Differences

This shows you the differences between two versions of the page.

--- access [2023/09/13 09:31] – [Private servers] olivier
+++ access [2025/11/21 12:03] (current) – [Private servers] admin
@@ Line 13: / Line 13: @@
 Once connected to the server, you will be presented with a Linux command line.  If unfamiliar with the Linux environment, here is a link to a [[https://ubuntu.com/tutorials/command-line-for-beginners|quick guide]] that covers the basics of Linux shell operation.
+To use Key access, refer to the following page: [[access:sshkeys| Using SSH Keys]]
 ==== Private servers ====
-Some CIM computers are on a private (internal) McGill vlan (10.69.54.0/23).  These servers cannot be accessed directly from the internet.  To access these computers, you can use any public CIM server as an ssh jump host.  (SSH jump hosts are a way to proxy ssh connections through one server to access another)
+Some CIM computers are on a private (internal) McGill vlan (10.69.54.0/23).  These servers cannot be accessed directly from the internet.  To access these computers, you can use the McGill vpn to get on the McGill network, or you can use any public CIM server as an ssh jump host.  (SSH jump hosts are a way to proxy ssh connections through one server to access another)
 The command to connect to a private CIM computer is:
 <code>
-ssh -j <CIMUSERNAME>@barn.cim.mcgill.ca <CIMUSERNAME>@<PRIVATESERVER>.cim.mcgill.ca
+ssh -J <CIMUSERNAME>@barn.cim.mcgill.ca <CIMUSERNAME>@<PRIVATESERVER>.cim.mcgill.ca
 </code>
@@ Line 30: / Line 30: @@
 ==== PuTTY ====
-If you are on another type of operating system, we suggest using an ssh client such as [[https://www.chiark.greenend.org.uk/~sgtatham/putty/latest.html|PuTTY]] to connect to CIM computers.
+The Windows commandline now includes an SSH client, but if you routinely log into a remote system from your Windows machine we recommend using an SSH client such as[[https://www.chiark.greenend.org.uk/~sgtatham/putty/latest.html|PuTTY]] to connect to CIM computers.
 When you open PuTTY, you'll be presented with a configuration screen where only two options need to be configured, the server address (barn.cim.mcgill.ca) and the connection type (SSH).
@@ Line 55: / Line 55: @@
 It is also possible to define an ssh jump host to the scp commands by adding ''-j <CIMUSERNAME>@barn.cim.mcgill.ca'' to access files located locally on private servers.
+==== sshfs ====
+To mount directories with sshfs, while going through a jump host, the following command can be used:
+<code>
+sshfs -o ProxyJump=<cimUsername>@barn.cim.mcgill.ca <cimUsername>@<computerHostname>.cim.mcgill.ca:/home/<filesystem>/<directory> <localMountTarget>
+</code>
+If you prefer defining the jump host in your ssh_config file for more convenient access, you should specify the jump host and the target hostname separately, as such:
+<file>
+Host barn
+  HostName barn.cim.mcgill.ca
+  User <cimUsername>
+Host <computerHostname>
+  HostName <computerHostname>.cim.mcgill.ca
+  ProxyJump barn
+  User <cimUsername>
+</file>
+You can then use the following command to mount remote directories:
+<code>
+sshfs <computerHostname>:/home/<filesystem>/<directory> <localMountTarget>
+</code>
 ==== Filezilla ====
@@ Line 64: / Line 89: @@
 Set the protocol to ''SFTP'', the host to ''barn.cim.mcgill.ca'' and set your username.  You can then click ''Connect'' to connect to the CIM server.  You will then be able to access and transfer files.
+===== Sudo on CIM Workstations =====
+> "With great power comes great responsibility..." - Uncle Ben, Spiderman
+> "God, root, what is difference?" - Pitr, User Friendly
+Generally speaking, users do not have sudo/root access on CIM workstations. This is because, unlike Windows or MacOS, Linux gives much more power to the user. Windows will give you warnings and/or prevent you from erasing critical system files, whereas if you use sudo carelessly, Linux will delete the running kernel without so much as a warning.
+Things to consider as a user with sudo:
+  * sudo is the same as root which is the same as administrator.
+  * sudo can be used to break your system. If you share your system with other users, you can/will break the system for them too.
+  * If in doubt, ask us before trying something. Some things on CIM systems are done for a reason, or are configured in a specific way. There is often a reason for this.