Getting Started on the Cornell Restricted Access Data Center (CRADC)
This version: May 19, 2008
1. Introduction
The CRADC operates completely behind its own firewall with its own private domain. The firewall permits you to open a window (via the Windows Terminal Services WebClient or Remote Desktop Client) on the CRADC but it does not permit you to place new files on the system or remove files from the system. These operations are handled through the CRADC custodian, as explained below. We have placed additional software on the system so that you can write papers and prepare presentations without migrating files from the system.
2. Setup
You must sign a CRADC Data Users agreement each year (effective June 1, 2002). Your access to the CRADC nodes will be granted/continued when you have signed and returned your agreement. Cornell University will provide you with a copy that contains both signatures after you return your signed copy.
Your account and the initial password will be sent to you in a separate communication. You will be required to change the password on first access. The rules for password formation are as follows:
- Passwords must be at least eight characters long.
- Passwords may not contain your user name or any part of your full name.
- Passwords must contain characters from at least three of the following four classes:
- English upper case letters A, B, C, ... Z
- English lower case letters a, b, c, ... z
- Westernized Arabic numerals 0, 1, 2, ... 9
- Non-alphanumeric ("special characters") Punctuation marks and other symbols
Upon receiving your account information, sign on (any node) and change your password immediately. This action will reset your domain password for all nodes. Let the CRADC custodian know immediately (cradc@cornell.edu) if this fails, but be sure to follow the rules for a legal password exactly.
All CRADC computing system users are required to change their password periodically. The system is automated to inform users when their account is due for a password change. Caution for users who use multiple CRADC sessions: If you change your password from one node while you have multiple sessions running (disconnected or active) on other nodes, you must logoff those sessions within 10 days. Failure to do so will result in an account
lockout. To check if you have sessions running on multiple CRADC nodes, from a CRADC node go to Start -> Programs -> Administrative Tools -> Terminal Services Manager.On CRADC nodes you should configure the IE browser to use http://info.cradc.cornell.edu as its home page. This is the top directory of the CRADC documentation system. There is no access to the Internet from CRADC.
In the instructions below [authorized_data] refers to the name of the folder on R:\ and S:\ that you have been authorized to use and [user_name] refers to your CRADC domain user name.
3. System Access
The CRADC domain has 2 compute nodes referred to as cradc201 and cradc202. To access a CRADC node from outside the firewall, use the Windows Terminal Services Client or Remote Desktop Client to connect to [node_name].cradc.cornell.edu. Insert the correct name of the node for [node_name].
4. System Requirements to Access the CRADC Nodes
- Operating System Requirements:
- Windows 2000, XP or higher versions of Windows
- Internet Explorer 6.0, Remote Desktop, or Terminal Services Client Software:
- Access to the CRADC compute nodes is possible with a Terminal Services Connection via Internet Explorer 6.0 http://nodes.cradc.cornell.edu/tsweb/
- OR by using Remote Desktop with Windows 2000 or XP (Note: Mac OS X v.10.1 or later may wish to download the Remote Desktop Connection Client from http://www.microsoft.com/mac/downloads.aspx).
5. Data Security
Your data use privileges apply to the data on CRADC file server under R:\[authorized_data] as indicated in your data user agreement. Your home folder and a shared project folder to work on that authorized_data are located on drive S:\. Your home folder is S:\[authorized_data]\[user_name]\. You create folders under S:\[authorized_data]\programs\projects\ to contain files that you want to share with other researchers with whom you are collaborating and who also have permission to access that data.
To request that a file be moved off the system and sent to you, please fill out the online CRADC file transfer request form available at http://www.ciser.cornell.edu/CRADC/computing_system/CRADC_file_transfer_request.shtml (from outside the firewall). Your file movement permissions are governed by the master data use agreement covering the confidential data to which you have been given access. A summary of these rules for your data access privileges was included in your personal data use agreement. The same procedure applies to files that you want to put on CRADC; however, in this case you will have to state that the file contains only programming and non-confidential data before it will be placed on the system. For data files that you wish to place on the system, you will be required to provide a citation that confirms that the data are public use.
6. Using R:\ and S:\
The R:\ and S:\ are the primary data storage area for the CRADC system.
R:\ houses data with only Read & Execute user permissions. S:\ houses user and shared project folders.
You have been granted access to folders on R:\ and S:\ in accordance with your data user agreement. Custom software and other system development activities are conducted in S:\Development. You have read access to this area unless you are doing development programming on CRADC.
