Using Multi-factor Authentication
To improve security, access to certain clusters (currently Ruddle, Farnam and Milgram) requires both a public key and multi-factor authentication (MFA). We use the same MFA (Duo) as is used elsewhere at Yale. To get set up with Duo, see these instructions.
Once you've set up Duo and your key is registered, you can finally log in. Use ssh to connect to your cluster of choice, and you will be prompted for a passcode or to select a notification option. We recommend choosing Duo Push, option 1.If you chose this option you should receive a notification on your phone. Once approved, you should be allowed to continue to log in.
You can set up more than one phone for Duo. For example, you can set up your smartphone plus your office landline. That way, if you forget or lose your phone, you can still authenticate. For instructions on how to add additional phones go here.
Using File Transfer Clients and Duo MFA
Some file transfer clients attempt new and sometimes multiple concurrent connections to transfer files for you. Whe this happens you will be asked to Duo authenticate for each connection. Here are some application-specific tips on how to avoid having to authenticate for each new connection:
File->SiteManager New Site In host (new site will be highlighted, change to your cluster name) In the general tab on the right side, put: Host: yourcluster.hpc.yale.edu Change protocol to SFTP set login type to Ask for password set user to your netid Go to transfer settings tab check limit number of simultaneous connections Make sure maximum is 1 click ok Now to connect, file->sitemanager select the site you created click connect
Here are some alternatives programs that reuse the login:
- Windows: WinSCP
- Mac: Cyberduck
If you are having problems initially registering Duo, please contact the Yale ITS Helpdesk.
If you have successfully used MFA connect to a cluster before, but cannot now, first please check the following:
- verify that your ssh client is using the correct login node
- verify you are attempting to connect from a Yale machine or via the proper VPN
If all of this is true, please contact us. Include the following information (and anything else you think is helpful):
- Your netid
- Have you ever successfully used ssh and Duo to connect to a cluster?
- How long have you been having problems?
- Where are you trying to connect from? (fully qualified hostname/IP, if possible)
- Are you using a VPN?
- What is the error message you see?