SSH usage

IMPORTANT IST now blocks password based SSH to most systems

• This prenstly does NOT effect users connected to the University via VPN
  • See: https://cs.uwaterloo.ca/twiki/view/CF/VPNServices
  • vpn.cs.uwaterloo.ca for details of the CS VPN
  • vpn.uwaterloo.ca for details of the IST VPN

SSH key types

• Some old SSH key types are longer accepted.
• With newer systems - you MUST use newer key types such as ed25519 keys for ssh access to work connecting to newer systems

Howto

• CS Howto page

SSHFS - Examples of using Ubuntu file manager to connect via SSH to any server you can log into

• SshFs - Access files using SSH

SSH Client for Windows

MobaXterm SSH and Xterm Web site

SSH Keys instead of passwords - highly recommended for frequent access

• You can log in or access a remote account without using a password by following these steps

1. mkdir ~/.ssh
2. If you do not have an SSH public key yet then run this command
   • ssh-keygen -t dsa
3. repeat for rsa, ecdsa, ed25519
4. copy the contents of the ~.ssh/*.pub file and add it to the end of the file ~/.ssh/authorized_keys on the remote host (create this file if it does not exist)

• Note:
  • ssh-keygen -b 2048 -t rsa is probably better

SSH Keys notes"> Other SSH Keys notes

• Host based SSH: SSHHostBasedAuthentication
• SCS-specific notes: https://cs.uwaterloo.ca/cscf/howto/ssh/public_key/
• CS Course SSH keys: CourseAccountSshKeyAccess and/or http://www.cs.uwaterloo.ca/cscf/howto/ssh/public_key/
• Linux (Gnome) environment: http://sshmenu.sourceforge.net/articles/key-setup.html
• IST notes using SSH Secure Shell (Windows) client: http://www.ist.uwaterloo.ca/cs/ssh/sshkeypairs.html

SSH Port Forwarding

1. 1. ) This does an SSH connection to userid@unixbox.example.org with X windows forwarding
   2. ) Forwards port 3389 to a local port on the client computer 3390.
      • remotepc can be a DNS name known by unixbox.example.org - or an IP
        • In fact unixbox.example.org can be running a private DNS on a NAT and this name lookup will.
   3. ) you can have as many -L forwards as you wish

SSH Agent Forwarding

• http://sshmenu.sourceforge.net/articles/transparent-mulithop.html

Proxy

• http://sshmenu.sourceforge.net/articles/transparent-mulithop.html