| | 9 | |
| | 10 | == Logging in == |
| | 11 | |
| | 12 | To reduce the number of login/password authorizations, it's recommended to use the ControlMaster ssh parameters. This requires only the first connection to be validated, as subsequent connections are passed through the already validated connection. The .ssh/config options to implement this are: |
| | 13 | |
| | 14 | {{{ |
| | 15 | Host DMZ_HOST |
| | 16 | User USERNAME |
| | 17 | Hostname DMZ_DN |
| | 18 | ForwardX11 yes |
| | 19 | ForardAgent yes |
| | 20 | RequestTTY force |
| | 21 | ControlMaster auto |
| | 22 | ControlPath ~/.ssh/connections/%h_%p_%r |
| | 23 | }}} |
| | 24 | |
| | 25 | The ~/.ssh/connections/ directory needs to be created if it does not already exist. With this configuration in place, you can log in to the computing front end with {{{ssh -t DMZ_HOST ssh SEC_HOST}}}. The DMZ_HOST does not support commands other than ssh and scp, and is used only to bounce the connection to SEC_HOST. |
| | 26 | |
| | 27 | == |