to/your/private_key your_username@slurmlogin.tau.ac.il

Important

• Do not run compute jobs on the login node — use sbatch or srun
• The login node is shared — heavy processes will be killed

Palo Alto VPN

TAU uses Palo Alto GlobalProtect VPN with two-factor authentication (Google Authenticator).

Required if connecting to the cluster from outside the TAU network.

Enrollment

1. Go to https://mytau.tau.ac.il/GetResource.php and register your mobile phone
2. Install Google Authenticator on your mobile device
3. Scan the QR code provided during enrollment

Download

Download the appropriate version for your system:

• PanGPLinux-6.2.9-c4.tgz
• PanGPLinux-6.3.3-c22.tgz

Install

RHEL/Rocky/CentOS:

tar -xzf PanGPLinux-6.x.x-cx.tgz
yum localinstall GlobalProtect_UI_rpm-*.rpm

Debian/Ubuntu:

tar -xzf PanGPLinux-6.x.x-cx.tgz
dpkg -i GlobalProtect_UI_deb-*.deb

Configure

1. Open the GlobalProtect client
2. Enter gateway address: vpn.tau.ac.il
3. Log in with your TAU credentials
4. Enter the code from Google Authenticator when prompted

Troubleshooting: SSL Error on Ubuntu 22.04+

If you see an SSL error after connecting, apply this fix:

Open /usr/lib/ssl/openssl.cnf and add:

[openssl_init]
ssl_conf = ssl_sect

[ssl_sect]
system_default = system_default_sect

[system_default_sect]
Options = UnsafeLegacyRenegotiation

Restart the GlobalProtect app.