1560898 : DESY Science account for remote access -- MAXWELL Questions

Created: 2025-12-14T14:12:01Z - current status: new

Here is the anonymized and summarized version of the reported issue:

Summary of the Issue

A user with a newly created [SCIENCE_ACCOUNT] reports the following problems: 1. Access to the Maxwell cluster GUI (https://max-fs-display.desy.de:3389/) fails despite successful login to the DESY password manager (https://passwd.desy.de/) using their credentials and OTP. 2. Multi-Factor Authentication (MFA) setup instructions are inaccessible, preventing the user from configuring an authenticator app for their account.

The user confirms their account is active but cannot proceed with graphical login or MFA setup.

Possible Causes & Solutions

  1. MFA Not Configured
  2. The user’s account may require MFA setup before accessing graphical interfaces like max-fs-display.

  3. Solution: The user should first complete the MFA setup by following the instructions linked in the DESY documentation (e.g., here). If the link is inaccessible, they may need to request a direct link or alternative instructions from DESY IT support.

  4. Network/Proxy Restrictions

  5. The user’s network (e.g., eduroam) might block port 3389, which is required for browser-based access to max-fs-display.

  6. Solution: Try accessing the cluster via SSH (ssh max-fs-display.desy.de) as a fallback. If SSH works, the issue is likely network-related. Alternatively, use a different network (e.g., DESY VPN or a non-eduroam connection).

  7. Account Permissions

  8. The account might not yet have permissions to access the Photon Science display node (max-fs-display).

  9. Solution: Verify with DESY IT support whether the account is properly assigned to the Photon Science group. If not, request the correct group assignment.

  10. Browser/Client Limitations

  11. Browser-based access to max-fs-display may have compatibility issues (e.g., key shortcuts, clipboard).

  12. Solution: Use the FastX4 client (recommended for better performance) or try a different browser (e.g., Firefox/Chrome).

  13. Temporary Service Issue

  14. The max-fs-display service or MFA portal might be temporarily unavailable.
  15. Solution: Check DESY’s status page or contact IT support to confirm service availability.
  1. Complete MFA Setup
  2. Request the MFA setup instructions again from DESY IT support if the link is broken.

  3. Ensure the authenticator app (e.g., Google Authenticator, Microsoft Authenticator) is configured correctly.

  4. Test SSH Access

  5. Run: ssh [SCIENCE_ACCOUNT]@max-fs-display.desy.de

  6. If SSH works, the issue is likely browser/network-related.

  7. Contact DESY IT Support

  8. Provide the following details to support:
    • Account name: [SCIENCE_ACCOUNT]
    • Error messages (if any) when accessing max-fs-display or MFA instructions.
    • Network used (e.g., eduroam, home network).

Sources Referenced

  1. Photon Science Remote Login
  2. Interactive Login (Graphical)
  3. FastX4 Documentation
  4. Troubleshooting: Network Access from max-display