<?xml version="1.0" encoding="utf-8"?><!DOCTYPE article  PUBLIC '-//OASIS//DTD DocBook XML V4.4//EN'  'http://www.docbook.org/xml/4.4/docbookx.dtd'><article><articleinfo><title>MemberManual/ShellAccess</title><revhistory><revision><revnumber>20</revnumber><date>2019-01-30 20:47:49</date><authorinitials>SrikanthSastry</authorinitials><revremark>Updated the doc based on recreating bash profile from https://bugzilla.hcoop.net/show_bug.cgi?id=1297</revremark></revision><revision><revnumber>19</revnumber><date>2018-12-16 12:28:48</date><authorinitials>KevinEverets</authorinitials><revremark>Update now that ssh.hcoop.net has moved to marsh on debian stretch</revremark></revision><revision><revnumber>18</revnumber><date>2015-01-01 22:38:49</date><authorinitials>ClintonEbadi</authorinitials></revision><revision><revnumber>17</revnumber><date>2015-01-01 22:37:44</date><authorinitials>ClintonEbadi</authorinitials><revremark>removed noise around bog host key and also crrect lies about bog (wheezy!)</revremark></revision><revision><revnumber>16</revnumber><date>2015-01-01 22:35:29</date><authorinitials>ClintonEbadi</authorinitials><revremark>add the host key fingerprint for bog. May need to go on a static page ... Relying on paranoid members to be paranoid and check the revision history for now :)</revremark></revision><revision><revnumber>15</revnumber><date>2013-07-20 05:32:37</date><authorinitials>ClintonEbadi</authorinitials><revremark>also note how to change your password and further condense information</revremark></revision><revision><revnumber>14</revnumber><date>2013-07-20 05:23:29</date><authorinitials>ClintonEbadi</authorinitials><revremark>remove mire and pointless info about uname etc. reorganize, try to make it sensible for someone who has no idea what ssh is</revremark></revision><revision><revnumber>13</revnumber><date>2013-01-13 18:05:42</date><authorinitials>ClintonEbadi</authorinitials><revremark>update / cat</revremark></revision><revision><revnumber>12</revnumber><date>2013-01-03 07:35:04</date><authorinitials>ClintonEbadi</authorinitials><revremark>mention bog</revremark></revision><revision><revnumber>11</revnumber><date>2009-12-19 13:58:13</date><authorinitials>AdamChlipala</authorinitials><revremark>Moved MichaelShynaer</revremark></revision><revision><revnumber>10</revnumber><date>2008-12-03 07:03:30</date><authorinitials>MichaelOlson</authorinitials><revremark>https, not http, in ssh service</revremark></revision><revision><revnumber>9</revnumber><date>2008-07-07 04:28:15</date><authorinitials>localhost</authorinitials><revremark>converted to 1.6 markup</revremark></revision><revision><revnumber>8</revnumber><date>2008-04-30 14:50:30</date><authorinitials>AdamChlipala</authorinitials><revremark>mire -&gt; ssh</revremark></revision><revision><revnumber>7</revnumber><date>2008-04-20 23:42:21</date><authorinitials>DavorOcelic</authorinitials></revision><revision><revnumber>6</revnumber><date>2008-04-20 23:38:18</date><authorinitials>DavorOcelic</authorinitials></revision><revision><revnumber>5</revnumber><date>2008-02-20 18:54:51</date><authorinitials>MichaelOlson</authorinitials></revision><revision><revnumber>4</revnumber><date>2008-01-06 00:18:42</date><authorinitials>netblock-68-183-198-50.dslextreme.com</authorinitials></revision><revision><revnumber>3</revnumber><date>2008-01-01 03:30:37</date><authorinitials>MichaelOlson</authorinitials></revision><revision><revnumber>2</revnumber><date>2007-11-12 04:46:33</date><authorinitials>RyanMikulovsky</authorinitials><revremark>fix a section header, put mire first since that's the log-in server that they need to notice first</revremark></revision><revision><revnumber>1</revnumber><date>2007-11-12 04:39:00</date><authorinitials>MichaelOlson</authorinitials><revremark>Initial contents</revremark></revision></revhistory></articleinfo><para>This is the chapter of the <ulink url="https://wiki.hcoop.net/MemberManual/ShellAccess/MemberManual#">MemberManual</ulink> that describes how to log in to our machines, and provides a brief explanation of what our machines do. </para><section><title>Logging In</title><para>Only <code>ssh.hcoop.net</code> is accessible to members. To login, use <ulink url="http://www.openssh.org/">SSH</ulink> where </para><glosslist><glossentry><glossterm>username </glossterm><glossdef><para>Your HCoop username </para></glossdef></glossentry><glossentry><glossterm>host </glossterm><glossdef><para><code>ssh.hcoop.net</code> </para></glossdef></glossentry><glossentry><glossterm>host key fingerprint </glossterm><glossdef><para>SHA256:4vDl4BNz1wtClbMmdmheQffrkzQZsMEInGpdTFCEKlI. </para></glossdef></glossentry></glosslist><para>You may also use <ulink url="https://wiki.hcoop.net/MemberManual/ShellAccess/MitKerberos#">MitKerberos</ulink> for <ulink url="https://wiki.hcoop.net/MemberManual/ShellAccess/MemberManual/ShellAccess/PasswordlessLogin#">/PasswordlessLogin</ulink>. </para><para>The current shell machine is <ulink url="https://wiki.hcoop.net/MemberManual/ShellAccess/ServerMarsh#">marsh</ulink>, and is running <ulink url="http://www.debian.org/releases/stretch/">Debian GNU/Linux Stretch</ulink>. Further information about our servers is on the <ulink url="https://wiki.hcoop.net/MemberManual/ShellAccess/Hardware#">Hardware</ulink> page. </para><section><title>GNU/Linux, OS X, BSD</title><para>Open a shell and run: </para><screen><![CDATA[ssh USERNAME@ssh.hcoop.net]]></screen></section><section><title>Microsoft Windows</title><para>If you use Windows and are unfamiliar with SSH, you will most likely want to install <ulink url="http://www.chiark.greenend.org.uk/~sgtatham/putty/download.html">Putty</ulink>, a popular and <ulink url="https://wiki.hcoop.net/MemberManual/ShellAccess/FreeSoftware#">FreeSoftware</ulink> SSH client. See the <ulink url="http://the.earth.li/~sgtatham/putty/0.62/htmldoc/Chapter2.html#gs">putty getting started guide</ulink> for more information. </para></section></section><section><title>Security Restrictions</title><para>We have some security restrictions in place on the shell servers designed to thwart would-be attackers. Basic http, irc to trusted networks, etc. work by default, and we liberally grant requests for additional network permissions (See <ulink url="https://wiki.hcoop.net/MemberManual/ShellAccess/FirewallRules#">FirewallRules</ulink>). </para></section><section><title>Installing Software</title><para>Our shell server is running a basic installation of Debian Stretch. You may find that all of the software you need is already installed, but if not you may <ulink url="https://members.hcoop.net/portal/apt">request installation of packages</ulink> available in <ulink url="http://packages.debian.org/stretch/">stretch</ulink> and <ulink url="http://packages.debian.org/stretch-backports/">stretch-backports</ulink>. </para><para>Software not provided by Debian may be manually installed somewhere like <code>~/local/</code> in your home directory. </para></section><section><title>Tips</title><section><title>Changing Your Password</title><para><remark>Not sure this belongs here, but this document seems like the place where a member might want to know how to change their password?</remark> </para><para>On your first login, and thereafter on some regular basis (quarterly is generally alright), you should change your password. To do this, login to the shell server and run </para><screen><![CDATA[kpasswd]]></screen><para>It will prompt for your current password and your new password twice. </para><para>(We use <code>kpasswd</code> instead of the standard UNIX <code>passwd</code> because of an unfortunate interaction between <ulink url="https://wiki.hcoop.net/MemberManual/ShellAccess/MitKerberos#">MitKerberos</ulink> and Debian's default PAM configuration). </para></section><section><title>Changing the Default Shell</title><para>If you wish to change your login shell, then create a symlink called <code>~/.loginshell</code> whose target is your shell of choice.  Here is one example: </para><screen><![CDATA[ln -sf /bin/zsh ~/.loginshell]]></screen></section><section><title>Resetting you bash profile</title><para>If you wish to change your bash profile, the template file is called <code>/etc/skel/.profile</code>, which should be on any accessible member machine. </para><para>This directory is where the default files are kept, and they are copied to each user's home directory when user is created. </para><para>Our file is just a stock/basic version with no HCoop-specific customizations. </para><!--rule (<hr>) is not applicable to DocBook--><para> <ulink url="https://wiki.hcoop.net/MemberManual/ShellAccess/CategoryNeedsWork#">CategoryNeedsWork</ulink> <ulink url="https://wiki.hcoop.net/MemberManual/ShellAccess/CategoryMemberManual#">CategoryMemberManual</ulink> </para></section></section></article>