Welcome Page
DEIMOS/LRIS
Slitmask Submission


Welcome to the DEIMOS/LRIS slitmask interface.

Slitmask users from authorized sites can proceed directly to the
secure login page.

Configuration of your web browser

Actions that you may have to take before your browser lets you see the slitmask interface

Firefox 3 will warn users that it does not recognize the SSL certificate that enables secure communications with the UCO/Lick webserver. The words in the warning from Firefox 3 have included "invalid", but this is a distortion which simply means that UCO/Lick has not purchased an SSL certificate from an authority which has paid the Firefox crew not to put up that warning. The SSL certificate used on the UCO/Lick webservers will ensure that the communications are encrypted, and security beyond that is usually only of concern for espionage and financial transactions.

As indicated by Firefox3, such users can proceed by informing their Firefox 3 that the UCO/Lick SSL certificate is acceptable, for which their word has been "exception".

It may be that your browser uses a proxy (or will have to use a proxy) to route HTTP traffic with the UCO/Lick web server. Configuration of any proxy used by your browser is your responsibility. See below for more on access via proxy.

Configuration of the UCO/Lick web server

Actions that we may have to take before our web server lets you see the slitmask interface

Users from sites not currently authorized will not be able to access the login page.

If access is desired from host(s) within an academic or organizational domain which has PTR entries in DNS ( reverse DNS lookup; i.e., given the IP address it is possible to find the domain name) then please provide the domain name.
Otherwise, if the host has a fully-qualified hostname in DNS (an A record) then send that.
Otherwise, if the host has a static IP address then send that along with an explanation of why you believe it is not served by DNS and why you believe it is static.
Otherwise, if the HTTP access is through a proxy (or proxies) then please send the IP address (or range thereof) used to proxy the traffic.

We are unlikely to authorize access from a machine which can only be identified by a dynamic IP address (such as is assigned by DHCP) or via PTR records which map to a domain name that might belong to any one of the customers of a commercial internet service provider. For such cases we point out that it is often possible to configure the browser to use a SOCKS proxy (such as the one implemented by the "-D" switch of OpenSSH) to tunnel the HTTPS traffic through a host within your academic or organizational domain.

Please do not send any IP addresses of the form 10.x.y.z or 192.168.x.y, for these are private network addresses which are only valid for hosts hidden behind some kind of router using NAT (see RFC 1918).

For reference, your IP address currently appears to be 38.107.191.103

For questions about your local network configuration please consult with your local system or network administrators.

To request authorization please write to Slitmask Admin <slitmasks@ucolick.org> .

Slitmask manufacture, storage, and configuration for observations

Keck Observatory performs all physical handling of slitmasks

We direct observers to the web pages at Keck Observatory for the operational particulars of the instruments DEIMOS and LRIS.

Observer access to the database of slitmasks is via the UCO/Lick web server, but please also see the Keck web page on using the slitmask database.


Please report any problems with the slitmask web pages to Slitmask Admin <slitmasks@ucolick.org> .