diff --git a/content/Accounts/_index.md b/content/Accounts/_index.md new file mode 100755 index 0000000000000000000000000000000000000000..d8ac864c9f7387d83cdf7e006b7235cb0a097deb --- /dev/null +++ b/content/Accounts/_index.md @@ -0,0 +1,9 @@ ++++ +title = "Accounts" +weight = "20" ++++ + +Guides on basic account operations. +-------------------------------------- + +{{% children description="true" %}} diff --git a/content/Accounts/how_to_change_your_password.md b/content/Accounts/how_to_change_your_password.md new file mode 100755 index 0000000000000000000000000000000000000000..49032b7b8a17685caac53f9af11e3d6508883e88 --- /dev/null +++ b/content/Accounts/how_to_change_your_password.md @@ -0,0 +1,95 @@ ++++ +title = "Changing Your Password" +description = "How to change your HCC password" +weight = "30" ++++ + +How to change your password +--------------------------- + +{{% notice info%}} +**Your account must be active with Duo authentication setup in order for +the following instructions to work.** +{{% /notice %}} + +- [HCC password requirements](#hcc-password-requirements) +- [Changing a known HCC password](#changing-a-known-hcc-password) + - [Change your password via the command line](#change-your-password-via-the-command-line) + - [Change your password using the myHCC User Portal](#change-your-password-using-the-myhcc-user-portal) +- [Resetting a forgotten HCC password](#resetting-a-forgotten-hcc-password) +- [Tutorial Video](#tutorial-video) + +Every HCC user has a password that is same on all HCC machines +(Crane, Rhino, Anvil). This password needs to satisfy the HCC +password requirements. + +### HCC password requirements + +All HCC passwords must meet the following requirements when they are +created or changed: + +- at least 8 characters long +- at least 1 capital letter +- at least 1 number +- **can not** contain an existing dictionary word +- **can not** contain information from user's account details (*username*, + *email*) + +Using special characters in the password is not required, but it is +allowed. Also, the system keeps a history of the user's previous two +passwords, and their reuse is not allowed. + +### Changing a known HCC password + +If you know your current HCC password, you can use one of two approaches +to change it: + +#### Change your password via the command line + +To change a current or temporary password, the user needs to login to +any HCC cluster and use the ***passwd*** command: + +**Change HCC password** + +{{< highlight bash >}} +$ passwd +Changing password for user <username>. +Current Password: +New password: +New password: +{{< /highlight >}} + +With this command, the user is first prompted for his/her old password. +If the "*Current Password*" is correct, then the user is asked twice for +a replacement password ("*New password*"). The replacement password +needs to fulfill the HCC password requirements. + +#### Change your password using the myHCC User Portal + +1. Login to the [myHCC User Portal](https://hcc.unl.edu/myhcc) + with your HCC credentials. +2. Click **Update Account** in the top menu + + {{< figure src="/images/35326617.png" height="150" >}} + +3. Enter your new password in the **Password** and **Retype Password** + boxes and click **Modify** to save + + {{< figure src="/images/35326618.png" height="150" >}} + +### Resetting a forgotten HCC password + +To reset your password, navigate to the [myHCC User Portal](https://hcc.unl.edu/myhcc/) in your browser + +Click the link to reset your forgotten password + +{{< figure src="/images/35326619.png" height="400" >}} + +Fill in the requested information (your HCC user name and email +associated with your account) and click **Reset Password**. A reset link +will be sent to your email address. Click this link and follow the +onscreen prompts to set a new password. + +### Tutorial Video + +{{< youtube eaTW6FDhpsM >}} diff --git a/content/Accounts/requesting_an_account.md b/content/Accounts/requesting_an_account.md new file mode 100755 index 0000000000000000000000000000000000000000..d2f1201d7a2cd269d3625cc8576b1251852e5f91 --- /dev/null +++ b/content/Accounts/requesting_an_account.md @@ -0,0 +1,10 @@ ++++ +title = "Quickstarts" +weight = "10" ++++ + +The quick start guides require that you already have a HCC account. You +can get a HCC account by applying on the +[HCC website] (http://hcc.unl.edu/newusers/) + +{{% children %}} diff --git a/content/Accounts/setting_up_and_using_duo.md b/content/Accounts/setting_up_and_using_duo.md new file mode 100755 index 0000000000000000000000000000000000000000..04f0847dc6979387f136f44fe301904ad152c419 --- /dev/null +++ b/content/Accounts/setting_up_and_using_duo.md @@ -0,0 +1,146 @@ ++++ +title = "Setting Up and Using Duo" +description = "Duo Setup Instructions" +weight = "8" ++++ + +##### Use of Duo two-factor authentication (https://www.duosecurity.com) is required for access to HCC resources. + +Users will connect via SSH and enter their username/passwords as usual. One additional +authentication step through Duo is then needed before the login is completed. This +second authentication can be in several different forms (cell phone, YubiKey hardware token), +and is user-selectable at each login. A brief description of each is provided +[below](#duo-authentication-methods). See the +[Duo Authentication Methods](https://www.duosecurity.com/authentication-methods) +page for more details. + +Initial Setup +------------- + +Most HCC account holders use the Duo Mobile application on their +smartphone or purchase a YubiKey USB device. + +### Smartphone + +1. Install the free **Duo Mobile** application from the + [Google Play Store](https://play.google.com/store/apps/details?id=com.duosecurity.duomobile), [Apple App Store](https://itunes.apple.com/us/app/duo-mobile/id422663827), or [Microsoft Store](https://www.microsoft.com/en-us/store/apps/duo-mobile/9nblggh08m1g) +2. Visit one of the following locations. **Bring your smartphone and a valid photo ID** such as your university ID card or drivers license. + 1. Visit either HCC location [118 Schorr Center, UNL](http://www1.unl.edu/tour/SHOR) | + [152 Peter Kiewit Institute, UNO](http://pki.nebraska.edu/new/pages/about-pki/maps-directions-and-parking) in-person anytime from 9am-5pm to enroll. + 2. Visit Information Technology Services [115 Otto Olsen, UNK](http://www.unk.edu/campus-map/?q=m15) + in-person and ask for HCC identity verification. + +Faculty/staff members with a verified NU telephone number can enroll by +phone. If you would like an HCC staff member to call your NU telephone +number to enroll, please email +{{< icon name="envelope" >}}[hcc-support@unl.edu] (mailto:hcc-support@unl.edu) +with a time you will be available. + +### YubiKeys + +YubiKey devices are currently a one-time cost of around $25 from HCC, or can be +purchased from Yubico and added in-person at either HCC location. +Purchasing a YubiKey from HCC must be done via a University cost object +transfer (HCC cannot accept cash or credit cards). Please bring the cost +object number with you if possible. YubiKeys are also available from the +Husker Tech store in the UNL City Union. Note that +YubiKeys are configured for HCC's Duo, and not for general YubiCloud or +U2F use. + +Example login using Duo Push +---------------------------- + +This demonstrates an example login to Crane using the Duo Push method. +Using another method (SMS, phone call, etc.) proceeds in the same way. + (Click on any image for a larger version.) + +First, a user connects via SSH using their normal HCC username/password, +exactly as before. + +{{< figure src="/images/5832713.png" width="600" >}} + +{{% notice warning%}}**Account lockout** + +After 10 failed authentication attempts, the user's account is +disabled. If this is the case, then the user needs to send an email to +[hcc-support@unl.edu] (mailto:hcc-support@unl.edu) +including his/her username and the reason why multiple failed +authentication attempts occurred. +{{% /notice %}} + +After entering the password, instead of completing the login, the user +will be presented with the Duo prompt. This gives the choice to use any +authentication method that the particular account is setup to use. In +this example, the choices are Duo Push notification, SMS message, or +phone call. Choosing option 1 for Duo Push, a request to verify the +login will be sent to the user's smartphone. + +{{< figure src="/images/5832716.png" height="350" >}} + +Simply tap `Approve` to verify the login. + +{{< figure src="/images/5832717.png" height="350" >}} + +{{% notice warning%}}**If you receive a verification request you didn't initiate, deny the +request and contact HCC immediately via email at +[hcc-support@unl.edu] (mailto:hcc-support@unl.edu)** +{{% /notice %}} + +In the terminal, the login will now complete and the user will logged in +as usual. + +{{< figure src="/images/5832714.png" height="350" >}} + + +Duo Authentication Methods +-------------------------- + +### Duo Push +##### [[Watch the Duo Push Demo]](https://www.duosecurity.com/duo-push) + +{{< figure src="/images/5832709.png" height="350" caption="Photo credit: https://duosecurity.com" >}} + +For smartphone or tablet users (iPhone, Android, Blackberry, Windows +Phone), the Duo Mobile app is available for free. A push notification +will be sent to the device, and users can simply confirm the login with +one tap. + +### Duo Mobile Passcodes + +{{< figure src="/images/5832711.png" height="350" caption="Photo credit: https://duosecurity.com" >}} + +The Duo Mobile app can also be used to generate numeric passcodes, even +when internet and cell service is unavailable. Press the key icon to +generate a passcode. The passcode is then entered manually at the login +prompt to complete authentication. + +### SMS Passcodes + + +{{< figure src="/images/5832712.png" height="350" >}} + +For non-smartphone users, Duo can send passcodes via normal text +messages which are entered manually to complete login. Please note since +this is an SMS message it may not be free, depending on the details of +the particular cell phone plan. + +### Phone Callback + +For users with cell phones who prefer not to use any of the above +methods and for those with landline phones, Duo will call the phone and +provide a passcode via automatic voice message. The passcode is then +entered manually to complete the login. + +### YubiKey +##### [[Yubico]](http://www.yubico.com/) + +{{< figure src="/images/5832710.jpg" height="200" caption="Photo credit: Yubico" >}} + +YubiKeys are USB hardware tokens that generate passcodes when pressed. +They appear as a USB keyboard to the computer they are connected to, and +so require no driver software with almost all modern operating systems. +YubiKeys are available from the Husker Tech store at UNL. Users may also purchase them directly from +[Yubico](https://store.yubico.com) if desired; this does require stopping +by either HCC location in person to have the YubiKey added to the user's account. +For your convenience, HCC often carries some YubiKeys as well; these may only be purchased via a +Cost Object transfer. diff --git a/content/quickstarts/_index.md b/content/quickstarts/_index.md old mode 100644 new mode 100755 diff --git a/content/quickstarts/connecting/how_to_change_your_password.md b/content/quickstarts/connecting/how_to_change_your_password.md old mode 100644 new mode 100755 diff --git a/content/quickstarts/setting_up_and_using_duo.md b/content/quickstarts/setting_up_and_using_duo.md old mode 100644 new mode 100755