I get the SSH connection error "Permission denied (public key)," error message.
If you cannot connect to an HPC cluster and
If you connect to one of the HPC@UCD clusters and are asked for a password (as distinct from a passphrase for your key) or get the SSH connection error "Permission denied (public key)" , your key is not being recognized.
This is usually because of permissions or an unexpected filename. SSH expects your key to be one of a specific set of names. Unless you have specified something other than the default, this will probably be $HOME/.ssh/id_rsa.
If you specified a different name when generating your key, you can specify it like this:
ssh -i $HOME/.ssh/newkey [USER]@[cluster].hpc.ucdavis.edu
If you kept the default value, your permissions should be set so only you can read and write the key (-rw------- or 600). To ensure this is the case, you can do the following:
chown 600 $HOME/.ssh/id_rsa
On HPC2, your public key is kept in $HOME/.ssh/authorized_keys. Please make sure to not remove your key from this file. Doing so will cause you will lose access.
Kerberos and GSSAPI
If you are trying to use a key to access LSSC0 or any of the Genome Center login nodes, SSH keys will not work, but there is another method.
To enable logins without a password, you must enable GSSAPI, which some systems enable by default. If not enabled, add the following to your $HOME/.ssh/config file (create it if it doesn't exist):
GSSAPIAuthentication yesGSSAPIDelegateCredentials yes
The -K command line switch to ssh does the same thing on a one-time basis.
Once you have GSSAPI enabled, you can get a Kerberos ticket using
kinit [USER]@GENOMECENTER.UCDAVIS.EDU
SSH will use that ticket while it's valid.
How do I send my updated/new public key?
You can resend the new public key using the link below for the HPC@UCD clusters:-
https://hippo.ucdavis.edu/clusters
My PI has not received any email to approve my account request.
Your PI should check the Spam/Junk folder in the mailbox; if the link wasn't received, the PI can use the following link to see the pending requests and approve them:-
For the Farm cluster PIs, check the link below:
https://hippo.ucdavis.edu/Farm/approve
For the Peloton cluster PIs, check the link below:
https://hippo.ucdavis.edu/Peloton/approve
For the Franklin cluster PIs, check the link below:
https://hippo.ucdavis.edu/Franklin/approve