== Remote Login Service ==
<<TableOfContents>>

=== WARP - The Concept for Remote Login Service with more Safety ===
 {{{
    ssh warp.zeuthen.desy.de
 }}} 

   * Further information and usage suggestions, e.g. VNC session, you can find here: [[Warp_Login_Usage]].
   * [[Remote_Login | Warp - The Concept]]

=== Remote login with SSH ===
The SSH is available from outside to DESY Zeuthen on the following public login hosts
  * ''pub.zeuthen.desy.de''  (pub1-pub6) - deprecated - only use if warp doesn't work for you
  
  * ''transfer.zeuthen.desy.de''  for I/O intensive data transfers from/to outside. /acs and /lustre are available.

=== SSH Login without Password ===

For security reasons SSH key authentication is not allowed for remote sessions from the Internet. They're also mostly useless internally.

Passwordless access is possible using GSSAPI authentication. This requires a Kerberos 5 ticket for our realm (see `/etc/krb5.conf` on one of our systems for a configuration example) and the use of the openssh options `GSSAPIAuthentication` and `GSSAPIDelegateCredentials` (recent versions enable both with the `-K` parameter).

Helpful links 
  * [[http://www.desy.de/d4/ssh-tunnel-en.html| ssh tunnel with putty]]
  * [[https://dv-zeuthen.desy.de/services/windows/remote_zugang/| Accessing remotely your Windows Desktop or Terminal Services at DESY Zeuthen via SSH tunneling using Windows or Linux/UNIX]]

=== Web based Client ===
 
Only for the cases that you don't have a chance to use a local client this service is offered. Be aware that the terminal emulation is limited, so special character support, ECS sequences and menu driven software may not work a aspected. The link will open a new browser window. You get a terminal session on the pal cluster in DESY Hamburg.

    https://bastion.desy.de:4200/