Difference: PPDBastionHost (1 vs. 8)

Access to the PPD SSH Bastion

Accounts on the PPD SSH bastion are separate from the standard PPD linux account and need to be requested from PPDITHelpdesk@stfc.ac.uk.

The Bastion host only supports ssh key authentication not passwords so you need to send us a copy of your public key. If you want to use ssh keys to log on to the PPD Linux machines or Windows Terminal Server please set up a separate key pair for that and use ssh-agent to manage them. We will occasionally compare authorized_key files.

Creating an ssh key pair.

ssh-keygen -t rsa [-C "Comment"] [-f output_keyfile] 

if you don't supply the "-f output_keyfile" this prompt you for the files to create, the default being ~/.ssh/id_rsa and ~/.ssh/id_rsa.pub. It will then prompt you for a passphrase to encrypt you private key, please choose a strong passphrase.

If you are logging in from a linux or OSX desktop/laptop you may be able to run ssh-add to load up your new ssh key into an "agent" that will save you having to enter the passphrase every time you log in. Instructions for using the ssh agent with PuTTY on the PPD Windows desktops can be found here.

Logging onto the PPD SSH Bastion

ssh [-i private_keyfile] <username>@&voyager.pp.rl.ac.uk 

If your ssh-keyfile is in the standard location or you are using an agent you can omit the -i option.

This will present you with a normal bash shell on the bastion host, from there you can ssh on to the PPD Linux systems or Windows Terminal Server. The home area is local to the bastion host but your PPD linux home area is available under /home/ppd/<username>.

If you use ssh-agent a useful way of simplifying this is to add the following section to your .ssh/config file

Host voyager
   Hostname              voyager.pp.rl.ac.uk
   ForwardAgent          yes
   ForwardX11            yes
   ControlMaster         auto
   ControlPath           /tmp/%r@%h:%p
   ServerAliveInterval   15
   ServerAliveCountMax   3
   ProxyCommand          none

Then create an alias such as:

alias bssh='ssh -o "ProxyCommand = ssh <your-bastion-username>@voyager nc %h %p 2> /dev/null"'

That will allow you to run bssh <host> to log into one of the PPD machines.

This also works with scp so you can also define:

alias bscp='scp -o "ProxyCommand = ssh <your-bastion-username>@voyager nc %h %p 2> /dev/null”’

Access to the PPD SSH Bastion

Accounts on the PPD SSH bastion are separate from the standard PPD linux account and need to be requested from PPDITHelpdesk@stfc.ac.uk.

The Bastion host only supports ssh key authentication not passwords so you need to send us a copy of your public key. If you want to use ssh keys to log on to the PPD Linux machines or Windows Terminal Server please set up a separate key pair for that and use ssh-agent to manage them. We will occasionally compare authorized_key files.

Creating an ssh key pair.

ssh-keygen -t rsa [-C "Comment"] [-f output_keyfile] 

if you don't supply the "-f output_keyfile" this prompt you for the files to create, the default being ~/.ssh/id_rsa and ~/.ssh/id_rsa.pub. It will then prompt you for a passphrase to encrypt you private key, please choose a strong passphrase.

If you are logging in from a linux or OSX desktop/laptop you may be able to run ssh-add to load up your new ssh key into an "agent" that will save you having to enter the passphrase every time you log in. Instructions for using the ssh agent with PuTTY on the PPD Windows desktops can be found here.

Logging onto the PPD SSH Bastion

ssh [-i private_keyfile] <username>@&voyager.pp.rl.ac.uk 

If your ssh-keyfile is in the standard location or you are using an agent you can omit the -i option.

This will present you with a normal bash shell on the bastion host, from there you can ssh on to the PPD Linux systems or Windows Terminal Server. The home area is local to the bastion host but your PPD linux home area is available under /home/ppd/<username>.

