ANL ASC Tier 3 Gateway Policies and Procedures

Appropriate Use:

Users of the ASC Gateway Tier 3 are expected to comply with all ANL and DoE requirements, including those for appropriate use.  The following is a banner that appears on all login screens:

This is a Federal computer system and is the property of the United States Government. It is for authorized use only. Users (authorized or unauthorized) have no explicit or implicit expectation of privacy. Any or all uses of this system and all files on this system may be intercepted,
monitored, recorded, copied, audited, inspected, and disclosed to authorized site, Department of Energy, and law enforcement personnel, as well as authorized officials of other agencies, both domestic and foreign. By using this system, the user consents to such interception, monitoring, recording, copying, auditing, inspection, and disclosure at the discretion of authorized site or Department of Energy personnel.
Unauthorized or improper use of this system may result in administrative disciplinary action and civil and criminal penalties. By continuing to use this system you indicate your awareness of and consent to these terms andconditions of use. LOG OFF IMMEDIATELY if you do not agree to the conditions stated in this warning.

Requirements for obtaining accounts at ANL ASC (for non-ANL employees):

The training is valid for one year; Unless renewed, 30 days after the training expires the account will be removed.

The non-US account holders will need a valid "Form 593". This is implicit in obtaining the visitor's pass. The "Form 593" is valid up to two years. Unless renewed, 30 days after the validity expires, the account will be removed.

The account holders will be notified of impending expirations.

Passwords:

Users of the ASC Gateway Tier 3 are expected to comply with all ANL and DoE password requirements:
  1. Your password must include:
    1. At least eight non-blank characters in both upper case and lower case
    2. A number in the first seven characters
    3. A special character in the first seven characters
    4. A nonnumeric in the first and last position, and
    5. May not contain any portion of your e-mail address.
  2. Please follow these U.S. Department of Energy recommendations for selecting a suitable password:
    1. Your password should not include your own name, nor, to the best of your knowledge, that of close friends or relatives.
    2. Your password should not include your employee serial number, Social Security number, birth date, phone number, or any information about you that could be readily learned or guessed.
    3. Your password should not, to the best of your knowledge, include common words that would be found in an English dictionary, or from another language with which you have familiarity.
    4. Your password should not, to the best of your knowledge, employ commonly used proper names, including the name of any fictional character or place.
    5. Your password should not contain any simple pattern of letters or numbers, such as "qwertyxx" or "xyz123xx".
Passwords are valid for 180 days.  30 days after a password expires the account will be locked.  30 days after that, the account will be removed.

User Directories:

Home areas are located in /users/[username].  While we do not impose quotas at this time, because these areas are backed up regularly, we ask that these areas not be used to store large datasets and that the total space used be under 10 GB.

Personal data areas are located in /data/nas2/users/[username].  These areas are not backed up, so there is no space limit beyond the disk capacity.

Shared data areas are located in /data/nas2/common.  This area is the preferred place to store large datasets used by multiple people.

Backup Policy:

Home areas (/users/[username]) are backed up Tuesdays and Fridays.

The intention of this backup is to protect us in case of a disk failure.  It's not intended to allow for reverting back to yesterday's version of a file.

Availability:

We expect the systems to be up continuouly.  Should a system go down, we expect to have it back the next working day.  That means that a crash at 5:00PM on a Friday may not come up until Monday.