SshWindowsTerminalServer < Computing/Documentation

Tags: view all tags
_This page is also available as a [[https://stfc365.sharepoint.com/sites/ppd/IThelpdesk/Shared%20Documents/SSH%20to%20Windows%20Terminal%20Server%20.pdf][PPD Computer Support Document]]._

---+ SSH access to Windows Terminal Server

The PPD Windows Terminal Server, hepwints.pp.rl.ac.uk (AKA hepwin2012-37.dc.pp.rl.ac.uk), is accessible via [[https://www.openssh.com/][SSH]] running within the [[https://cygwin.com/][Cygwin]] Linux-emulation environment. This is primarily useful for providing convenient access to Windows files from Linux or macOS, at RAL or outside. Cygwin itself can also be useful for Linux-style command-line or X-Windows access to Windows files (eg. [[https://www.latex-project.org/][latex]], [[http://www.imagemagick.org/script/command-line-processing.php][convert]], etc), but the Terminal Server is just one machine, so this should just be done for simple projects.

You can connect to the terminal server, just like any other SSH service, using your Federal id as username:

<verbatim>
ssh federal-id@hepwints.pp.rl.ac.uk</verbatim>

This will prompt for your Windows password, and log you in with your Windows home directory, which is accessed Unix-style: =/ppd/fedid/federal-id= (or just =~=). Other PPD Windows folders live under =/ppd= (which is a shortcut for =//dc.pp.rl.ac.uk/ppd=), eg. =/ppd/WWW/Projects/Atlas-SCT=.

You can use =scp= or =sftp=, either connecting from your machine, or connecting to your machine from hepwints, eg. to copy a file to your Windows desktop from Linux:

<verbatim>
scp plot.pdf hepwints.pp.rl.ac.uk:Desktop/</verbatim>

Note that hepwints is not directly accessible from outside the STFC Firewall. In this case, you can use the [[PPDBastionHost][PPD SSH Bastion]]. You can either ssh in two hops, and then scp your files connecting back to your machine from the hepwints command-line, or setup a proxy connection as described on the PPD SSH Bastion page.

You can set defaults for the connection (eg. default username) in a =~/.ssh/config= on your client machine, and setup ssh on hepwints, with a =~/.ssh= directory, just like you would on a Linux system. Just as on Linux, if you put a public key in =~/.ssh/authorized_keys= and connect with the private key, you can connect without a separate password. For passwordless login to work, you need one extra step for the Terminal Server. Login to hepwints (using the password), and type:

<verbatim>
passwd -R</verbatim>

This will prompt you for your current password (twice). Use your existing Windows password. Despite the familiar command, this does not change the password – all it does is save it in a secure location, so future passwordless ssh logins can access your Windows files. You only need run “<code>passwd –R</code>” once on hepwints, or if ever you change your Windows password.

-- %USERSIG{TimAdye - 2017-05-25}%%BR%
-- %USERSIG{TimAdye - 2016-11-24}%

---++ Comments

%COMMENT%
Topic revision: r4 - 2018-07-04 - TimAdye