Project

General

Profile

Create SSH keys for Login » History » Version 11

Timo Eronen, 2016-10-06 12:52

1 1 Timo Eronen
h1. Create SSH keys for Login
2
3
As an example we create keys for *titan* cluster.
4
5 10 Timo Eronen
h3. 1) Login to (your personal) computer from which you want to access the Cluster and change into directory *~/.ssh/*
6 1 Timo Eronen
7
<pre>
8
cd ~/.ssh/
9
</pre>
10
11
If you don't have such directory, create it and change into it.
12
13 10 Timo Eronen
h3. 2) Create key pair using the following command.
14 1 Timo Eronen
15
*DO NOT SETUP PASSPHRASE !!*
16
17
<pre>
18
ssh-keygen -f id_rsa_titan -t rsa
19
</pre>
20
21 2 Timo Eronen
Now you have key pair:
22 1 Timo Eronen
23
* *id_rsa_titan* is your private key. *Keep it secret*.
24
* *id_rsa_titan.pub* is your public key.
25 2 Timo Eronen
26 10 Timo Eronen
h3. 3) Make sure the private key has the right protection:
27 2 Timo Eronen
28
<pre>
29 1 Timo Eronen
chmod 400 id_rsa_titan
30 2 Timo Eronen
</pre>
31 1 Timo Eronen
32 10 Timo Eronen
h3. 4) Send the public key (id_rsa_titan.pub) to the Cluster:
33 1 Timo Eronen
34
*DO NOT SEND FILE id_rsa_titan WHICH IS YOUR PRIVATE KEY AND SHOULD BE KEPT SECRET.*
35
36
<pre>
37
scp id_rsa_titan.pub titan.utu.fi:
38
</pre>
39
40 10 Timo Eronen
h3. 5) Login into titan.utu.fi and while logged change into directory *~/.ssh*
41 1 Timo Eronen
42
<pre>
43 5 Timo Eronen
ssh titan.utu.fi
44 1 Timo Eronen
cd ~/.ssh/
45
</pre>
46
47 10 Timo Eronen
h3. 6) Depending on whether you already have file named *authorized_keys* continue with either *Option 6a* or *Option 6b*.
48 1 Timo Eronen
49 10 Timo Eronen
*Option 6a*) If you have file named *authorized_keys* add contents of id_rsa_titan.pub at the end of *authorized_keys*
50 6 Timo Eronen
51 1 Timo Eronen
<pre>
52
cat ../id_rsa_titan.pub >> ./authorized_keys
53
</pre>
54
55 6 Timo Eronen
Now you can get rid of file ../id_rsa_titan.pub
56
57
<pre>
58 1 Timo Eronen
rm ../id_rsa_titan.pub
59
</pre>
60 6 Timo Eronen
61 10 Timo Eronen
*Option 6b*) If you don't have file named *authorized_keys* rename id_rsa_titan.pub to *authorized_keys* and move it:
62 1 Timo Eronen
63
<pre>
64
mv ../id_rsa_titan.pub ./authorized_keys
65
</pre>
66
67 10 Timo Eronen
h3. 7) Logout from titan.utu.fi
68 1 Timo Eronen
69 10 Timo Eronen
h3. 8) Edit your local config file in your personal computer in directory *~/.ssh*
70 1 Timo Eronen
71
<pre>
72
emacs config
73
</pre>
74
75
... and add the following lines:
76
77
<pre>
78
Host titan
79
    User YOUR_USERID
80
    HostName titan.utu.fi
81
    IdentityFile ~/.ssh/id_rsa_titan
82
</pre>
83
84
Replace YOUR_USERID with your user id in titan.
85
86 11 Timo Eronen
You setup is done now and you should be able to login without giving the password:
87 1 Timo Eronen
88
<pre>
89
ssh titan
90
</pre>