Logging in and managing files | Access for additional users

HPSS user accounts generally are associated with allocations for use of CISL's supercomputing, data analysis, and visualization clusters. See Kerberos and HSI for how to use HSI on NCAR systems that are outside of this environment.

If you have received an allocation, you most likely already have a user account that gives you access to HPSS. If you need to request an allocation, please review our Allocations documentation.

Please note:

  • Each user account for access to HPSS is associated with a default project to which storage charges accrue. See Charging formula for details.
  • As with our other systems, we expect HPSS users to comply with all NCAR computer security policies.

Logging in and managing files

If you log in to an HPC system such as Cheyenne, you will not be asked for any further authentication to access HPSS.

After you log in, you can store, retrieve, and manage files using these interfaces:

  • The Hierarchical Storage Interface (HSI).
  • The HPSS Tape Archiver (HTAR), which is the recommended utility for archiving large numbers of files.

Access for additional users

If you are the project lead or project admin for an allocated project, you can request user accounts for additional individuals by contacting the CISL Help Desk.

UCAR users

Special accounts

You may request an HPSS user account for storing files from non-HPC systems, but you will still need a project to which charges can accrue. Contact your divisional system administrator to request an HPSS user account. On some UCAR divisional servers, your login procedure may be different from the one described above. You may be asked to enter a UCAS password and to be familiar with Kerberos authentication and related commands.

Multiple credentials

If your current workflow consists of logging in as yourself, executing a su command to change identity, and then performing tasks such as moving files to or from HPSS tapes, you can keep doing that. However, you might decide that a different workflow supported by our HPSS/Kerberos setup works better for you.

You can "switch" your Kerberos principal to another one and effectively become a different user on HPSS without the need to su on the client machine. To switch principal, you can do one of following:

  • Use the credfile setting in the .hsirc file (convenient for frequently used credentials).
  • Use the -c option for the hsi command (convenient for seldom-used credentials).
  • Or, set the KRB5CCNAME environment variable to change the default location of the credential "on the fly." (This is convenient for controlling or changing the credentials from outside the script that does the actual file transfer, without doing a longer-term change in the .hsirc file.)