Remote Login Service -

Remote Login Service

Contents

a cluster of access nodes will be used for an automatic and transparent forwarding to a suitable work group server of your group.
the deciding factor is your primary login group
choose the wgs with the lowest load
the user has possibilities to choose another destination or another group
users of groups which haven't an own wgs will be forwarded to a public wgs

the access systems need only an ssh and kerberos clearance in the firewall
backdoors are not possible
local root exploits on the access systems pose not longer a serious risk (except for the sshd )
Users of different groups will be distributed across different machines

Whenever cases of local root exploits came to light, we had have to act immediately. (multiple in the year, one compromized user account is sufficient)
Although all available security updates are rolling out quickly the login hosts are threatened by zero-day exploits
All users used the same login hosts. Several times the pubs could not used by other users because of overload (misusage for job processing, mathematica process or similar).

Further information and usage suggestions you can find here: Warp_Login_Usage.

The SSH is available from outside to DESY Zeuthen on the following public login hosts
pub.zeuthen.desy.de (pub1-pub6) for standard cases if warp concept doesn't work for you
transfer.zeuthen.desy.de for IO intensive datatransfers from/to outside. /acs is available. For security reasons SSH key authentication is not allowed for remote sessions from the Internet.
More information for SSH/SCP usage is here: https://it.desy.de/services/uco/documentation/ssh_scp/index_eng.html

Only for the cases that you don't have an chance to use a local client this service is offered. Be aware that the terminal emulation is limited, so special character support, ECS sequences and menu driven software may not work a aspected. The link will open a new browser window.
- https://bastion.desy.de:4200/