meta data for this page
  •  

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision		Previous revision
it:gettingstarted:start [2023/04/17 07:37] – klausit:gettingstarted:start [2024/04/22 15:38] (current) – [Setup your account] klaus
Line 4: Line 4:
  
 ==== Setup your account ==== ==== Setup your account ====
-  * **Get an account:** Ask one of the [[it:iqo-admins:start|IQ-Admins]] to get one. +<note important>If you already had an account in the past, tell the admin so!</note> 
- +  * **Get an account:** Ask one of the [[it:iqo-admins:start|IQ-Admins]] to get one. You ideally drop by in person. If this does not work for you, provide the admin with at least the following mandatory information via mail 
-  * **Please read the [[it:it_security:passwordpolicy:start|Password Policy]]:** Our servers are accessible worldwide. So the choice of a secure password is crucial! Passwords have to be eight characters or longer. These characters have to include lower case letters, upper case letters and numbers. +    * Your full name 
- +    * A valid E-Mail: Ideally institute mail. Alternatively private mail. If you are supposed to get an instute mail (M.Sc. and above), get back in contact with an admin, once you have it. 
-  * **Get an email account:**  This should be part of your //Laufzettel//, handed out to you by Frau Kaisik. Note, that your request won't be submitted until you have finished your //Laufzettel// and have returned it to Frau Kaisik. For information about mail configuration read the [[it:configuration_stuff:mailconfiguration:start|IQwiki page on Mail Configuration]]. +    * Your mobile phone number: For password delivery via SMS 
 +    * Your group & supervisor 
 +    * Your status in the group (B.Sc, M.Sc, PhD, external, ...) 
 +  * **Please read the [[it:it_security:passwordpolicy:start|Password Policy]]:** Our servers are accessible worldwide. So the choice of a secure password is crucial and you also shall not re-use an existing password of yours: **Make it unique for your IQ account**. 
 +  * **Get an email account:**  This should be part of your //Laufzettel//, handed out to you by Frau Kaisik. If you urgently need the IQ account before will get an email account, we can of course activate your IQ account with your private email address. But once you have a valid institute email address, reach back to us so we can update the mail. For information about mail configuration read the [[it:configuration_stuff:mailconfiguration:start|IQwiki page on Mail Configuration]].
   * **Read the [[it:configuration_stuff:aboutafs:start|Introduction to AFS]]**: AFS is a distributed file system, which allows access to your files on the server. This will give you an overview over the basic features of our file server.   * **Read the [[it:configuration_stuff:aboutafs:start|Introduction to AFS]]**: AFS is a distributed file system, which allows access to your files on the server. This will give you an overview over the basic features of our file server.
  
Line 16: Line 19:
  
   * **Printing:** We provide several printers in our institute and can also use some RRZN printers. For more information read [[it:configuration_stuff:PrintServer]] and [[it:configuration_stuff:PosterDruck]].   * **Printing:** We provide several printers in our institute and can also use some RRZN printers. For more information read [[it:configuration_stuff:PrintServer]] and [[it:configuration_stuff:PosterDruck]].
- 
   * **Software:** See [[SoftwareBestand]] for a list of software used in our institute.   * **Software:** See [[SoftwareBestand]] for a list of software used in our institute.
 +  * **Mailing lists:** You are automatically subscribed to several mailing lists of your group, once you have an IQ account.
 /*  * **Access from outside:**  To access our servers from e.g. home you can either or use SSH to login to gringott2.iqo.uni-hannover.de (our logon server) or read the following section.  */ /*  * **Access from outside:**  To access our servers from e.g. home you can either or use SSH to login to gringott2.iqo.uni-hannover.de (our logon server) or read the following section.  */
  
Line 25: Line 27:
 In order to connect your computer to our servers and services you need to perform the following steps: In order to connect your computer to our servers and services you need to perform the following steps:
  
-=== Install antivirus software === +== Install an antivirus software == 
-You can use the university's license for Sophos Antivirus software. See [[it:it_security:antivirus:start]] for details.+**It is highly recommended** to use a dedicated anti-virus software on your Windows machine. 
 +You can use the university's license for Bitdefender. See [[it:it_security:antivirus:start]] for details and drawbacks.
  
