welcome: please sign in

Diff for "MemberManual/ShellAccess"

Differences between revisions 13 and 20 (spanning 7 versions)
Revision 13 as of 2013-01-13 18:05:42
Size: 1747
Editor: ClintonEbadi
Comment: update / cat
Revision 20 as of 2019-01-30 20:47:49
Size: 3266
Comment: Updated the doc based on recreating bash profile from https://bugzilla.hcoop.net/show_bug.cgi?id=1297
Deletions are marked like this. Additions are marked like this.
Line 7: Line 7:
= Our Machines = == Logging In ==
Line 9: Line 9:
We have several machines. Here are brief descriptions of each of the machines you can log into. Only `ssh.hcoop.net` is accessible to members. To login, use [[http://www.openssh.org/|SSH]] where
Line 11: Line 11:
|| '''Hostname''' || '''Machine name''' || '''IP address'''|| '''Description''' ||
|| `ssh.hcoop.net` / `bog.hcoop.net` || bog || 69.90.123.72 || Production shell server and custom daemons ||
|| `mire.hcoop.net` || mire || 69.90.123.68 || Legacy member web sites and custom daemons ||
 username :: Your HCoop username
 host :: `ssh.hcoop.net`
 host key fingerprint :: SHA256:4vDl4BNz1wtClbMmdmheQffrkzQZsMEInGpdTFCEKlI.
You may also use MitKerberos for [[/PasswordlessLogin]].
Line 15: Line 16:
For further details on our machines, including the machines that are not listed here, take a look at the [[Hardware]] page. The current shell machine is [[ServerMarsh|marsh]], and is running [[http://www.debian.org/releases/stretch/|Debian GNU/Linux Stretch]]. Further information about our servers is on the [[Hardware]] page.
Line 17: Line 18:
= Logging In = === GNU/Linux, OS X, BSD ===
Line 19: Line 20:
Use SSH to log in, by typing the following, where '''USER''' is your HCoop username. Open a shell and run:
Line 22: Line 23:
ssh USER@ssh.hcoop.net ssh USERNAME@ssh.hcoop.net
Line 25: Line 26:
= Changing the Default Shell = === Microsoft Windows ===

If you use Windows and are unfamiliar with SSH, you will most likely want to install [[http://www.chiark.greenend.org.uk/~sgtatham/putty/download.html|Putty]], a popular and FreeSoftware SSH client. See the [[http://the.earth.li/~sgtatham/putty/0.62/htmldoc/Chapter2.html#gs|putty getting started guide]] for more information.

== Security Restrictions ==

We have some security restrictions in place on the shell servers designed to thwart would-be attackers. Basic http, irc to trusted networks, etc. work by default, and we liberally grant requests for additional network permissions (See FirewallRules).

== Installing Software ==

Our shell server is running a basic installation of Debian Stretch. You may find that all of the software you need is already installed, but if not you may [[https://members.hcoop.net/portal/apt|request installation of packages]] available in [[http://packages.debian.org/stretch/|stretch]] and [[http://packages.debian.org/stretch-backports/|stretch-backports]].

Software not provided by Debian may be manually installed somewhere like `~/local/` in your home directory.

== Tips ==

=== Changing Your Password ===

/* Not sure this belongs here, but this document seems like the place where a member might want to know how to change their password? */

On your first login, and thereafter on some regular basis (quarterly is generally alright), you should change your password. To do this, login to the shell server and run

{{{
kpasswd
}}}

It will prompt for your current password and your new password twice.

(We use `kpasswd` instead of the standard UNIX `passwd` because of an unfortunate interaction between MitKerberos and Debian's default PAM configuration).

=== Changing the Default Shell ===
Line 35: Line 66:
=== Resetting you bash profile ===
If you wish to change your bash profile, the template file is called {{{/etc/skel/.profile}}}, which should be on any
accessible member machine.
Line 36: Line 70:
= Password-less Login = This directory is where the default files are kept, and they are
copied to each user's home directory when user is created.
Line 38: Line 73:
Consult the [[/PasswordlessLogin|Password-less Login]] subpage for instructions. Our file is just a stock/basic version with no HCoop-specific
customizations.
Line 40: Line 76:
= Security Restrictions =

We have some security restrictions in place on the shell servers. See FirewallRules.

= Getting technical info about the environment =
== kernel version ==
{{{#!bash
uname -r
}}}

== 32 bit or 64 bit? ==
{{{
uname -m
}}}

386 or 686 means it's 32 bit, which is the current configuration on mire. x86_64 means 64-bit, which is the configuration on bog.

This is the chapter of the MemberManual that describes how to log in to our machines, and provides a brief explanation of what our machines do.

Logging In

Only ssh.hcoop.net is accessible to members. To login, use SSH where

username
Your HCoop username
host

ssh.hcoop.net

host key fingerprint
SHA256:4vDl4BNz1wtClbMmdmheQffrkzQZsMEInGpdTFCEKlI.

You may also use MitKerberos for /PasswordlessLogin.

The current shell machine is marsh, and is running Debian GNU/Linux Stretch. Further information about our servers is on the Hardware page.

GNU/Linux, OS X, BSD

Open a shell and run:

ssh USERNAME@ssh.hcoop.net

Microsoft Windows

If you use Windows and are unfamiliar with SSH, you will most likely want to install Putty, a popular and FreeSoftware SSH client. See the putty getting started guide for more information.

Security Restrictions

We have some security restrictions in place on the shell servers designed to thwart would-be attackers. Basic http, irc to trusted networks, etc. work by default, and we liberally grant requests for additional network permissions (See FirewallRules).

Installing Software

Our shell server is running a basic installation of Debian Stretch. You may find that all of the software you need is already installed, but if not you may request installation of packages available in stretch and stretch-backports.

Software not provided by Debian may be manually installed somewhere like ~/local/ in your home directory.

Tips

Changing Your Password

On your first login, and thereafter on some regular basis (quarterly is generally alright), you should change your password. To do this, login to the shell server and run

kpasswd

It will prompt for your current password and your new password twice.

(We use kpasswd instead of the standard UNIX passwd because of an unfortunate interaction between MitKerberos and Debian's default PAM configuration).

Changing the Default Shell

If you wish to change your login shell, then create a symlink called ~/.loginshell whose target is your shell of choice. Here is one example:

ln -sf /bin/zsh ~/.loginshell

Resetting you bash profile

If you wish to change your bash profile, the template file is called /etc/skel/.profile, which should be on any accessible member machine.

This directory is where the default files are kept, and they are copied to each user's home directory when user is created.

Our file is just a stock/basic version with no HCoop-specific customizations.


CategoryNeedsWork CategoryMemberManual

MemberManual/ShellAccess (last edited 2019-01-30 20:47:49 by SrikanthSastry)