I keep getting the ssh connection error "Permission denied (public key)" error message.

I get the SSH connection error "Permission denied (public key)," error message.

If you cannot connect to an HPC cluster and 

If you connect to one of the HPC@UCD clusters and are asked for a password (as distinct from a passphrase for your key) or get the SSH connection error "Permission denied (public key)" , your key is not being recognized. 
This is usually because of permissions or an unexpected filename. SSH expects your key to be one of a specific set of names. Unless you have specified something other than the default, this will probably be $HOME/.ssh/id_rsa.

If you specified a different name when generating your key, you can specify it like this:

ssh -i $HOME/.ssh/newkey [USER]@[cluster].hpc.ucdavis.edu

If you kept the default value, your permissions should be set so only you can read and write the key 
(-rw------- or 600). To ensure this is the case, you can do the following:

chown 600 $HOME/.ssh/id_rsa

On HPC2, your public key is kept in $HOME/.ssh/authorized_keys. Please make sure to not remove your key from this file. Doing so will cause you will lose access.

Kerberos and GSSAPI


If you are trying to use a key to access LSSC0 or any of the Genome Center login nodes, SSH keys will not work, but there is another method.

To enable logins without a password, you must enable GSSAPI, which some systems enable by default. If not enabled, add the following to your $HOME/.ssh/config file (create it if it doesn't exist):

GSSAPIAuthentication yes
GSSAPIDelegateCredentials yes

The -K command line switch to ssh does the same thing on a one-time basis.

Once you have GSSAPI enabled, you can get a Kerberos ticket using

kinit [USER]@GENOMECENTER.UCDAVIS.EDU
SSH will use that ticket while it's valid.

How do I send my updated/new public key?
 

You can resend the new public key using the link below for the HPC@UCD clusters:-
https://hippo.ucdavis.edu/clusters

 

My PI has not received any email to approve my account request.

 

Your PI should check the Spam/Junk folder in the mailbox; if the link wasn't received, the PI can use the following link to see the pending requests and approve them:-

For the Farm cluster PIs, check the link below:
https://hippo.ucdavis.edu/Farm/approve 

For the Peloton cluster PIs, check the link below:
https://hippo.ucdavis.edu/Peloton/approve 

For the Franklin cluster PIs, check the link below:
https://hippo.ucdavis.edu/Franklin/approve