Configuring SSH

• In order to simplify SSH access to remote hosts while keeping access secure we recommend INCD users to enable the forwarding of SSH credentials. This enables jumping across hosts without having to enter passwords or other credentials. The following SSH configurations should be entered in the local workstation (PC or laptop desktop) from which the remote INCD hosts are to be accessed.

Enabling SSH agents and forwarding

• Edit the local SSH config filefile, either the system configuration file or the user specific configuration file

  $sudo vi /etc/ssh_config
  

  or

  $sudo vi $HOME/.ssh/config
  

• Add the following options:

    Host *
     ForwardAgent yes
     ForwardX11 yes
     ForwardX11Trusted yes
  GSSAPIAuthentication yes
  

• Disclaimer: In some operating systems the location of the ssh configuration file may change please check your OS for details.

• More information about SSH and forwarding can be found at SSH Forwarding guide