IMPORTANT SSH Login Policies - Revision history

imported>Huston: Relink

2007-05-10T21:00:45Z

Relink

← Older revision		Revision as of 21:00, 10 May 2007
Line 110:		Line 110:
	===What do I do if I run Windows on my laptop?===		===What do I do if I run Windows on my laptop?===

	Fear not, you can use Putty; see the instructions in the Peyton FAQ:		Fear not, you can use Putty; see the instructions in the Peyton FAQ entry for [[SSH#SSH in Windows\|SSH]]
	[[~~Setting up Putty~~ in Windows]]

	===Will remote access to mail be affected?===		===Will remote access to mail be affected?===

imported>Huston at 20:35, 4 May 2007

2007-05-04T20:35:45Z

← Older revision		Revision as of 20:35, 4 May 2007
Line 198:		Line 198:
	folder-collections=mail/[]		folder-collections=mail/[]
	In case of trouble, move .pinerc out of the way and try again		In case of trouble, move .pinerc out of the way and try again

			[[Category:Policies]]

imported>Lkoven: Ok, I think I'm done with this

2007-05-04T19:11:23Z

Ok, I think I'm done with this

← Older revision		Revision as of 19:11, 4 May 2007
Line 1:		Line 1:
	~~{{oldfaq\|NUM=193}}~~
	~~<br>~~
	==Changes to Remote Access to Peyton Hall Computers==		==Changes to Remote Access to Peyton Hall Computers==

imported>Lkoven at 19:11, 4 May 2007

2007-05-04T19:11:01Z

← Older revision		Revision as of 19:11, 4 May 2007
Line 1:		Line 1:
	~~__NOTOC__~~
	{{oldfaq\|NUM=193}}		{{oldfaq\|NUM=193}}
	~~<br>~~
	~~__TOC__~~
	<br>		<br>
	==Changes to Remote Access to Peyton Hall Computers==		==Changes to Remote Access to Peyton Hall Computers==

imported>Lkoven at 16:54, 3 May 2007

2007-05-03T16:54:03Z

← Older revision		Revision as of 16:54, 3 May 2007
Line 14:		Line 14:
	retired, so we need to do something to maintain unfettered external		retired, so we need to do something to maintain unfettered external
	access. There are more excuses for why we're proposing changes under		access. There are more excuses for why we're proposing changes under
	"[["#Rationale.2FFAQ\|RATIONALE]]" at the end of this document.		"[[#Rationale.2FFAQ\|RATIONALE]]" at the end of this document.

	==Proposed Plans for Remote Access==		==Proposed Plans for Remote Access==
Line 23:		Line 23:
	keys) from any machine on the net; it has been told not to pay any		keys) from any machine on the net; it has been told not to pay any
	attention to problems with Reverse Name Lookup.		attention to problems with Reverse Name Lookup.
			<br>
	N.b. Minos mounts the home filesystems READ ONLY.([[#Footnotes_3\|3]])		N.b. Minos mounts the home filesystems READ ONLY.([[#Footnotes_3\|3]])
	</blockquote>		</blockquote>

imported>Lkoven at 16:47, 3 May 2007

2007-05-03T16:47:10Z

← Older revision		Revision as of 16:47, 3 May 2007
Line 14:		Line 14:
	retired, so we need to do something to maintain unfettered external		retired, so we need to do something to maintain unfettered external
	access. There are more excuses for why we're proposing changes under		access. There are more excuses for why we're proposing changes under
	"RATIONALE" at the end of this document.		"[["#Rationale.2FFAQ\|RATIONALE]]" at the end of this document.

	==Proposed Plans for Remote Access==		==Proposed Plans for Remote Access==

imported>Lkoven at 16:42, 3 May 2007

2007-05-03T16:42:13Z

imported>Lkoven at 16:38, 3 May 2007

2007-05-03T16:38:42Z

← Older revision		Revision as of 16:38, 3 May 2007
Line 1:		Line 1:
	__NOTOC__		__NOTOC__
	{{oldfaq\|NUM=193}}		{{oldfaq\|NUM=193}}
			<br>
	__TOC__		__TOC__
			<br>
	==Changes to Remote Access to Peyton Hall Computers==		==Changes to Remote Access to Peyton Hall Computers==

imported>Lkoven at 16:26, 3 May 2007

2007-05-03T16:26:02Z

Show changes

imported>Huston: SSH Policies moved to IMPORTANT SSH Login Policies: Moving so the "policy" of having old FAQ entries with their old title holds true

