School of Computer Science Wiki

You've loaded an old revision of the document! If you save it, you will create a new version with this data.

==== SoCS SSH Access ====

=== The Basics ===

SSH Allows you to remotely connect to SoCS Linux servers. To connect from a Linux or Mac OS/X base computer, use the command "ssh <username>@<hostname>socs.uoguelph.ca", where <username> is your SoCS username and <hostname> is the name of the server you wish to connect to (i.e. linux, portkey). To connect from Windows use [[https://wiki.socs.uoguelph.ca/students/sshaccess|puTTY]].

=== Off-Campus Access ===
The CCS Firewall blocks ssh access to most hosts from off campus. To connect from off campus there are two options:

* Connect to portkey.socs.uoguelph.ca and from there connect to your desired host
  * Set up the CCS VPN. Instructions can be found at [[http://vpn.uoguelph.ca|vpn.uoguelph.ca]]

=== SSH Keys ===

SSH Keys allow you to use a key to connect instead of using your password. This has the benefit of being both more secure, and more convenient to use.

To set up public key private key access to linux:

== Part A On OS/X or Linux ==
  - Have a passphrase (password) handy that you can remember.
  - Open a terminal window
  - Type ssh-keygen -t rsa -C yourusername@linux.socs.uoguelph.ca  at the command prompt
    - Press return to accept the default file locations for storing keys
    - Enter your passphrase when prompted (make sure you can remember it)
    - Enter the SAME passphrase again
  - In the same terminal window,  change to your .ssh directory. A foolproof way to do this is to first type cd followed by return, then type cd .ssh
  - Type "more id_rsa.pub"  without the quotes
  - Copy the long string of text that begins with ssh-rsa and ends with yourusername@linux.socs.uoguelph.ca.  It will wrap across several lines.
  - Keep that text in the clipboard for the next step and go to Part B For all Platforms

== Part A Windows ==
  - Have a passphrase(password) handy that you can remember
  - If you don't already have puTTY installed you can download it [[https://www.chiark.greenend.org.uk/~sgtatham/putty/latest.html|here]]
  - Start the PuTTYgen utility, by double-clicking on its .exe file
  - For Type of key to generate, select SSH-2 RSA
  - In the Number of bits in a generated key field, specify either 2048
  - Click the Generate button
  - Move your mouse pointer around in the blank area of the Key section, below the progress bar until the progress bar is full
  - A private/ public key pair has now been generated
  - In the Key comment field, enter any comment you'd like, to help you identify this key pair, later (e.g. your e-mail address; home; office; etc.) -- the key comment is particularly useful in the event you end up creating more than one key pair
  - Type a passphrase in the Key passphrase field & re-type the same passphrase in the Confirm passphrase field
  - Click the Save public key button & choose whatever filename you'd like (some users create a folder in their computer named my_keys)
  - Click the Save private key button & choose whatever filename you'd like (you can save it in the same location as the public key, but it should be a location that only you can access and that you will NOT lose! If you lose your keys and have disabled username/password logins, you will no longer be able log in!)
  - Right-click in the text field labeled Public key for pasting into OpenSSH authorized_keys file and choose Select All
  - Right-click again in the same text field and choose Copy.
  - Keep the text in your clipboard for the next step.

== Part B For all platforms ==

- ssh to portkey.scos.uoguelph.ca using your SoCS login and password (use putty on windows if you don't have a different client.  On OS/X and linux just use a terminal)
  - Type "cd .ssh" at the command prompt (without the quotes).
  - If you get an error ".ssh No such file or directory", type "mkdir .ssh", then type "cd .ssh", otherwise ignore this step".
  - Use your favourite command line editor (vim, nano, emacs or whichever) to edit the authorized_keys file
    * i.e.  type 'nano authorized_keys' at the command line
    * Unless you've done this step once already, you will be creating this file.  it MUST be called authorized_keys
  - Paste in the long string of text that you copied to your clipboard in step A
  - Save the file.
  - Log out of Portkey.

== Part C For all platforms ==
  - Open putty or a terminal window
  - ssh to portkey.socs.uoguelph.ca
  - You SHOULD be prompted for the passphrase you used in Part A, and then you should connect to portkey.
  - This login method works for secure FTP programs too, such as filezilla, which will allow you to ftp files directly to your linux account.

Once you have your ssh keys set up you will be able to use them to log in to any SoCS Linux server (i.e. portkey, linux). Remember, you can only log into portkey directly from off campus unless you've set up the CCS VPN.

Edit summary

Note: By editing this page you agree to license your content under the following license: CC Attribution-Noncommercial-Share Alike 4.0 International