SSH on the sunray servers is set up to allow password authenticatin from the following subnets:

• 131.104.0.0/16 - The wired network on campus
• 10.0.0.0/8 - The wireless network on campus
• 192.168.0.0 - Private subnets on campus including Thornbrough 2418

All machines that allow LDAP login are set up with Kerberos/GSSAPI authentication. This allows a user to ssh to multiple services without having to type their password.

For staff and faculty who wish to log on to campus from off campus with password based authentication, portkey.socs.uoguelph.ca allows password authentication from all IP addresses. From here password or gssapi authentication is available for other SoCS machines.