Difference between revisions of "How To Use SSH"

From ECE Information Technology Services
Jump to navigationJump to search
(Dropped Fugu in favour of Cyberduck (Fugu has been abandoned). Dropped SSHKeychain (functionality included in Leopard))
(No more departmental Solaris workstations. Mention ssh.ece.ubc.ca.)
Line 1: Line 1:
<!--Originally written on: 2008-Mar-18-->
 
 
 
==Background==
 
==Background==
 
SSH (Secure Shell) is a protocol that can be used to:
 
SSH (Secure Shell) is a protocol that can be used to:
Line 31: Line 29:
 
# [http://winscp.sf.net/eng WinSCP] is a free graphical client for transferring files using SCP/SFTP.
 
# [http://winscp.sf.net/eng WinSCP] is a free graphical client for transferring files using SCP/SFTP.
  
===Departmental Solaris / Linux Workstations===
+
===Departmental Linux Workstations===
The departmental Solaris / Linux workstations have the
+
The departmental Linux workstations have the
 
[http://www.openssh.org OpenSSH] version of the ssh, scp, and sftp tools
 
[http://www.openssh.org OpenSSH] version of the ssh, scp, and sftp tools
 
installed.
 
installed.
Line 39: Line 37:
 
Mac OS X includes ''ssh'', ''scp'', and ''sftp'' as commands accessible
 
Mac OS X includes ''ssh'', ''scp'', and ''sftp'' as commands accessible
 
through the Terminal.  For transferring files using SCP/SFTP, you may find [http://cyberduck.ch/ Cyberduck] useful.
 
through the Terminal.  For transferring files using SCP/SFTP, you may find [http://cyberduck.ch/ Cyberduck] useful.
 +
 +
==Available SSH Servers==
 +
The department runs several Linux servers that are accessible by SSH from the Internet.  In your SSH client, specify <tt>ssh.ece.ubc.ca</tt> as the hostname to connect to.  A load balancer will automatically assign you to one of the available servers.
 +
 +
Researchers' workstations are protected by a firewall.  If your client is outside the ECE network, you will not be able to SSH directly to your workstation.  Instead, you should SSH to <tt>ssh.ece.ubc.ca</tt>, and within that SSH session, SSH to your workstation.

Revision as of 14:02, 9 July 2012

Background

SSH (Secure Shell) is a protocol that can be used to:

  • obtain a shell prompt on a remote computer to execute command-line programs
  • forward X11 connections to execute graphical programs remotely
  • establish encrypted data tunnels to act as a makeshift VPN
  • transfer files between computers using the associated SFTP (Secure File Transfer Protocol) or SCP (Secure Copy) protocols

SSH accomplishes all of these tasks using encrypted connections, preventing other network users from evesdropping on your communication and impersonating you. SSH replaces the older rsh, rexec, telnet and ftp protocols, which are not permitted on departmental servers because they transmit usernames and passwords unencrypted.

SSH utilities are available for all common operating systems.


Available SSH Clients

Departmental Windows Workstations

The departmental Windows workstations have the commercial (but free for University use) "SSH Secure Shell" version installed, as well as PuTTY.

Personal Use on Windows Workstations

There are two Windows-based clients that you may wish to try:

  1. PuTTY is a free Win32 Telnet/SSH client.
  2. WinSCP is a free graphical client for transferring files using SCP/SFTP.

Departmental Linux Workstations

The departmental Linux workstations have the OpenSSH version of the ssh, scp, and sftp tools installed.

Mac OS X

Mac OS X includes ssh, scp, and sftp as commands accessible through the Terminal. For transferring files using SCP/SFTP, you may find Cyberduck useful.

Available SSH Servers

The department runs several Linux servers that are accessible by SSH from the Internet. In your SSH client, specify ssh.ece.ubc.ca as the hostname to connect to. A load balancer will automatically assign you to one of the available servers.

Researchers' workstations are protected by a firewall. If your client is outside the ECE network, you will not be able to SSH directly to your workstation. Instead, you should SSH to ssh.ece.ubc.ca, and within that SSH session, SSH to your workstation.