external/access/lums-passwords/lums-passwords.md

+---
+card_order: 200
+layout: page
+permalink: /external/access/lums-passwords/
+shortcut: access:lums-passwords
+redirect_from:
+  - /cards/access:lums-passwords
+  - /external/cards/access:lums-passwords
+  - /access/lums-passwords
+  - /external/external/access/lums-passwords/
+---
+# LUMS account
+
+In addition to the standard university account, LCSB researchers and external collaborators are provided with the LUMS (LCSB User Management System) account.
+This serves for internal authentication for resources provided by the LCSB, e.g. LCSB hosted [GitLab](https://gitlab.lcsb.uni.lu), LCSB [OwnCloud](https://owncloud.lcsb.uni.lu) storage or access to virtual machines.
+
+## Requesting LUMS account as LCSB/DLSM members
+
+  1. Go to [service.uni.lu](https://service.uni.lu).
+
+  2. Login with your university credentials.
+
+  3. Create a ticket requesting a LUMS account:
+
+     *  Choose **LCSB** ticket service:<br/>
+<img src="img/lums_ticket-main.png" height="300px"><br/>
+
+      *  Navigate to **"LCSB IT: Account Management Services"**, choose **" LUMS- New account"** and fill the [Form](https://service.uni.lu/sp?id=sc_cat_item&sys_id=c536257ddb336010ca53454039961936&sysparm_category=6b76697ddb336010ca534540399619f8):<br/> 
+    <img src="img/lums_ticket-request.png" height="350px"><br/>
+
+     * If you know already to which services you need access, please specify it in the ticket.
+
+## Requesting LUMS account as external collaborator, UL members or  UL student
+
+* In case you are not a member of LCSB/DLSM, please ask your collaborator at LCSB/DLSM to request the account for you. You will need to provide an institutional email address. 
+* Once the account is created, you will receive an email with your new LUMS account details and how to access services and VMS.
+
+## Requesting LUMS account for externals collaborators, UL members or UL students 
+
+ When the account holder is an external collaborator,  UL member (but not a LCSB/DLSM member), or UL student :
+
+  1. The account holder must have an account manager assigned. The account manager has to be a LCSB/DLSM member.
+
+  2. The account manager should request the account on ServiceNow. A form with the following information will then be created, which the account manager must sign:
+
+  
+      * The full name of the account holder, 
+      * The institutional email,
+      * and the validity period of the account, otherwise the  account will be valid until the 31st March of the following year. 
+
+  3. Access to Owncloud and GitLab needs to be approved by the account manager and access to other services or VMs need to be approved by the service or VM owner.
+
+  5. At the end of the account validity, the account manager must sign a new form (as specified in step 2) in order to extend it.
+  > In case the assigned account manager changes, the new account manager must also sign a new form immediately and confirm the access permissions by informal approval.
+  The assigned account manager must fulfill the criteria in 1), otherwise the account will be disabled immediately. 
+
+
+## (Re-)Activating LUMS account upon receiving credentials or after password reset
+
+The password you will receive from the system administrators is temporary and **it will expire after one month**, so you have to reset it as soon as possible. It is usually sent as a link to [PrivateBin]({{ '/?access:passwords' | relative_url }}). **This link is valid for one week and is deleted after you see it once**, thus you need to keep it open until you have followed these steps to reset your password:
+
+  1. Go to [lums.uni.lu](https://lums.uni.lu) and login with your LUMS username and the temporary password you received.<br>**NOTE:** If you experience any issues at this step, try to use *Chrome* browser for this procedure.<br/><img src="img/lums_login.png" height="200px"><br/>
+  Should the login look different from this, e.g. like a pop-up, click on **x** or **Cancel** to close it.
+
+  2. You will be prompted to reset your password:<br/>
+  <img src="img/lums_first-reset-password.png" height="300px"><br/>
+  3. Enter your temporary password into the field **"Current Password"**.
+  4. Leave the **"OTP"** field blank.
+  5. Enter a new password of your choice in the field **"New Password"** and repeat the same password in the field **"Verify Password"**. This is the actual password you need to use from now on, so make sure to remember it.
+  6. Click on **"Reset Password and Login"**.
+
+It is a good practice to use a password manager which will not only help you to keep track of your passwords so you will never forget it, but it will also help you to generate passwords which are very safe (see [HowTo card]({{ '/?access:passwords' | relative_url }}) on password management for more detail).
+
+## Changing password for LUMS accounts
+If you want to change your password for the LUMS account, you can:
+  1. Go to [lums.uni.lu](https://lums.uni.lu) and login with your LUMS credentials:
+  <br/><img src="img/lums_login.png" height="200px">
+
+  2. In the top-right corner click on your name and select **Change password**:
+  <br/><img src="img/lums_home-settings.png" height="300px">
+
+  3. Enter your current password and your new password:
+  <br/><img src="img/lums_reset-password.png" height="300px">