If you use ssh-agent a useful way of simplifying this is to add the following section to your .ssh/config file

Host voyager
   Hostname              voyager.pp.rl.ac.uk
   ForwardAgent          yes
   ForwardX11            yes
   ControlMaster         auto
   ControlPath           /tmp/%r@%h:%p
   ServerAliveInterval   15
   ServerAliveCountMax   3
   ProxyCommand          none

Then create an alias such as:

alias bssh='ssh -o "ProxyCommand = ssh <your-bastion-username>@voyager nc %h %p 2> /dev/null"'

That will allow you to run bssh <host> to log into one of the PPD machines.

This also works with scp so you can also define:

alias bscp='scp -o "ProxyCommand = ssh <your-bastion-username>@voyager nc %h %p 2> /dev/null”’

Access to the PPD SSH Bastion

Accounts on the PPD SSH bastion are separate from the standard PPD linux account and need to be requested from PPDITHelpdesk@stfc.ac.uk.

Creating an ssh key pair.

ssh-keygen -t rsa [-C "Comment"] [-f output_keyfile] 

if you don't supply the "-f output_keyfile" this prompt you for the files to create, the default being ~/.ssh/id_rsa and ~/.ssh/id_rsa.pub. It will then prompt you for a passphrase to encrypt you private key, please choose a strong passphrase.

If you are logging in from a linux or OSX desktop/laptop you may be able to run ssh-add to load up your new ssh key into an "agent" that will save you having to enter the passphrase every time you log in. Instructions for using the ssh agent with PuTTY on the PPD Windows desktops can be found here.

Logging onto the PPD SSH Bastion

ssh [-i private_keyfile] <username>@&voyager.pp.rl.ac.uk 

If your ssh-keyfile is in the standard location or you are using an agent you can omit the -i option.

Host voyager
   Hostname              voyager.pp.rl.ac.uk
   ForwardAgent          yes
   ForwardX11            yes
   ControlMaster         auto
   ControlPath           /tmp/%r@%h:%p
   ServerAliveInterval   15
   ServerAliveCountMax   3
   ProxyCommand          none

Then create an alias such as:

alias bssh='ssh -o "ProxyCommand = ssh <your-bastion-username>@voyager nc %h %p 2> /dev/null"'

That will allow you to run bssh <host> to log into one of the PPD machines.

This also works with scp so you can also define:

alias bscp='scp -o "ProxyCommand = ssh <your-bastion-username>@voyager nc %h %p 2> /dev/null”’

-- ChrisBrew - 2013-09-09

Access to the PPD SSH Bastion

Accounts on the PPD SSH bastion are separate from the standard PPD linux account and need to be requested from PPDITHelpdesk@stfc.ac.uk.

The Bastion host only supports ssh key authentication not passwords so you need to send us a copy of your public key. If you want to use ssh keys to log on to the PPD linux machines please set up a separate key pair for that and use ssh-agent to manage them. We will occasionally compare authorized_key files.

Creating an ssh key pair.

ssh-keygen -t rsa [-C "Comment"] [-f output_keyfile] 

if you don't supply the "-f output_keyfile" this prompt you for the files to create, the default being ~/.ssh/id_rsa and ~/.ssh/id_rsa.pub. It will then prompt you for a passphrase to encrypt you private key, please choose a strong passphrase.

Logging onto the PPD SSH Bastion

This will present you with a normal bash shell on the bastion host, from there you can ssh on to the PPD linux systems. The home area is local to the bastion host but your PPD linux home area is available under /home/ppd/<username>.

If you use ssh-agent a useful way of simplifying this is to add the following section to your .ssh/config file

Then create an alias such as:

That will allow you to run bssh <host> to log into one of the PPD machines.

This also works with scp so you can also define:

-- ChrisBrew - 2013-09-09

Access to the PPD SSH Bastion

Creating an ssh key pair.

ssh-keygen -t rsa [-C "Comment"] [-f output_keyfile] 

if you don't supply the "-f output_keyfile" this prompt you for the files to create, the default being ~/.ssh/id_rsa and ~/.ssh/id_rsa.pub. It will then prompt you for a passphrase to encrypt you private key, please choose a strong passphrase.

If you are logging in from a linux or OSX desktop/laptop you may be able to run ssh-add to load up your new ssh key into an "agent" that will save you having to enter the passphrase every time you log in.

