About the facility migration to the SDCC Kerberos5 realm, and the Identity, Policy, and Audit (IPA) management system for authentication and authorization

On December 11, 2018, at 10:00 AM EST, the SDCC/RACF moved our password-protected systems and services to a new, unified authentication system: IPA.  In order to access facility services, users will need to register a password in the new IPA authentication system if they have not done so already

Information about SFTP Gateways

Users should connect to sftp.sdcc.bnl.gov in order to access the SFTP gateways and transfer files. 

There are many graphical clients available, such as WinSCP and Cyberduck, that users can download and install. 

Information on the SSH Gateways at the SDCC

The SSH gateways at the SDCC are the primary "doors" into the SDCC facility. They are only to be used to gain access to the facility, and are not designed for data transfers or interactive sessions. Once you have logged into an SSH gateway, you can continue your connection through to another internal system via SSH. The legacy RHIC and US ATLAS SSH gateways have been deprecated and consolidated into the single set of SDCC SSH gateways.

To view the key associated with your account you can visit this page: https://web.sdcc.bnl.gov/Facility/SshKeys/ViewSshKey.php

To upload a new key visit this page: https://web.sdcc.bnl.gov/Facility/SshKeys/UploadSshKey.php

How to generate SSH key pairs

SSH keys are generated using the ssh-keygen program on Linux/Unix/ MacOS/Cygwin, or with PuTTYgen on Windows. For Windows users please go here

Please ensure that the 'Number of bits in a generated key' is 2048 or larger or your key will be rejected.