From d15190c4fa7f67dc449e6bda4945b7fcd2ee3da2 Mon Sep 17 00:00:00 2001
From: Michael Blaschek <michael.blaschek@univie.ac.at>
Date: Fri, 28 Jan 2022 14:38:56 +0000
Subject: [PATCH] ecaccess ssh options
---
SSH-VPN-VNC/SSH.md | 7 +++++++
1 file changed, 7 insertions(+)
diff --git a/SSH-VPN-VNC/SSH.md b/SSH-VPN-VNC/SSH.md
index bb23576..80aa795 100644
--- a/SSH-VPN-VNC/SSH.md
+++ b/SSH-VPN-VNC/SSH.md
@@ -33,9 +33,16 @@ Host srvx2jet
Host login
HostName login.univie.ac.at
User [U:Account USERNAME]
+Host ecaccess
+ Host ecaccess.ecmwf.int
+ HostKeyAlgorithms ssh-dss
+ KexAlgorithms diffie-hellman-group1-sha1
+ Ciphers aes256-cbc
```
and replacing `[USERNAME]` and `[U:Account USERNAME]` with your usernames. Using such a file allows to connect like this `ssh srvx1` using the correct server adress and specified username. Copy this file as well on `login.univie.ac.at` and you can use commands like this: `ssh -t login ssh jet` to connect directly to `jet` via the `login` gateway.
+Please note the special algorithms for ecaccess.
+
If you want to use ssh-keys you can also use different keys in `.ssh/config` per server with `IdentityFile ~/.ssh/id_rsa_for_server`.
**Note: If you are having trouble with your ssh-key being accepted. You need to check the selinux security policy. Because we use non standard home directories, which are not accepted by default.** Do that by running:
--
GitLab