Off Quad systems (at MCB, HU, Tufts, Sanofi) please following the steps named "Generate SSH Keys" and "For Off-Quad SBGrid Systems" below.
We reccommend using a password for ssh keys
ssh-keygen -t ed25519or
ssh-keygen -t rsa
~/.ssh/id_rsa.pub) to remote system:
scp ~/.ssh/id_rsa.pub remotesys:~/If this is the first connection to the remote system, type
yesto accept the remote system key.
cat ~/id_rsa.pub >> ~/.ssh/authorized_keys
chmod 700 ~/.ssh
chmod 640 ~/.ssh/authorized_keys
~/id_rsa.pubcan be removed from the remote system.
The 'pub' key must be uploaded to our authentication servers. These examples assume you copied the pub key to your Linux home directory, you can also copy and paste the entire contents of the .pub file between systems.
You will need to run these commands on xtal200.harvard.edu. If you are a Consortium member use shell.sbgrid.org.
ipa user-mod $USER --sshpubkey="ssh-ed25519 AAAABBBBBBCCCCCZZZZZZZ firstname.lastname@example.org"
ipa user-mod $USER --sshpubkey="$(cat ~/.ssh/id_rsa.pub)"
For multiple keys
ipa user-mod $USER --sshpubkey="$(cat ~/.ssh/id_rsa.pub)" --sshpubkey="$(cat ~/.ssh/id_ed25519.pub)"\ --sshpubkey="$(cat ~/.ssh/othersystem_id_rsa.pub)"
If you are using csh/tcsh shell
ipa user-mod $USER --sshpubkey="`cat ~/.ssh/id_rsa.pub`"
If you get a 'Kerberos Credential' error you will need to enter the following command, type your password and try again.
Note: The 'ipa' command is not available on most workstations, connect to xtal200.harvard.edu and perform the commands there.