Commit 4a4df822 authored by Caughlin Bohn's avatar Caughlin Bohn
Browse files

Moved Accounts items

parent e709bbd9
+++
title = "Accounts"
weight = "20"
+++
Guides on basic account operations.
--------------------------------------
{{% children description="true" %}}
+++
title = "Changing Your Password"
description = "How to change your HCC password"
weight = "30"
+++
How to change your password
---------------------------
{{% notice info%}}
**Your account must be active with Duo authentication setup in order for
the following instructions to work.**
{{% /notice %}}
- [HCC password requirements](#hcc-password-requirements)
- [Changing a known HCC password](#changing-a-known-hcc-password)
- [Change your password via the command line](#change-your-password-via-the-command-line)
- [Change your password using the myHCC User Portal](#change-your-password-using-the-myhcc-user-portal)
- [Resetting a forgotten HCC password](#resetting-a-forgotten-hcc-password)
- [Tutorial Video](#tutorial-video)
Every HCC user has a password that is same on all HCC machines
(Crane, Rhino, Anvil). This password needs to satisfy the HCC
password requirements.
### HCC password requirements
All HCC passwords must meet the following requirements when they are
created or changed:
- at least 8 characters long
- at least 1 capital letter
- at least 1 number
- **can not** contain an existing dictionary word
- **can not** contain information from user's account details (*username*,
*email*)
Using special characters in the password is not required, but it is
allowed. Also, the system keeps a history of the user's previous two
passwords, and their reuse is not allowed.
### Changing a known HCC password
If you know your current HCC password, you can use one of two approaches
to change it:
#### Change your password via the command line
To change a current or temporary password, the user needs to login to
any HCC cluster and use the ***passwd*** command: 
**Change HCC password**
{{< highlight bash >}}
$ passwd
Changing password for user <username>.
Current Password:
New password:
New password:
{{< /highlight >}}
With this command, the user is first prompted for his/her old password.
If the "*Current Password*" is correct, then the user is asked twice for
a replacement password ("*New password*"). The replacement password
needs to fulfill the HCC password requirements.
#### Change your password using the myHCC User Portal
1. Login to the [myHCC User Portal](https://hcc.unl.edu/myhcc)
with your HCC credentials.
2. Click **Update Account** in the top menu
{{< figure src="/images/35326617.png" height="150" >}}
3. Enter your new password in the **Password** and **Retype Password**
boxes and click **Modify** to save
{{< figure src="/images/35326618.png" height="150" >}}
### Resetting a forgotten HCC password
To reset your password, navigate to the [myHCC User Portal](https://hcc.unl.edu/myhcc/) in your browser
Click the link to reset your forgotten password
{{< figure src="/images/35326619.png" height="400" >}}
Fill in the requested information (your HCC user name and email
associated with your account) and click **Reset Password**. A reset link
will be sent to your email address. Click this link and follow the
onscreen prompts to set a new password.
### Tutorial Video
{{< youtube eaTW6FDhpsM >}}
+++
title = "Quickstarts"
weight = "10"
+++
The quick start guides require that you already have a HCC account.  You
can get a HCC account by applying on the
[HCC website] (http://hcc.unl.edu/newusers/)
{{% children %}}
+++
title = "Setting Up and Using Duo"
description = "Duo Setup Instructions"
weight = "8"
+++
##### Use of Duo two-factor authentication (https://www.duosecurity.com) is required for access to HCC resources.
Users will connect via SSH and enter their username/passwords as usual. One additional
authentication step through Duo is then needed before the login is completed. This
second authentication can be in several different forms (cell phone, YubiKey hardware token),
and is user-selectable at each login. A brief description of each is provided
[below](#duo-authentication-methods). See the
[Duo Authentication Methods](https://www.duosecurity.com/authentication-methods)
page for more details.
Initial Setup
-------------
Most HCC account holders use the Duo Mobile application on their
smartphone or purchase a YubiKey USB device.
### Smartphone
1. Install the free **Duo Mobile** application from the
[Google Play Store](https://play.google.com/store/apps/details?id=com.duosecurity.duomobile), [Apple App Store](https://itunes.apple.com/us/app/duo-mobile/id422663827), or [Microsoft Store](https://www.microsoft.com/en-us/store/apps/duo-mobile/9nblggh08m1g)
2. Visit one of the following locations.  **Bring your smartphone and a valid photo ID** such as your university ID card or drivers license.
1. Visit either HCC location [118 Schorr Center, UNL](http://www1.unl.edu/tour/SHOR) |
[152 Peter Kiewit Institute, UNO](http://pki.nebraska.edu/new/pages/about-pki/maps-directions-and-parking) in-person anytime from 9am-5pm to enroll.