external/access/passwords/passwords.md

+---
+card_order: 300
+layout: page
+permalink: /external/access/passwords/
+shortcut: access:passwords
+redirect_from:
+  - /cards/access:passwords
+  - /external/cards/access:passwords
+  - /access/passwords
+  - /external/external/access/passwords/
+---
+# Managing your passwords
+
+ There are several tools that can be used for password management. Some provide limited (basic) features for free, some require a fee. Below are some password management tools that can be used:
+
+
+|Tool|Notes|
+|-------------------------|------------------------|
+| [LastPass](https://www.lastpass.com)| Free for most features. Paid access allows secure sharing of passwords e.g. for shared infrastructure. If you're in charge of the archival and management of research data for your group, please check with the LCSB IT Team whether they can provide you a LastPass subscription.|
+| [dashlane](https://www.dashlane.com) |Free for limited features. |
+| [KeePass](https://keepass.info)| Free.|
+
+
+
+# Securely sending passwords to others
+
+When sending passwords to collaborators, it is not advised to use e-mail or instant messaging. The preferred way is to generate **password links**, and then send these links to collaborators. Password links can have varying expiry periods; a link may expire once visited, or it be valid for a certain duration. Below are a list of freely available tools that can be used to generate password links. We recommend that you use  **Privatebin hosted by the LCSB**.
+
+
+|Tool|Notes|
+|-----|------------------------|
+| [Privatebin @ LCSB](https://privatebin.lcsb.uni.lu) (Recommended)|Free service provided by the LCSB. LUMS account required. |
+| [Privatebin @ Uni-LU HPC](https://hpc.uni.lu/privatebin/) |Free service provided by the HPC team of Uni LU. No signup required.|
+| [Zerobin](https://zerobin.net/) | Free. No signup required.|
+| [Noteshred](https://www.noteshred.com) | Free. Signup required.|
+
+
+## Privatebin hosted by the LCSB
+
+### Sending a password
+  1. 1. Go to [Privatebin @ LCSB](https://privatebin.lcsb.uni.lu/) and type the password you want to share into the Editor tab. You will be asked to enter your LUMS credentials when you click on "Send"<br/>
+  <img src="img/privatebin-editor.png">
+
+  1. Set expiry period
+    -  For the highest safety measures, sender can allow password link to be used only once so it expires upon first access. This feature can be set by checking **Burn after reading** checkbox.
+
+  1. You can also enter a password to protect your password link - this should be **different** from the password you are sharing!
+  1. Click **Send** in right-top corner
+    - you should be redirected to a page containing the password and password link
+    <img src="img/privatebin-link.png"><br/>
+  1. Share the **link** with your collaborator via your favorite communication channel
+
+### Receiving a password
+  * You have been provided a link to website where your new password is stored. (This link can be protected by yet another password you might be asked to enter.)
+<img src="img/privatebin-password.png"><br/>
+
+  * If you see following:
+<img src="img/privatebin-expired.png"><br/>
+    * You have either entered the wrong/incomplete link - try copy-pasting the link into your browser instead of clicking on it - or
+    * your password link has already expired. In that case you will have to request a new link.<br/>
+      **Warning!**: If the password link was set with one access only (**Burn after reading**) and you are sure that you haven't accessed the link so far, you should notify the password sender because there is a chance that your communication was intercepted and someone accessed the link before you.<br/>
+      **Note**: If the page looks different from the pictures above, try using Google Chrome browser. If the issue persists, please take a screenshot of the page and send it to our [sysadmin](mailto:lcsb-sysadmins@uni.lu) team.
+
+# Tips when resetting University of Luxembourg Active Directory password on a Mac
+
+To reset your UL AD password when using a Mac:
+
+ 1. Go to <https://owa.uni.lu> and change your password there.
+ 2. **Before** rebooting your Mac, you should change your keychain password to avoid any issues down the road. To do so, run the following command `security set-keychain-password "/Users/YOURHOME/Library/Keychains/login.keychain-db"`
+ 3. If you use FileVault, after the first reboot, first enter your old password, then the new one. Normally, FileVault will sync and update with your new password after you reboot.

external/access/vpn-access/vpn-access.md

+---
+card_order: 400
+layout: page
+permalink: /external/access/vpn-access/
+shortcut: access:vpn-access
+redirect_from:
+  - /cards/access:vpn-access
+  - /external/cards/access:vpn-access
+  - /access/vpn-access
+  - /external/external/access/vpn-access/
+---
+# VPN connection
+
+VPN is used to access the servers that are hosted at the LCSB, but are not reachable "externally" from the internet, such as the [pre-publication check page](https://publications.lcsb.uni.lu) and the internal version of the [How-To cards](https://howto.lcsb.uni.lu). VPN uses the same user login information as the university active directory account (i.e., the same as used for Fiori, ServiceNow and Outlook e-mail), and is available automatically for all employees.
+
+
+## Download and start the VPN
+
+Once you have reset your VPN Password, please download VPN client from [vpn.uni.lu](https://vpn.uni.lu/).
+
+**ENTER**
+
+1. Username - firstname.lastname
+2. Password - Password you have set for VPN
+
+**Note**- If firstname.lastname does not work, give a try with firstname.lastname@uni.lu
+<img src="img/vpn-download.png" height="300px"><br/>
+
+Then depending on your distribution of OS, it will suggest you a link to download.
+<img src="img/vpn-download-01.png" height="300px"><br/>
+
+
+## Troubleshooting
+
+Despite establishing the VPN connection, if you still cannot reach the internal websites and How-to cards, please make sure that you **do not use a custom DNS configuration**. The DNS configuration can be displayed under the **privacy and security options of your browser** or the **network settings of your operating system**.
+
+<img src="img/dns-settings.png" height="300px"><br/>

external/access/vpn-cerbere-access/vpn-cerbere-access.md

+---
+card_order: 420
+layout: page
+permalink: /external/access/vpn-cerbere-access/
+shortcut: access:vpn-cerbere-access
+redirect_from:
+  - /cards/access:vpn-cerbere-access
+  - /external/cards/access:vpn-cerbere-access
+  - /access/vpn-cerbere-access
+  - /external/external/access/vpn-cerbere-access/
+---
+
+# Connect to Cerbere via VPN
+
+1. [Launch the VPN client]({{ '/?access:vpn-access' | relative_url }}) and enter
+
+   <img src="img/vpn-connect-01.png" height="300px"><br/>
+
+2. Enter
+
+   * Username - firstname.lastname
+   * Password - VPN password that you have set.
+
+3. Once you are connected to VPN, download RDP files from [Cerbere](https://cerbere.uni.lu/)
+
+   * Enter same credentials as VPN
+     * Username - firstname.lastname
+     * Password - VPN password that you have set.
+
+   * Under **My Authorizations**, select **Sessions** and download the file
+
+## Access to the VM
+
+Run the command/script you have downloaded from Cerbere. For example like below -
+
+```ssh -t firstname.lastname@cerbere.uni.lu 'Interactive@als-epilepsy-vm-1:SSH:ALS-epilepsy-Group'```
+
+```
+WARNING: Access to this system is restricted to duly authorized users only. Any attempt to access this system without authorization or fraudulently remaining within such system will be prosecuted in accordance with the law.
+Any authorized user is hereby informed and acknowledges that his/her actions may be recorded, retained and audited.
+
+user's password: VPN password
+
+Account successfully checked out
+
+Connecting to Interactive@als-epilepsy-vm-1:SSH...
+Target login: firstname.lastname
+firstname.lastname's password: LUMS Password
+
+You are hereby informed and acknowledge that your actions may be recorded, retained and audited in accordance with your organization security policy.
+Please contact your WALLIX Bastion administrator for further information.
+
+Last login: Fri Dec  6 16:43:22 2019 from cerbere.uni.lu
+```