Using Globus at TACC
Last update: May 6, 2020

Using Globus at TACC

TACC users now have access to Globus and the Globus utilities to transfer files directly into and out of TACC systems. This new feature allows users to associate new Distinguished Names (DNs) with their TACC account, thereby allowing TACC users access to Globus to transfer files.

In order to transfer files using Globus you will need to:

  1. Find a DN
  2. Add the DN to your TACC Profile
  3. Activate the Globus Endpoints
  4. Transfer Files

Step 1: Find a DN from a MyProxy or MyProxy OAuth provider

To create a DN, you need to log in from some authoritative source that can verify your identity, typically your university or employer. If you already have a DN from another source, you can use that. If you do not, you can associate one with your account from many of the major universities in the world via the "CI Logon" service.

You must use your institution's credentials and not your personal Google account when setting up Globus. If you use a personal account, you will encounter an issue with the endpoint.

Globus supports MyProxy and MyProxy OAuth identity providers. While you should be able to use any MyProxy/MyProxy OAuth provider, for this documentation we will be using CILogon.org.

To retrieve your DN, go to https://cilogon.org in your browser. Select an Identity Provider from the drop-down list and click "Log On".

We have selected "University of Texas at Austin". After successfully authenticating at your chosen identity provider, you are redirected back to CILogon, where you can see your certificate subject:

/DC=org/DC=cilogon/C=US/O=University of Texas at Austin/CN=Sample Person A00000

This is the data you need to associate with your TACC account.

Step 2: Associate the DN with our TACC Account

Login to the TACC User Portal and click "Manage your Profile" from the Dashboard actions or select "Account Profile" from the main menu under the "Home" dropdown. You can also navigate directly to https://portal.tacc.utexas.edu/account-profile. On the left of the page is a list of account actions, select "Manage DNs". You will be presented with a list of the DNs currently associated with your TACC account.

On the Manage DNs page, near the bottom, is a form to associate a DN to your account. Enter the Certificate Subject obtained from CILogon.org in the text field. Click the button to "Associate DN". This will associate the new DN with your account.

Please note, it may take up to 30 minutes for this change to propagate to all TACC systems.

Step 3: Activate Globus Endpoints

Now that you have associated the DN with your TACC account and given the DN time to propagate to the systems (up to thirty minutes), you can activate the Globus transfer endpoints and begin transferring files.

Go to https://globus.org, log in, and click "Manage Data". Alternatively, navigate directly to https://app.globus.org/file-manager. In one of the transfer endpoint form boxes, search for endpoints prefixed "tacc#". For example, you should be able to find "tacc#stampede2".

After selecting the endpoint you'll be prompted to authenticate in order to active the endpoint. Click "Continue" and you will be redirected to a Globus-branded CILogon authentication page. Select the same identity provider that you used when you retrieved your certificate above and re-authenticate.

Step 4: Transfer Files

After successfully authenticating, you will be redirected back to Globus and you will now be able to access your data on Stampede2.