#BASTION HOST INSTALL#
#BASTION HOST UPDATE#

#BASTION HOST INSTALL#

Install an appropriate client side library to support PIV cards such as: /Library/Frameworks/ac./Versions/A/Libraries/acpkcs220.dylib.PKCS11Provider=/usr/lib/x86_64-linux-gnu/pkcs11/opensc-pkcs11.so Mac Modern version of OpenSSH are compliant.Install and appropriate library to support PIV cards such as opensc-pkcs11, on your system.See below for instructions covering each type of operating system.

General Requirements: PIV card reader and PIV card. Now you will be able to SSH or SCP to any of the hostnames following 'host' in the above $HOME/.ssh/config file, for example: $ ssh -XY that for the PASSCODE prompt you enter a freshly generated RSA token code, i.e., one that has at least a couple of bars of life left. Once you create the 'config' file, make sure the permission of the $HOME/.ssh directory is set up as inaccessible by anyone except you, i.e., $ chmod 0700 $HOME/.ssh Note: In the host line, you may leave out any to which you do not have access. You only need to substitute with your NCCS userid. (This would be your own local Linux/MacOS workstation, not the $HOME/.ssh/config file on your dirac or discover userid.) For command-line users, create or modify the file $HOME/.ssh/config on the system from which you will be accessing your NCCS userid, as outlined below.Note that system login via the Bastion Service Direct Mode applies to command-line users only.Your NCCS userid is already authorized to use the Direct Mode of the Bastion Service for the following Systems:.Password: YOUR NCCS PASSWORD DIRECT MODE INSTRUCTIONS PASSCODE: Enter your hardware or software token code here. Once you are connected, you will be asked to authenticate your access using RSA SecurID authentication (i.e. For Windows Putty users, make sure you choose ssh protocol 2 and enable X11 forwarding in your configurations. Using the -XY option allows for trusted X11 forwarding which is a secure way of running X application via ssh to your local machine. LOGIN MODE INSTRUCTIONSįrom your workstation or a resource outside the NCCS environment, access Discover using: PIV SSH: Logging in with PIV SSH requires a PIV card reader and card. Login Mode: This mode is the simplest and allows users to establish an interactive login session on the NCCS System they wish to access.ĭirect Mode: This mode requires more configuration, yet allows streamlined login into NCCS systems, and facilitates file transfer into NCCS resources using SCP, RSYNC, or SFTP from a remote workstation like a desktop.

There are three modes of operation for the Bastion Service – Login, Direct, and PIV SSH.

#BASTION HOST UPDATE#

NOTICE: NCCS login servers were changed, please update your client software.

Bastion host