2. Visit Information Technology Services [115 Otto Olsen, UNK](http://www.unk.edu/campus-map/?q=m15)
in-person and ask for HCC identity verification.
Faculty/staff members with a verified NU telephone number can enroll by
phone. If you would like an HCC staff member to call your NU telephone
number to enroll, please email
{{< icon name="envelope" >}}[hcc-support@unl.edu] (mailto:hcc-support@unl.edu)
with a time you will be available.
### YubiKeys
YubiKey devices are currently a one-time cost of around $25 from HCC, or can be
purchased from Yubico and added in-person at either HCC location.
Purchasing a YubiKey from HCC must be done via a University cost object
transfer (HCC cannot accept cash or credit cards). Please bring the cost
object number with you if possible. YubiKeys are also available from the
Husker Tech store in the UNL City Union. Note that
YubiKeys are configured for HCC's Duo, and not for general YubiCloud or
U2F use.
Example login using Duo Push
----------------------------
This demonstrates an example login to Crane using the Duo Push method.
Using another method (SMS, phone call, etc.) proceeds in the same way.
 (Click on any image for a larger version.)
First, a user connects via SSH using their normal HCC username/password,
exactly as before.
{{< figure src="/images/5832713.png" width="600" >}}
{{% notice warning%}}**Account lockout**
After 10 failed authentication attempts, the user's account is
disabled. If this is the case, then the user needs to send an email to
[hcc-support@unl.edu] (mailto:hcc-support@unl.edu)
including his/her username and the reason why multiple failed
authentication attempts occurred.
{{% /notice %}}
After entering the password, instead of completing the login, the user
will be presented with the Duo prompt. This gives the choice to use any
authentication method that the particular account is setup to use. In
this example, the choices are Duo Push notification, SMS message, or
phone call. Choosing option 1 for Duo Push, a request to verify the
login will be sent to the user's smartphone.
{{< figure src="/images/5832716.png" height="350" >}}
Simply tap `Approve` to verify the login.
{{< figure src="/images/5832717.png" height="350" >}}
{{% notice warning%}}**If you receive a verification request you didn't initiate, deny the
request and contact HCC immediately via email at
[hcc-support@unl.edu] (mailto:hcc-support@unl.edu)**
{{% /notice %}}
In the terminal, the login will now complete and the user will logged in
as usual.
{{< figure src="/images/5832714.png" height="350" >}}
Duo Authentication Methods
--------------------------
### Duo Push
##### [[Watch the Duo Push Demo]](https://www.duosecurity.com/duo-push)
{{< figure src="/images/5832709.png" height="350" caption="Photo credit: https://duosecurity.com" >}}
For smartphone or tablet users (iPhone, Android, Blackberry, Windows
Phone), the Duo Mobile app is available for free. A push notification
will be sent to the device, and users can simply confirm the login with
one tap.
### Duo Mobile Passcodes
{{< figure src="/images/5832711.png" height="350" caption="Photo credit: https://duosecurity.com" >}}
The Duo Mobile app can also be used to generate numeric passcodes, even
when internet and cell service is unavailable.  Press the key icon to
generate a passcode.  The passcode is then entered manually at the login
prompt to complete authentication.
### SMS Passcodes
{{< figure src="/images/5832712.png" height="350" >}}
For non-smartphone users, Duo can send passcodes via normal text
messages which are entered manually to complete login. Please note since
this is an SMS message it may not be free, depending on the details of
the particular cell phone plan.
### Phone Callback
For users with cell phones who prefer not to use any of the above
methods and for those with landline phones, Duo will call the phone and
provide a passcode via automatic voice message. The passcode is then
entered manually to complete the login.
### YubiKey
##### [[Yubico]](http://www.yubico.com/)
{{< figure src="/images/5832710.jpg" height="200" caption="Photo credit: Yubico" >}}
YubiKeys are USB hardware tokens that generate passcodes when pressed.
They appear as a USB keyboard to the computer they are connected to, and
so require no driver software with almost all modern operating systems.
YubiKeys are available from the Husker Tech store at UNL. Users may also purchase them directly from
[Yubico](https://store.yubico.com) if desired; this does require stopping
by either HCC location in person to have the YubiKey added to the user's account.
For your convenience, HCC often carries some YubiKeys as well; these may only be purchased via a
Cost Object transfer.
File mode changed from 100644 to 100755
File mode changed from 100644 to 100755
File mode changed from 100644 to 100755
Supports Markdown
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment