Passwordless SSH HowTo - Revision history

Chris at 10:40, 28 August 2023

2023-08-28T10:40:22Z

← Older revision		Revision as of 10:40, 28 August 2023
Line 1:		Line 1:
	It's possible to use SSH to connect to ~~your LWP directly~~.<br>		It's possible to use SSH to connect from one LWP to another without using a password.<br>
	We have a login server available to access your home directory, so you don't have to leave your own PC turned on. It's not a big machine, so don't use it to do your work on or you'll bother other users trying to access their files.<br>		We have a login server available to access your home directory, so you don't have to leave your own PC turned on. It's not a big machine, so don't use it to do your work on or you'll bother other users trying to access their files.<br>
	<br>		<br>
Line 7:		Line 7:
	256 SHA256:Fck7jcOsqDtqcCFncx144z2tt12oMWXD4Jiz0LJbapw '''ssh.lwp.rug.nl''' (ECDSA)<br>		256 SHA256:Fck7jcOsqDtqcCFncx144z2tt12oMWXD4Jiz0LJbapw '''ssh.lwp.rug.nl''' (ECDSA)<br>
	<br>		<br>
	== Connecting to ~~the~~ LWP ~~from home~~ with SSH.==		== Connecting to another LWP with SSH.==
	Replace '''ssh.lwp.rug.nl''' with the hostname or ip-address of the machine you're trying to connect to.<br>		Replace '''ssh.lwp.rug.nl''' with the hostname or ip-address of the machine you're trying to connect to.<br>
	===Add your p-number to the allowed users list===		===Add your p-number to the allowed users list===
Line 22:		Line 22:
	''Note: This can only be done if you're logged in to a LWP; Use https://vlwp.rug.nl/ if you are not physically on a LWP.		''Note: This can only be done if you're logged in to a LWP; Use https://vlwp.rug.nl/ if you are not physically on a LWP.

	===Set up your own ~~system~~===		===Set up your own LWP===
	Use a USB drive to transfer your key pair to your own system securely.<br>		Use a USB drive to transfer your key pair to your own system securely.<br>
	cp ~/.ssh/lwp_rsa* /media/'''<your usb device>'''/		cp ~/.ssh/lwp_rsa* /media/'''<your usb device>'''/
Line 32:		Line 32:
	chmod 0600 ~/.ssh/lwp_rsa		chmod 0600 ~/.ssh/lwp_rsa
	Try the connection:		Try the connection:
	ssh -i ~/.ssh/lwp_rsa '''<username>'''@ssh.lwp.rug.nl		ssh -i ~/.ssh/lwp_rsa '''<username>'''@ssh.lwp.rug.nl or hostname or ip-address
	Make your life easier by creating a '''~/.ssh/config''' file and adding the following:		Make your life easier by creating a '''~/.ssh/config''' file and adding the following:
	host lwp		host other-lwp
	user '''<username>'''		user '''<username>'''
	IdentityFile ~/.ssh/lwp_rsa		IdentityFile ~/.ssh/lwp_rsa
	ForwardX11 yes		ForwardX11 yes
	HostName ssh.lwp.rug.nl		HostName ssh.lwp.rug.nl or hostname or ip-address
	Then connect with:		Then connect with:
	ssh lwp		ssh other-lwp
	~~Enter your password~~ and you should find yourself in your home directory.		and you should find yourself in your home directory.

Chris: Chris moved page SSH HowTo to Passwordless SSH HowTo without leaving a redirect: New SSH how to required, but old relevant for SSH without key

2023-08-28T10:27:40Z

Chris moved page SSH HowTo to Passwordless SSH HowTo without leaving a redirect: New SSH how to required, but old relevant for SSH without key

← Older revision	Revision as of 10:27, 28 August 2023
(No difference)

