# Access & Setup

How to connect to the HPC cluster and set up your environment.

# Accessing the System

## Requirements

- You must be a member of the **power** group
- Valid Tel Aviv University username and password
- If connecting from outside the TAU network: [TAU VPN](https://dev.hpcguide.tau.ac.il/books/getting-started/page/palo-alto-vpn "Palo Alto VPN") must be active

## Login Node

All access to the cluster is via SSH through the login node:

```bash
slurmlogin.tau.ac.il
```

Your connection is automatically load-balanced across **powerslurm-login**, **powerslurm-login2**, and **powerslurm-login3**.

## Connecting via SSH

```bash
ssh your_username@slurmlogin.tau.ac.il
```

With an SSH key:

```bash
ssh -i /path/to/your/private_key your_username@slurmlogin.tau.ac.il
```

## Important

- Do **not** run compute jobs on the login node — use `sbatch` or `srun`
- The login node is shared — heavy processes will be killed

# Palo Alto VPN

TAU uses Palo Alto GlobalProtect VPN with two-factor authentication (Google Authenticator).

Required if connecting to the cluster from outside the TAU network.

## Enrollment

1. Go to [https://mytau.tau.ac.il/GetResource.php](https://mytau.tau.ac.il/GetResource.php) and register your mobile phone
2. Install **Google Authenticator** on your mobile device
3. Scan the QR code provided during enrollment

## Download

Download the appropriate version for your system:

- [PanGPLinux-6.2.9-c4.tgz](https://hpcguide.tau.ac.il/attachments/2)
- [PanGPLinux-6.3.3-c22.tgz](https://hpcguide.tau.ac.il/attachments/1)


## Install

**RHEL/Rocky/CentOS:**

```bash
tar -xzf PanGPLinux-6.x.x-cx.tgz
yum localinstall GlobalProtect_UI_rpm-*.rpm
```

**Debian/Ubuntu:**

```bash
tar -xzf PanGPLinux-6.x.x-cx.tgz
dpkg -i GlobalProtect_UI_deb-*.deb
```

## Configure

1. Open the GlobalProtect client
2. Enter gateway address: **vpn.tau.ac.il**
3. Log in with your TAU credentials
4. Enter the code from Google Authenticator when prompted

## Troubleshooting: SSL Error on Ubuntu 22.04+

If you see an SSL error after connecting, apply this fix:

Open `/usr/lib/ssl/openssl.cnf` and add:

```
[openssl_init]
ssl_conf = ssl_sect

[ssl_sect]
system_default = system_default_sect

[system_default_sect]
Options = UnsafeLegacyRenegotiation
```

Restart the GlobalProtect app.