Logging onto the PPD SSH Bastion

ssh [-i private_keyfile] <username>@<host>.pp.rl.ac.uk 

If your ssh-keyfile is in the standard location or you are using an agent you can omit the -i option.

This will present you with a normal bash shell on the bastion host, from there you can ssh on to the PPD linux systems. The home area is local to the bastion host but your PPD linux home area is available under /home/ppd/<username>.

If you use ssh-agent a useful way of simplifying this is to add the following section to your .ssh/config file

Host bastion
   Hostname              heplnv020.pp.rl.ac.uk
   ForwardAgent          yes
   ForwardX11            yes
   ControlMaster         auto
   ControlPath           /tmp/%r@%h:%p
   ServerAliveInterval   15
   ServerAliveCountMax   3
   ProxyCommand          none

Then create an alias such as:

alias bssh='ssh -o "ProxyCommand = ssh <your-bastion-username>@bastion nc %h %p 2> /dev/null"'

That will allow you to run bssh <host> to log into one of the PPD machines.

Access to the PPD SSH Bastion

Accounts on the PPD SSH bastion are separate from the standard PPD linux account and need to be requested from PPD.IT.Helpdesk@stfc.ac.uk.

The Bastion host only supports ssh key authentication not passwords so you need to send us a copy of your public key. If you want to use ssh keys to log on to the PPD linux machines please set up a separate key pair for that and use ssh-agent to manage them. We will occasionally compare authorized_key files.

Creating an ssh key pair.

Logging onto the PPD SSH Bastion

Then create an alias such as:

Access to the PPD SSH Bastion

Accounts on the PPD SSH bastion are separate from the standard PPD linux account and need to be requested from PPD.IT.Helpdesk@stfc.ac.uk.

The Bastion host only supports ssh key authentication not passwords so you need to send us a copy of your public key. If you want to use ssh keys to log on to the PPD linux machines please set up a separate key pair for that and use ssh-agent to manage them. We will occasionally compare authorized_key files.

Creating an ssh key pair.

ssh-keygen -t rsa [-C "Comment"] [-f output_keyfile] 

if you don't supply the "-f output_keyfile" this prompt you for the files to create, the default being ~/.ssh/id_rsa and ~/.ssh/id_rsa.pub. It will then prompt you for a passphrase to encrypt you private key, please choose a strong passphrase.

If you are logging in from a linux or OSX desktop/laptop you may be able to run ssh-add to load up your new ssh key into an "agent" that will save you having to enter the passphrase every time you log in.

Logging onto the PPD SSH Bastion

ssh [-i private_keyfile] <username>@<host>.pp.rl.ac.uk 

This will present you with a normal bash shell on the bastion host, from there you can ssh on to the PPD linux systems. The home area is local to the bastion host but your PPD linux home area is available under /home/ppd/<username>.

Access to the PPD SSH Bastion

Accounts on the PPD SSH bastion are separate from the standard PPD linux account and need to be requested from PPD.IT.Helpdesk@stfc.ac.uk.

The Bastion host only supports ssh key authentication not passwords so you need to send us a copy of your public key. If you want to use ssh keys to log on to the PPD linux machines please set up a separate key pair for that and use ssh-agent to manage them. We will occasionally compare authorized_key files.

Creating an ssh key pair.

ssh-keygen -t rsa [-C "Comment"] [-f output_keyfile] 

if you don't supply the "-f output_keyfile" this prompt you for the files to create, the default being ~/.ssh/id_rsa and ~/.ssh/id_rsa.pub. It will then prompt you for a passphrase to encrypt you private key, please choose a strong passphrase.

If you are logging in from a linux or OSX desktop/laptop you may be able to run ssh-add to load up your new ssh key into an "agent" that will save you having to enter the passphrase every time you log in.

Logging onto the PPD SSH Bastion

ssh [-i private_keyfile] <username>@<host>.pp.rl.ac.uk 

This will present you with a normal bash shell on the bastion host, from there you can ssh on to the PPD linux systems. The home area is local to the bastion host but your PPD linux home area is available under /home/ppd/<username>.

-- ChrisBrew - 2012-05-11