===============================================================================

              *** Browser Access To Internal GFDL Webpages ***
                    [e.g. http://cobweb.gfdl.noaa.gov/]


o These instructions will allow one to reach GFDL internal webpages (and
  perhaps NOAA webpages?) from your home computer. There are two tasks:
     * Configure your browser to enable "Auto Proxy Configuration"
     * Establish an ssh connection to GFDL


o Configure browser to enable "Auto Proxy Configuration" [old instructions]
     https://extranet.gfdl.noaa.gov/~John.Lanzante/MAIN/proxy_doc.pdf

  Google Chrome
    Settings --> Advanced --> System --> Open Your Computer's Proxy Settings
       Network box: Check "Automatic Proxy Configuration" & enter into the box:
          http://www.gfdl.noaa.gov/www-proxy.pac
  Firefox
     Preferences --> General --> Network Settings --> Settings ...
        Check "Automatic proxy configuration URL" and enter into that box:
           http://www.gfdl.noaa.gov/www-proxy.pac
  Safari
     Preferences --> Advanced --> click "Change Settings" next to "Proxies"
        Check "Web Proxy (HTTP)" and enter into box "Web Proxy Server":
           http://www.gfdl.noaa.gov/www-proxy.pac


o Login into GFDL via ssh with local port forwarding "3128:mayflower:3128"
  [using RSA fob for authentication]

  ssh -l John.Lanzante -L 3128:mayflower:3128 ssh.gfdl.noaa.gov

  After connecting via RSA fob I am able to access:
     http://cobweb.gfdl.noaa.gov/

  I may be able to access NOAA sites with restricted access?
  I might have to refresh browser and cancel quickly to do so?


o Access to restricted government pages (access limited to GFDL IP address)
    Sometimes it may be possible to fool the system through trial and error.
    I may need to establish the connection using the "auto proxy" connection
    detailed above and then access cobweb -- but it's not clear if this is
    necessary. In any event I should load the restricted page and repeatedly
    refresh the browser to cancel the loading very quickly (this may take many
    tries). I may have to clear the cache and/or close the browser -- it is
    hit or miss. For example the enterprise services page which gives access
    to EPP:
       https://enterpriseservices.servicenowservices.com/
    or
       https://enterpriseservices.servicenowservices.com/esc?sys_kb_id=87864ff41b37245020ee63dbe54bcbf5&id=kb_article_view&sysparm_rank=2&sysparm_tsqueryId=25d58c9a1bdff050dfd6dbdbe54bcbfb

     From the Enterprise Services Page:
        Select Your Bureau to Sign In (NOAA)
        At "Unable to read certificate on smart card" click "Continue"
        At the LOGIN prompt enter First.Last@noaa.gov and ICAM password
        At "WARNING" click "ACCEPT"
        Scroll down and click on "HR MyEPP"
===============================================================================