Differences between revisions 7 and 8
Revision 7 as of 2019-09-09 15:51:26
Size: 1461
Comment: fix formatting & wording, remove broken link
Revision 8 as of 2019-09-09 15:56:57
Size: 1857
Comment:
Deletions are marked like this. Additions are marked like this.
Line 13: Line 13:
 The SSH is available from outside to DESY Zeuthen on the following public login hosts The SSH is available from outside to DESY Zeuthen on the following public login hosts
Line 18: Line 18:
 For security reasons SSH key authentication is not allowed for remote sessions from the Internet. === SSH Login without Password ===
Line 20: Line 20:
 <<BR>>
 Helpful links
For security reasons SSH key authentication is not allowed for remote sessions from the Internet. They're also mostly useless internally.

Passwordless access is possible using GSSAPI authentication. This requires a Kerberos 5 ticket for our realm (see `/etc/krb5.conf` on one of our systems for a configuration example) and the use of the openssh options `GSSAPIAuthentication` and `GSSAPIDelegateCredentials` (recent versions enable both with the `-K` parameter).

Helpful links

Remote Login Service

WARP - The Concept for Remote Login Service with more Safety

Remote login with SSH

The SSH is available from outside to DESY Zeuthen on the following public login hosts

  • pub.zeuthen.desy.de (pub1-pub6) - deprecated - only use if warp doesn't work for you

  • transfer.zeuthen.desy.de for I/O intensive data transfers from/to outside. /acs and /lustre are available.

SSH Login without Password

For security reasons SSH key authentication is not allowed for remote sessions from the Internet. They're also mostly useless internally.

Passwordless access is possible using GSSAPI authentication. This requires a Kerberos 5 ticket for our realm (see /etc/krb5.conf on one of our systems for a configuration example) and the use of the openssh options GSSAPIAuthentication and GSSAPIDelegateCredentials (recent versions enable both with the -K parameter).

Helpful links

Web based Client

Only for the cases that you don't have a chance to use a local client this service is offered. Be aware that the terminal emulation is limited, so special character support, ECS sequences and menu driven software may not work a aspected. The link will open a new browser window. You get a terminal session on the pal cluster in DESY Hamburg.

Remote Login Service (last edited 2019-09-09 15:56:57 by StephanWiesand)