Overview

OSG Connect requires SSH-key-based logins. You need to follow a two-step process to set up the SSH key to your account.

  1. Generate a SSH key pair.

  2. Add your public key to the submit host by uploading it to your OSG Connect user profile (via the OSG Connect website).

After completing the process, you can log in from local machine (your laptop or desktop) to the OSG Connect submit host using ssh:

 ssh <your_osg_connect_username>@login.osgconnect.net

or using your Windows SSH client

NOTE: Please do not edit the authorized keys file on the submit host (login.osgconnect.net).

Step 1: Generating SSH Keys

We will discuss how to generate a SSH key pair on both Unix-based and Windows.

Please note: The key pair consist of a private key and a public key. You will upload the public key to OSG Connect, but you also need to keep a copy of the private key to log in!
You should keep the private key on machines that you have direct access to, i.e. your local computer (your laptop or desktop).

Unix-based operating system (Linux/Mac)

On your local computer:

 mkdir ~/.ssh
 chmod 700 ~/.ssh
 ssh-keygen -t rsa

The last command will produce a prompt similar to

 Generating public/private rsa key pair.
 Enter file in which to save the key (/home/<local_user_name>/.ssh/id_rsa):

Unless you want to change the location of the key, continue by pressing enter. Now you will be asked for a passphrase. Enter a passphrase that you will be able to remember and which is secure:

 Enter passphrase (empty for no passphrase):
 Enter same passphrase again:

When everything has successfully completed, the output should resemble the following:

 Your identification has been saved in /home/<local_user_name>/.ssh/id_rsa.
 Your public key has been saved in /home/<local_user_name>/.ssh/id_rsa.pub.
 The key fingerprint is:
 ...

The part you want to upload is the content of the .pub file (~/.ssh/id_rsa.pub)

Windows / Putty

  1. Open the PuTTYgen program. You can download PuttyGen here: PuttyGen Download Page, scroll down until you see the puttygen.exe file.

  2. For Type of key to generate, select RSA or SSH-2 RSA.

  3. Click the "Generate" button.

  4. Move your mouse in the area below the progress bar. When the progress bar is full, PuTTYgen generates your key pair.

  5. Type a passphrase in the "Key passphrase" field. Type the same passphrase in the "Confirm passphrase" field. You can use a key without a passphrase, but this is not recommended.

  6. Click the "Save private key" button to save the private key. You must save the private key. You will need it to connect to your machine.

  7. Right-click in the text field labeled "Public key for pasting into OpenSSH authorized_keys file" and choose Select All.

  8. Right-click again in the same text field and choose Copy.

alt text

Step 2: Add the public SSH key to login node

To add your public key to the OSG Connect log in server:

  1. Go to www.osgconnect.net and sign in with your Globus ID.

  2. Go to "Update Profile".

  3. Click on "Manage SSH and X.509 keys".

  4. Click on "Add a New Key".

  5. Give the key a name, select "SSH Public Key", and copy/paste the public key into the text box. The expected key is a single line, with three fields looking something like ssh-rsa ASSFFSAF... user@host. On Linux/Mac, it is the content of ~/.ssh/id_rsa.pub and on Windows, it is the content from step 7 above.

  6. Click "Add Key"

The key is now added to your profile in the OSG Connect website. This will automatically be added to the login nodes within a couple hours.

Logging In

Again, once your key is uploaded and it's been a few hours, you should be able to log in to OSG Connect by using:

  • On a Mac, in the Terminal: ssh @login.osgconnect.net
  • On a Windows computer, the Putty program Type "login.osgconnect.net" as the hostname, then click "Open" and provide your Globus ID and passphrase when prompted to do so.

Getting Help

For assistance or questions, please email the OSG User Support team at user-support@opensciencegrid.org or visit the help desk and community forums.

 

This page was updated on Apr 23, 2019 at 11:45 from guide/starting/generate-add-sshkey.md.