View source for Passwordless SSH HowTo

It's possible to use SSH to connect to your LWP directly. To connect to any LWP from outside the university network we require 2 factor authentication. This is achieved by requiring a password and a ssh key to login.<br>
We have a login server available to access your home directory, so you don't have to leave your own PC turned on. It's not a big machine, so don't use it to do your work on or you'll bother other users trying to access their files.<br>
<br>
The login server '''ssh-hostkeys''':<br>
2048 SHA256:BqwCk82bRDxY3YLkumDcr8d0RKExSCX+zbsgdDyfF4w '''ssh.lwp.rug.nl''' (RSA)<br>
256 SHA256:MfSPCbM20GbH+zMDUAEFzk80vTxF2890ch2EQJjEi3o '''ssh.lwp.rug.nl''' (ED25519)<br>
256 SHA256:Fck7jcOsqDtqcCFncx144z2tt12oMWXD4Jiz0LJbapw '''ssh.lwp.rug.nl''' (ECDSA)<br>
<br>
== Connecting to the LWP from home with SSH.==
Replace '''ssh.lwp.rug.nl''' with the hostname of the machine you're trying to connect to.<br>
===Add your p-number to the allowed users list===
Add your p-number to the file /etc/users_allowed_ssh.
===Create a new SSH key pair===
Create a key pair using the following command:<br>
  ssh-keygen -t rsa -b 4096 -C "LWP" -f ~/.ssh/lwp_rsa
''Note: You can enter any comment with the “-C” option, e.g. username@hostname, so you can easily see what you're using the key for. The “-C” option is not mandatory.''<br>
===Add your public key to the authorized_keys file===
To allow your account to login to the LWP you'll have to add your public key to a authorized_keys file:<br>
  cat ~/.ssh/lwp_rsa.pub >> ~/.ssh/authorized_keys
''Note: This can only be done if you're logged in to a LWP; Use https://vlwp.rug.nl/ if you are not physically on a LWP.

===Set up your own system===
Use a USB drive to transfer your key pair to your own system securely.<br>
  cp ~/.ssh/lwp_rsa* /media/'''<your usb device>'''/
Copy your key pair to your home directory:<br>
  mkdir ~/.ssh
  cp /media/'''<your usb device>'''/lwp_rsa* ~/.ssh/
Set the correct permissions:<br>
  chmod 0700 ~/.ssh
  chmod 0600 ~/.ssh/lwp_rsa
Try the connection:
  ssh -i ~/.ssh/lwp_rsa '''<username>'''@ssh.lwp.rug.nl
Make your life easier by creating a '''~/.ssh/config''' file and adding the following:
 host lwp
 user '''<username>'''
 IdentityFile ~/.ssh/lwp_rsa
 ForwardX11 yes
 HostName ssh.lwp.rug.nl
Then connect with:
 ssh lwp
Enter your password and you should find yourself in your home directory.