2007-05-02T16:05:57Z

SSH Policies moved to *IMPORTANT SSH Login Policies*: Moving so the "policy" of having old FAQ entries with their old title holds true

← Older revision		Revision as of 16:05, 2 May 2007
(No difference)

← Older revision		Revision as of 16:42, 3 May 2007
Line 7:		Line 7:

	For several years we have only allowed logins to Peyton Hall computers		For several years we have only allowed logins to Peyton Hall computers
	from machines that allow "Reverse Name Lookup"([[#~~Footnote_1~~\|1]]). As you may have		from machines that allow "Reverse Name Lookup"([[#Footnotes_1\|1]]). As you may have
	experienced while traveling, this can be an obstacle to connecting		experienced while traveling, this can be an obstacle to connecting
	from hotel rooms, etc.; not all ISPs use properly registered IPs. The		from hotel rooms, etc.; not all ISPs use properly registered IPs. The
Line 16:		Line 16:
	"RATIONALE" at the end of this document.		"RATIONALE" at the end of this document.

	==~~PROPOSED PLANS FOR REMOTE ACCESS~~==		==Proposed Plans for Remote Access==
	'''Lemma:'''		'''Lemma:'''
	<blockquote>		<blockquote>
	There is a machine (minos.astro.princeton.edu)([[#~~Footnote_2~~\|2]]) which allows		There is a machine (minos.astro.princeton.edu)([[#Footnotes_2\|2]]) which allows
	open access, i.e. minos accepts logins (using passwords or ssh		open access, i.e. minos accepts logins (using passwords or ssh
	keys) from any machine on the net; it has been told not to pay any		keys) from any machine on the net; it has been told not to pay any
	attention to problems with Reverse Name Lookup.		attention to problems with Reverse Name Lookup.

	N.b. Minos mounts the home filesystems READ ONLY.([[#~~Footnote_3~~\|3]])		N.b. Minos mounts the home filesystems READ ONLY.([[#Footnotes_3\|3]])
	</blockquote>		</blockquote>

Line 57:		Line 57:
	lives; hence the offer of a workshop.		lives; hence the offer of a workshop.

	==~~RATIONALE~~/FAQ==		==Rationale/FAQ==

	===If it aint broke, why are we fixing it?===		===If it aint broke, why are we fixing it?===
Line 124:		Line 124:
	to your home directory this won't work on minos (but it will of course		to your home directory this won't work on minos (but it will of course
	work on other machines). You will however be able to read mail on		work on other machines). You will however be able to read mail on
	minos and save messages to folders on the mail server.([[#~~Footnote_6~~\|6]])		minos and save messages to folders on the mail server.([[#Footnotes_6\|6]])

	==Footnotes==		==Footnotes==
Line 150:		Line 150:

	<span id="Footnotes_3">'''3.'''</span> Making home directories read only means that minos may be used for:		<span id="Footnotes_3">'''3.'''</span> Making home directories read only means that minos may be used for:
	*Logging in to other machines in Peyton using ssh keys; if you have an agent running remotely but don't have your keys you can even login to minos; add your keys; logout again, and then connect to any Peyton machine([[#~~Footnote_4~~\|4]])		*Logging in to other machines in Peyton using ssh keys; if you have an agent running remotely but don't have your keys you can even login to minos; add your keys; logout again, and then connect to any Peyton machine([[#Footnotes_4\|4]])
	*Reading email with pine (mail messages can be saved to mail folders on the mail server, but not to home directories)		*Reading email with pine (mail messages can be saved to mail folders on the mail server, but not to home directories)
	*Reading files with e.g. more, less, cat, or emacs.		*Reading files with e.g. more, less, cat, or emacs.
	*Copying files From /u To remote machines. You naturally won't be able to scp To /u, as it's read only. You will be able to copy to scratch disks, e.g. scp my_file minos.astro.princeton.edu:/scr/apache22/rhl or you can copy to /u using ssh tunnels([[#~~Footnote_5~~\|5]])		*Copying files From /u To remote machines. You naturally won't be able to scp To /u, as it's read only. You will be able to copy to scratch disks, e.g. scp my_file minos.astro.princeton.edu:/scr/apache22/rhl or you can copy to /u using ssh tunnels([[#Footnotes_5\|5]])

	<span id="Footnotes_4">'''4.'''</span> E.g. you're sitting in a seedy internet cafe in Coonabarabran (which		<span id="Footnotes_4">'''4.'''</span> E.g. you're sitting in a seedy internet cafe in Coonabarabran (which

*IMPORTANT SSH Login Policies* - Revision history