Connection from outside of the ENS network

WARNING : Only for your fisrt connection to the allo-psmn node (whether when connecting from the ENS network of from outside), follow these instructions

To connect with SSH from outside the ENS network, you must use one of the SSH servers of the institution:

  • ssh.ens-lyon.fr if you have an informatic account at ENS de Lyon,
  • or the ssh.psmn.ens-lyon.fr server (see infographic):

Legend :

  • black : physical link
  • blue : standard SSH connection
  • red : virtual SSH connection (hop)
  • green : NFS links (/home)

Connection from outside of the ENS network

Use the following command:

  • WITH your ENS de Lyon account, via ssh.ens-lyon.fr

Your SSH access to ssh.ens-lyon.fr , need to be ACTIVATED, see the ENS documentation.

ssh -X -oProxyCommand="ssh yourlogin@ssh.ens-lyon.fr netcat -w1 allo-psmn %p" yourlogin@allo-psmn.psmn.ens-lyon.fr

Then, you must give your password twice.

yourlogin@ssh.ens-lyon.fr's password :
 
yourlogin@allo-psmn's password :
  • WITHOUT a ENS de Lyon account, via ssh.psmn.ens-lyon.fr
The ssh.psmn.ens-lyon.fr server is a minimalistic gateway without access to your /home directory at PSMN. You only have enough space to copy your SSH public key and some configuration files (ssh/config, alias, …).

Two-steps connection:

ssh yourlogin@ssh.psmn.ens-lyon.fr
yourlogin@ssh.psmn.ens-lyon.fr's password :
 
$ ssh yourlogin@allo-psmn.psmn.ens-lyon.fr
yourlogin@allo-psmn's password :

One-step connection:

ssh -X -oProxyCommand="ssh yourlogin@ssh.psmn.ens-lyon.fr netcat -w1 allo-psmn %p" yourlogin@allo-psmn.psmn.ens-lyon.fr

Then, you'll have to give your password twice:

yourlogin@ssh.psmn's password :
 
yourlogin@allo-psmn's password :

and you are connected to allo-psmn :

yourlogin@allo-psmn%

Once connected to allo-psmn, you have access to your PSMN home-directory and to your files.

warning, allo-psmn is a connection server, it allows you to access and transfer your files but that's it
To work oon PSMN cluster you have to connect from allo-psmn, to one of the front nodes

To do so, use the following command:

ssh -X front_node_name

where front_node_name is the name of one of the front nodes.

Use SSH keys and/or SSH agent

You can simplify your usage of SSH commands by using a set of keys, an SSH agent and a suitable configuration (see this documentation) and this example configuration file).

If you have a set of SSH keys (personal, with passphrase), you can add your public key (id_?sa.pub) to the ~/.ssh/authorized_keys file.

  • for ssh.psmn.ens-lyon.fr (home local)
scp ~/.ssh/id_rsa.pub yourlogin@ssh.psmn.ens-lyon.fr:~/.ssh/id_rsa.pub.perso
 
ssh yourlogin@ssh.psmn.ens-lyon.fr
 
cat .ssh/id_rsa.pub.perso >> .ssh/authorized_keys
  • for allo-psmn (home PSMN)
scp ~/.ssh/id_rsa.pub yourlogin@allo-psmn:~/.ssh/id_rsa.pub.perso
 
ssh yourlogin@allo-psmn
 
cat .ssh/id_rsa.pub.perso >> .ssh/authorized_keys

Want more ?

en/documentation/tutorials/ssh/externe.txt · Dernière modification: 2018/05/28 16:50 par cpetit