Chris at 09:05, 28 August 2023

2023-08-28T09:05:35Z

← Older revision		Revision as of 09:05, 28 August 2023
Line 1:		Line 1:
	It's possible to use SSH to connect to your LWP directly~~. To connect to any LWP from outside the university network we require 2 factor authentication. This is achieved by requiring a password and a ssh key to login~~.<br>		It's possible to use SSH to connect to your LWP directly.<br>
	We have a login server available to access your home directory, so you don't have to leave your own PC turned on. It's not a big machine, so don't use it to do your work on or you'll bother other users trying to access their files.<br>		We have a login server available to access your home directory, so you don't have to leave your own PC turned on. It's not a big machine, so don't use it to do your work on or you'll bother other users trying to access their files.<br>
	<br>		<br>
Line 8:		Line 8:
	<br>		<br>
	== Connecting to the LWP from home with SSH.==		== Connecting to the LWP from home with SSH.==
	Replace '''ssh.lwp.rug.nl''' with the hostname of the machine you're trying to connect to.<br>		Replace '''ssh.lwp.rug.nl''' with the hostname or ip-address of the machine you're trying to connect to.<br>
	===Add your p-number to the allowed users list===		===Add your p-number to the allowed users list===
	Add your p-number to the file /etc/users_allowed_ssh.		Add your p-number to the file /etc/users_allowed_ssh.

Chris: /* Create a new SSH key pair */

2023-05-08T10:28:22Z

Create a new SSH key pair

← Older revision		Revision as of 10:28, 8 May 2023
Line 14:		Line 14:
	Create a key pair using the following command:<br>		Create a key pair using the following command:<br>
	ssh-keygen -t rsa -b 4096 -C "LWP" -f ~/.ssh/lwp_rsa		ssh-keygen -t rsa -b 4096 -C "LWP" -f ~/.ssh/lwp_rsa
	If you don't work with linux you can go to https://vlwp.rug.nl/, login with your RUG account and do it there.		If you don't work with linux you can go to https://vlwp.rug.nl/, login with your RUG account and do it there.<br>
	''Note: You can enter any comment with the “-C” option, e.g. username@hostname, so you can easily see what you're using the key for. The “-C” option is not mandatory.''<br>		''Note: You can enter any comment with the “-C” option, e.g. username@hostname, so you can easily see what you're using the key for. The “-C” option is not mandatory.''<br>

Chris: /* Create a new SSH key pair */

2023-05-08T10:28:01Z

Create a new SSH key pair

← Older revision		Revision as of 10:28, 8 May 2023
Line 14:		Line 14:
	Create a key pair using the following command:<br>		Create a key pair using the following command:<br>
	ssh-keygen -t rsa -b 4096 -C "LWP" -f ~/.ssh/lwp_rsa		ssh-keygen -t rsa -b 4096 -C "LWP" -f ~/.ssh/lwp_rsa
			If you don't work with linux you can go to https://vlwp.rug.nl/, login with your RUG account and do it there.
	''Note: You can enter any comment with the “-C” option, e.g. username@hostname, so you can easily see what you're using the key for. The “-C” option is not mandatory.''<br>		''Note: You can enter any comment with the “-C” option, e.g. username@hostname, so you can easily see what you're using the key for. The “-C” option is not mandatory.''<br>

	===Add your public key to the authorized_keys file===		===Add your public key to the authorized_keys file===
	To allow your account to login to the LWP you'll have to add your public key to a authorized_keys file:<br>		To allow your account to login to the LWP you'll have to add your public key to a authorized_keys file:<br>

Chris: /* Add your public key to the authorized_keys file */

2023-04-21T08:58:46Z

Add your public key to the authorized_keys file

← Older revision		Revision as of 08:58, 21 April 2023
Line 18:		Line 18:
	To allow your account to login to the LWP you'll have to add your public key to a authorized_keys file:<br>		To allow your account to login to the LWP you'll have to add your public key to a authorized_keys file:<br>
	cat ~/.ssh/lwp_rsa.pub >> ~/.ssh/authorized_keys		cat ~/.ssh/lwp_rsa.pub >> ~/.ssh/authorized_keys
	''Note: This can only be done if you're logged in to a LWP~~, but because of COVID that isn't an option for most, therefore you can send [mailto~~:~~lwp@~~rug.nl ~~us] your public key and~~ a ~~picture of your RUG-pas (so we can verify it's you) then we'll add it for you~~.''		''Note: This can only be done if you're logged in to a LWP; Use https://vlwp.rug.nl/ if you are not physically on a LWP.