7. Using C:\Documents and Settings\[user_name]\
Do not use your folder C:\Documents and Settings\[user_name]\ to save files. Any data that you store outside of S:\[authorized_data] may be erased automatically by the system.
8. Using Application Software
The following software are available on the system: SAS, STATA, MATLAB, GAUSS, R, Spotfire S+ (formerly S-PLUS), NLOGIT/Limdep, SPSS, Amos, Python, ATLAS-ti, Stat-Transfer, EditPlus and Microsoft Office Suite 2007. These statistical and document preparation software should allow you to write papers and collaborate with other authorized users without having to move files off of the system as frequently. If you encounter problems, contact the CRADC Manager to help you resolve them.
To use SAS, you have to point your SAS WORK library to your authorized folder under S:\. You can do this by adding the following line in your shortcut to SAS:–work S:\[authorized_data]\[user_name]
On CRADC nodes see http://info.cradc.cornell.edu for further documentation on the customization of SAS.
9. How to Logon to CRADC Compute Nodes (for New Users)
To connect to a CRADC node from your PC, you can use the Windows Terminal Services Client, Terminal Services Client Software or Remote Desktop Client, as described in step I. Next you respond to a warning message, as shown in step II. In step III you type in your CRADC user name and password to logon to your CRADC desktop.
I. A: To connect with the Terminal Services via Internet Explorer go to
http://nodes.cradc.cornell.edu/tsweb/ (Important Notes: This only works with Internet Explorer. The first time you do this you should get a pop-up window asking you if you wish to download and install "Active-X". Just say "yes" as this is required and only takes a few seconds. Please contact your network administrator if you are unable to install Active-X on your PC.)
- In the “Remote Desktop Web Connection” window type in the address for a CRADC node as shown below.
- Leave the "Send logon information... " box blank.
- The “Size” option allows you to select a size for viewing the CRADC desktop. Full-screen mode allows you to view the CRADC.NOTE: After you're logged on you can toggle out and back from Full Screen mode to Window mode by using Ctrl+Alt+Break
- Then choose "Connect".
B: To Connect via Remote Desktop Client on your PC
- Remote Desktop client is pre-installed on all Windows XP and Windows 2003 systems, and on some Windows 2000 systems.
- Windows 2000 users without the pre-installed version may download the (free) http://www.microsoft.com/windowsxp/downloads/tools/rdclientdl.mspx
Note: Access with earlier versions of Windows (Windows 95,98, and ME) is not supported by CRADC.- To Connect via RDC go to Start --> Programs --> Accessories --> Communications --> Remote Desktop Connection.
note: the precise command words may vary slight with other version of Windows. Use your system help menu to search for "Remote Desktop" or "Terminal Services" to find the application on your system.- Type in the name of the node to which you wish to connect as shown, and choose "Connect".
II. The system then displays a warning message informing that the system houses restricted-access data, as shown below. Click on “OK” at the bottom of the message.
III. The system will then provide you with a logon window. Enter your CRADC user name password (note: the “Log on to:” should be automatically set to “CRADC”), and click on OK. A sample logon window is shown below.
10. How to Close a CRADC Session: Logoff vs Disconnect (for New Users)
- DISCONNECT: To exit your CRADC session while your applications are still running.
- Do this only when you have programs that you wish to continue to run after you close your connection.
- To disconnect:
- go to "Start" --> "Shutdown" --> and choose "disconnect ".
- OR simply close the window by clicking the X box in the upper right corner of the window.
- You will remain logged on, but disconnected. When you next attempt to connect to that node you will automatically be returned to that session.
- Note: Disconnected sessions let CRADC users run their programs uninterrupted for days, and also give them the flexibility of preserving their work environments. However, we strongly recommend loging off your CRADC sessions, whenever possible. These forgotten disconnected sessions can result in account lockout problems when the user changes
her/his password as required by the system.
- LOG OFF: TO END YOUR SESSION
- Go to " Start" --> "Shutdown" --> and choose "Log off <your username>"
- TIP! To add a "Log off" option to your Start menu on a CRADC node:
- Go to "Start" --> "Settings" --> "Taskbar & Start Menu". Select the "Advanced " tab. Check the box beside " Display Logoff". Choose "OK".
- After that you can log off simply by going to "Start" --> "Log off <your username>".