wiki.chpc.ac.za

This page is read only. You can view the source, but not change it. Ask your administrator if you think this is wrong.
=====Adding other people's ssh keys to your account=====


This allows CHPC staff to assist users --- submit jobs, log in to running compute nodes, inspect results.

You should **never** ask for someone else's password, or give your password to anyone else.

====Convenience scripts to add a staff member's SSH key====

The scripts are there for convenience to add or remove a staff member's SSH key into or
from your .ssh/authorized_keys file to allow access to your home directory for assistance.
Use the staff member's login id (username, e.g. **charles**) to select that person.

  add_staff_sshkey.sh  staffmember 
  delete_staff_sshkey.sh  staffmember
  list_staff_sshkey.sh 
  
The staff member will be able to see any and all of your files and will be able to
submit jobs as your user. It's not necessary to provide your password to staff.

===== ONLY in case the above scripts don't work ====

==== Instructions for CHPC staff ====

**You only need to do this if the scripts above don't work properly, you 
may ignore the following if access can be obtained and revoked via the 
scripts.**
 
The file system permissions allowing the above has been set up. In case a user is unable to
gain access to your public SSH key, but without compromising security, verify the steps below.


Make your .ssh directory readable by others in the 'users' group.

   chmod 750 $HOME/.ssh

[ ssh has permissions checks, but this one does not prevent use of your keys for login ]

==== Instructions for the user ====

Add the staff key to their authorized_keys :-

From your shell on the login node, do this :-

   ssh-copy-id -i ~staff_user_name/.ssh/id_rsa.pub localhost

[ obviously, change //staff_user_name// to the staff username ]

==== To log in to the user account ====

[ from the login node ]

   ssh chpc-user@localhost

==== To remove access afterwards ====

[ This removes your key, probably at the end, of ~/.ssh/authorized_keys ]

   sed -e '/staff_user_name@/ d' -i ~/.ssh/authorized_keys
wiki.chpc.ac.za

User Tools

Site Tools

Page Tools
