This is an old revision of the document!
Table of Contents
Adding other people's ssh keys to your account
This allows CHPC staff to assist users — submit jobs, log in to running compute nodes, inspect results.
You should never ask for someone else's password, or give your password to anyone else.
Convenience scripts to add a staff member's SSH key
The scripts are there for convenience to add or remove a staff member's SSH key into or from your .ssh/authorized_keys file to allow access to your home directory for assistance.
add_staff_sshkey.sh <staffmember> del_staff_sshkey.sh <staffmember> list_staff_sshkey.sh
The staff member will be able to see any and all of your files and will be able to submit jobs as your user. It's not necessary to provide your password to staff.
Instructions for CHPC staff
Make your .ssh directory readable by others in the 'users' group.
chmod 750 $HOME/.ssh
[ ssh has permissions checks, but this one does not prevent use of your keys for login ]
Instructions for the user
Add the staff key to their authorized_keys :-
From your shell on the login node, do this :-
ssh-copy-id -i ~staff_user_name/.ssh/id_rsa.pub localhost
[ obviously, change staff_user_name to the staff username ]
To log in to the user account
[ from the login node ]
ssh chpc-user@localhost
To remove access afterwards
[ This removes your key, probably at the end, of ~/.ssh/authorized_keys ]
sed -e '/staff_user_name@/ d' -i ~/.ssh/authorized_keys