-=== Connect to the institut's ethernet === +== Connect to the institut's ethernet == 
-  * You need a valid MAC address to connect your computer to the institute's network. The MAC address is needed by our DHCP server to recognize your computer and assign a dynamic IP. See [[it:configuration_stuff:networkconfiguration:start]] for details. You can skip this and the now following steps, if you only use the university's WiFi.+  * <color #ffa500>**NOTE:**</color> You can skip everything below, if you only use the university's WiFi. 
 +  * You need a valid MAC address to connect your computer to the institute's network. [[https://www.wikihow.com/Find-the-MAC-Address-of-Your-Computer|See here, how to find your MAC Address]].
   * Communicate the following information to one of our [[it:iqo-admins:start|admins]].    * Communicate the following information to one of our [[it:iqo-admins:start|admins]]. 
-    * **MAC Address**: Preferrable in AB:CD:EF:01:23:45 notation, rather than AB-CD-EF-01-23-45. [[https://www.wikihow.com/Find-the-MAC-Address-of-Your-Computer|See here, how to find your MAC Address.]]+    * **MAC Address**: <color #ff0000>In **AB:CD:EF:01:23:45** or **ab:cd:ef:01:23:45** notation</color> and not in AB-CD-EF-01-23-45 or ABCDEF012345
     * **Experiment / Workgroup**     * **Experiment / Workgroup**
     * **Computer Type**     * **Computer Type**
Line 44: Line 48:
     * **Computer Name**     * **Computer Name**
       * For Lab, Office, Laptop, Server: Exact ''Hostname''       * For Lab, Office, Laptop, Server: Exact ''Hostname''
-        * **<fc #ff0000>Give that device a proper hostname/computer-name</fc>**. ''desktop-1gk4d65'' ("Windows generic") or ''rasel-mbp'' ("Apple generic". mbp = MacbookPro) should be avoided.+        * **<color #ff0000>Give that device a proper hostname/computer-name</color>**. ''desktop-1gk4d65'' ("Windows generic") or ''rasel-mbp'' ("Apple generic". mbp = MacbookPro) should be avoided.
         * Stick to the name convention of your experiment like ''vlbai-oc-05'' or ''qc-oc-13'' and so on.         * Stick to the name convention of your experiment like ''vlbai-oc-05'' or ''qc-oc-13'' and so on.
       * For Privat: ''YourName''-PRIV       * For Privat: ''YourName''-PRIV
Line 51: Line 55:
       * Ideally the IQ-Account username that will use that device or any other responsible person       * Ideally the IQ-Account username that will use that device or any other responsible person
       * For Guest devices: If that user gets an IQ account, use this. Otherwise: The person, who invited the guest       * For Guest devices: If that user gets an IQ account, use this. Otherwise: The person, who invited the guest
-    * **Building number** & <fc #ff0000>**Room number**</fc> ([[https://standortfinder.uni-hannover.de/en/|Use this sitemap]])+    * **Building number** & <color #ff0000>**Room number**</color> ([[https://standortfinder.uni-hannover.de/en/|Use this sitemap]])
       * Some common Building Numbers down here       * Some common Building Numbers down here
         * LUH: [[https://info.cafm.uni-hannover.de/building/1101|1101]]         * LUH: [[https://info.cafm.uni-hannover.de/building/1101|1101]]
Line 58: Line 62:
         * LNQE: [[https://info.cafm.uni-hannover.de/building/3430|3430]]         * LNQE: [[https://info.cafm.uni-hannover.de/building/3430|3430]]
  
-  * **Configure Kerberos and AFS**: Once configured this will work not only from inside the institute's network, but from everywhere in the world. See [[it:configuration_stuff:connectafs:start]] for details.+  * **Configure Kerberos and AFS**: See [[it:configuration_stuff:connectafs:start]] for details. Ideally, you use WPKG for the installation 
 +  * **Get your computer domain joined**: OPTIONAL but highly advised: If your computer is of type Lab, Office or Laptop (LUH payed), joining it the the IQ domain will allow you (and everyone else) to use your IQ account to access it. You additionally benefit [[it:configuration_stuff:configurekerberos:start|SingleSignOn (SSO)]]: no more daily password-typing except for when you login to your Windows. In order to join it a domain, a **host admin** of your group needs to physically drop by and join it the domain.
  
-=== Optional: ===+== Optional: ==
   * **VPN Client:** Some services, as e.g. the license servers are only accessible from inside the university's network. From outside you can use a VPN tunnel to the univerity's network. See [[http://www.rrzn.uni-hannover.de/netz_vpn.html]] for details.   * **VPN Client:** Some services, as e.g. the license servers are only accessible from inside the university's network. From outside you can use a VPN tunnel to the univerity's network. See [[http://www.rrzn.uni-hannover.de/netz_vpn.html]] for details.
- 
   * **SSH:** You can use SSH to access your files. From inside the institute you can access ''afs1'' with your Kerberos password. You can ask an [[it:iqo-admins:start|admin]] to get ssh permissions for ''web.iqo.uni-hannover.de'' which is accessible from everywhere. It is however discouraged to use direct SSH via ''web.iqo.uni-hannover.de''. You drive better by using OpenVPN and then use SSH against ''afs1'' or any other service within the IQ network, that is SSH enabled.   * **SSH:** You can use SSH to access your files. From inside the institute you can access ''afs1'' with your Kerberos password. You can ask an [[it:iqo-admins:start|admin]] to get ssh permissions for ''web.iqo.uni-hannover.de'' which is accessible from everywhere. It is however discouraged to use direct SSH via ''web.iqo.uni-hannover.de''. You drive better by using OpenVPN and then use SSH against ''afs1'' or any other service within the IQ network, that is SSH enabled.
- 
-  * **Login with IQO accounts:** If you want to allow login to your computer with IQO accounts, you can also use SSH for user authentication. A description for Windows can be found [[it:configuration_stuff:pGina|here]]. Note: This allows everyone with an IQO account (even guests) to login to your desktop! 
  
 {{indexmenu_n>1}} /* sort this page to the top of the index */ {{indexmenu_n>1}} /* sort this page to the top of the index */