	===Set up your own system===		===Set up your own system===

Chris at 16:22, 17 February 2023

2023-02-17T16:22:19Z

← Older revision		Revision as of 16:22, 17 February 2023
Line 9:		Line 9:
	== Connecting to the LWP from home with SSH.==		== Connecting to the LWP from home with SSH.==
	Replace '''ssh.lwp.rug.nl''' with the hostname of the machine you're trying to connect to.<br>		Replace '''ssh.lwp.rug.nl''' with the hostname of the machine you're trying to connect to.<br>
			===Add your p-number to the allowed users list===
			Add your p-number to the file /etc/users_allowed_ssh.
	===Create a new SSH key pair===		===Create a new SSH key pair===
	Create a key pair using the following command:<br>		Create a key pair using the following command:<br>

Chris at 10:44, 11 May 2021

2021-05-11T10:44:50Z

← Older revision		Revision as of 10:44, 11 May 2021
Line 3:		Line 3:
	<br>		<br>
	The login server '''ssh-hostkeys''':<br>		The login server '''ssh-hostkeys''':<br>
	~~256~~ SHA256:~~AJ8LcLyE0~~+~~my7uUW24A5iZ4Sr/7wU/KdK6l72A69T80~~ '''ssh.lwp.rug.nl''' (~~ECDSA~~)<br>		2048 SHA256:BqwCk82bRDxY3YLkumDcr8d0RKExSCX+zbsgdDyfF4w '''ssh.lwp.rug.nl''' (RSA)<br>
	~~2048~~ SHA256:~~Zg6Z6ULOPP/991wsBe0ioMD2lENX4ewYMgTS90Hky/M~~ '''ssh.lwp.rug.nl''' (~~RSA~~)<br>		256 SHA256:MfSPCbM20GbH+zMDUAEFzk80vTxF2890ch2EQJjEi3o '''ssh.lwp.rug.nl''' (ED25519)<br>
	256 SHA256:~~YeSHwEfASFD5EckDwl2X2rbmhDtZ12+5HCOzvG9n6BI~~ '''ssh.lwp.rug.nl''' (~~ED25519~~)<br>		256 SHA256:Fck7jcOsqDtqcCFncx144z2tt12oMWXD4Jiz0LJbapw '''ssh.lwp.rug.nl''' (ECDSA)<br>
	<br>		<br>
	== Connecting to the LWP from home with SSH.==		== Connecting to the LWP from home with SSH.==

Chris: /* Add your public key to the authorized_keys file */

2021-04-07T14:28:59Z

Add your public key to the authorized_keys file

← Older revision		Revision as of 14:28, 7 April 2021
Line 16:		Line 16:
	To allow your account to login to the LWP you'll have to add your public key to a authorized_keys file:<br>		To allow your account to login to the LWP you'll have to add your public key to a authorized_keys file:<br>
	cat ~/.ssh/lwp_rsa.pub >> ~/.ssh/authorized_keys		cat ~/.ssh/lwp_rsa.pub >> ~/.ssh/authorized_keys
	''Note: This can only be done if you're logged in to a LWP, but because of COVID that isn't an option for most, therefore you can send [mailto:lwp@rug.nl us] your public key and we'll add it.''		''Note: This can only be done if you're logged in to a LWP, but because of COVID that isn't an option for most, therefore you can send [mailto:lwp@rug.nl us] your public key and a picture of your RUG-pas (so we can verify it's you) then we'll add it for you.''

	===Set up your own system===		===Set up your own system===

Chris: /* Add your public key to the authorized_keys file */

2021-04-01T13:26:10Z

Add your public key to the authorized_keys file

← Older revision		Revision as of 13:26, 1 April 2021
Line 16:		Line 16:
	To allow your account to login to the LWP you'll have to add your public key to a authorized_keys file:<br>		To allow your account to login to the LWP you'll have to add your public key to a authorized_keys file:<br>
	cat ~/.ssh/lwp_rsa.pub >> ~/.ssh/authorized_keys		cat ~/.ssh/lwp_rsa.pub >> ~/.ssh/authorized_keys
	''Note: This can ~~normally~~ only be done if you're logged in to a LWP, but because of COVID that isn't an option for most, therefore you can send [mailto:lwp@rug.nl us] your public key and we'll add it.''		''Note: This can only be done if you're logged in to a LWP, but because of COVID that isn't an option for most, therefore you can send [mailto:lwp@rug.nl us] your public key and we'll add it.''

	===Set up your own system===		===Set up your own system===
	Use a USB drive to transfer your key pair to your own system securely.<br>		Use a USB drive to transfer your key pair to your own system securely.<br>