Universiteit Leiden ICT Shared Service Centre 8 February Before you start with the instructions below, make sure:

Transcription

1 SFTP Gateway This document describes how to connect to the Leiden University file-system, through ULCN-authentication on our SFTP portal. After connecting, you can access your home-directory and shared file systems. The process is described for Windows and Linux environments. Technically, Mac/OSX users can connect to the SFTP portal as well, but this is not described here. Before you start with the instructions below, make sure: You know how to handle WinSCP or similar sftp tools, or the Linux command line; You know which folder you want to connect to; You have an ULCN -account that is Linux enabled, most accounts are Linux-enabled by default. Connection through WinSCP For Windows, WinSCP is usually provided. Otherwise, you can get it as a free download. We will use WinSCP as the demoapplication. The general use of WinSCP is described in its manuals. Other SFTP-tools will function similarly. Step 1 Connect Start WinSCP and make a new session. Connect to sftpgw.leidenuniv.nl and provide your ULCN credentials. NOTE: Public-Private key is not possible(due to the Kerberized access). Quick Reference SFTP Gateway 1

2 NOTE: The server will identify itself to by it's fingerprint, and WinSCP shows this fingerprint in a warning: So, the correct fingerprint is: ssh-ed :3f:a9:88:55:37:40:12:c8:ca:a4:bb:86:57:68:dd Do not connect if the WinSCP warning reports a different fingerprint. NOTE: If you connect via PuTTY, the fingerprint should be: ecdsa-sha2-nistp256 34:fc:93:dc:3d:93:61:14:b4:7b:1d:00:4f:1d:56:99 Again, do not connect if Putty reports another fingerprint. After connection, you are welcomed by a banner like this: Quick Reference SFTP Gateway 2

3 The banner mentions where you can find your files. If you don t need this information in the future, you can check the Never show this banner again box. Step 2 Because you connect to a Linux service, you will enter in your Linux-home directory (/vol/home/<ulcn-account>) : Your standard Windows P:-drive can be found as /vol/winhome/<ulcn-account> and your standard Windows J:- drive can be found as /vol/winshare/public. Personal folders - To access your windows-home directory, click the Open-button: Enter /vol/winhome/<ulcn-account>, and confirm with [OK]. Quick Reference SFTP Gateway 3

4 Public folders - In the same way, you can find your standard J:- drive in /vol/winshare/public. Once you entered into /vol/winshare/public you can access the entire J:/ folder-structure. Connection through a terminal On a Linux-terminal, you can connect with your ULCN-account. Step 1 Connect Connect with the SFTP command: localpc:/$ sftp <ulcn>@sftpgw.leidenuniv.nl NOTE: The first time you should accept the key only if the thumbprint is: ecdsa-sha2-nistp256 34:fc:93:dc:3d:93:61:14:b4:7b:1d:00:4f:1d:56:99 Provide your ULCN password, and you will be connected to your Linux-home directory /vol/home/<ulcn>. To find your other directories and files go to: Windows home: /vol/winhome/<ulcn> Linux public shares: /vol/share Windows public shares: /vol/winhome/public Quick Reference SFTP Gateway 4

5 Step 2 Mount and unmount locally To mount a share locally, you can use the sshfs command: localpc:$ sshfs <ulcn>@sftgw.leidenuniv.nl:/vol/home/<ulcn> /mnt/homedir To unmount: localpc:$ fusermount u /mnt/homedir Frequently asked questions Can I use Public Private Key Authentication? The SFTP gateway uses a kerberized environment, where Public Private Key authentication is not possible. Can I access Server file-systems? You can enter the file-system of the server. You can see it, but you have no access rights. Can I browse to my Windows home directory. As long as it is not accessed before it is not mounted, i.e. not connected to the server. How to mount, is described earlier in this manual. After mounting, your home directory is browsable. Why are some folders Access Denied? You have no permission to access all (sub-)folders: In your Windows environment these subfolders are not viewable. In a Linux environment these folders are viewable, but further access is denied. Quick Reference SFTP Gateway 5