Gweatherby: Expand WinSCP section

2025-02-04T22:19:28Z

Expand WinSCP section

← Older revision		Revision as of 22:19, 4 February 2025
Line 70:		Line 70:
	=== How do I use a private key with [https://winscp.net WinSCP]? ===		=== How do I use a private key with [https://winscp.net WinSCP]? ===

	~~See~~ [https://winscp.net/eng/docs/~~ui_login_authentication~~ The ~~Authentication Page~~].		Note that NMRhub allows multiple keys to be uploaded to the dashboard. On Windows, [https://winscp.net/eng/docs/ui_puttygen PuTTYgen] can be used to generate an additional key. The PuTTYgen window provides the public key to add to the [https://nmrbox.nmrhub.org/user-dashboard/ssh-key NMRhub dashboard].

	=== How do I <code>scp</code> from a shared account? ===		=== How do I <code>scp</code> from a shared account? ===

Gweatherby: Create from https://github.com/NMRhub/NMRhub_SSH_Troubleshooting/

2025-02-04T21:50:11Z

Create from https://github.com/NMRhub/NMRhub_SSH_Troubleshooting/

New page

== SSH Troubleshooting ==

[https://nmrhub.org NMRhub] now requires an SSH key pair to connect. Use [https://openssh.com SSH / SFTP / rsync] and tools like [https://filezilla-project.org FileZilla] to connect to NMRhub virtual machines (VMs).

=== Where is my private key? ===

After following the instructions at [https://nmrbox.nmrhub.org/user-dashboard/ssh-key NMRbox User Dashboard SSH Key Setup], your private key should be at:
* On Mac/Linux: <code>$HOME/.ssh/id_ed25519</code>
* On Windows: <code>%HOMEDRIVE%%HOMEPATH%\.ssh\id_ed25519</code>

=== I have the private key in place, but I can't connect. ===

# Try connecting to more than one VM to make sure it's not just an issue with that specific VM. (Please let us know if you can SSH to one VM but not another via [mailto:support@nmrbox.org support@nmrbox.org].)
# Use <code>ssh -vvv</code> to verify if SSH is attempting to use your private key.

==== It's trying to use the key, but it still doesn't work. ====

If you can't connect after uploading your SSH key, verify the following commands give the same result. Windows users should run these commands from PowerShell:

<syntaxhighlight lang="bash">
ssh-keygen -lf $HOME/.ssh/id_ed25519
ssh-keygen -lf $HOME/.ssh/id_ed25519.pub
</syntaxhighlight>

Ensure the key listed at [https://nmrbox.nmrhub.org/user-dashboard/ssh-key NMRbox User Dashboard SSH Key] matches your <code>$HOME/.ssh/id_ed25519.pub</code>.

[[File:sample.jpeg|thumb|Date key set]]

=== Home Directory Permissions ===

If your home directory is writable by anyone other than you, SSH will not work. Connect via [https://nmrbox.nmrhub.org/pages/getting-started VNC] and run:

<syntaxhighlight lang="bash">
ls -l ~
</syntaxhighlight>

If '''<code>w</code>''' appears after the first group of permissions (e.g., <code>drwx</code>), use the following command to correct it:

<syntaxhighlight lang="bash">
chmod go-w ~
</syntaxhighlight>

=== How do I use a private key with <code>rsync</code>? ===

Add the following option to your <code>rsync</code> command:

<syntaxhighlight lang="bash">
-e "ssh -i /path/to/your/private_key"
</syntaxhighlight>

=== How do I use a private key with <code>sftp</code>? ===

Add the following option to your <code>sftp</code> command:

<syntaxhighlight lang="bash">
-i /path/to/your/private_key
</syntaxhighlight>

=== How do I use a private key with FileZilla? ===

Go to FileZilla's '''Site Manager''' and make the following settings in the '''General''' tab. You can leave the port blank, as it defaults to the correct value (22).

* '''Protocol:''' SFTP - SSH File Transfer Protocol
* '''Host:''' ''element''.nmrbox.org
* '''Port:''' Leave blank
* '''Logon Type:''' Key file
* '''User:''' ''username''
* '''Key file:''' ''local path''/.ssh/id_ed25519

=== How do I use a private key with [https://winscp.net WinSCP]? ===

See [https://winscp.net/eng/docs/ui_login_authentication The Authentication Page].

=== How do I <code>scp</code> from a shared account? ===

(Note: This is not an endorsement of shared accounts, but that is a site-specific decision.)

If multiple users are using a shared account (e.g., from a spectrometer console), the following steps will allow copying local data to each user's account. For this example, we assume your username is <code>rernst</code>.

# '''Create another SSH key pair with a passphrase:'''

<syntaxhighlight lang="bash">
ssh-keygen -t ed25519 -C "spectrometer scp"
Generating public/private ed25519 key pair.
Enter file in which to save the key (/Users/rernst/.ssh/id_ed25519): id_ed25519rernst
Enter passphrase (empty for no passphrase): <type a password>
Enter same passphrase again: <retype the password>
Your identification has been saved in id_ed25519rernst
Your public key has been saved in id_ed25519rernst.pub
</syntaxhighlight>

# '''Add''' the contents of <code>id_ed25519rernst.pub</code> to [https://nmrbox.nmrhub.org/user-dashboard/ssh-key NMRbox User Dashboard SSH Key].

# Go to the home directory of the shared account. Create an <code>.ssh</code> directory if necessary and ensure it has permissions <code>drwx------</code>:

<syntaxhighlight lang="bash">
cd $HOME
mkdir -p .ssh
chmod 700 .ssh
</syntaxhighlight>

# Create or edit <code>~/.ssh/config</code> and add the following lines:

<syntaxhighlight lang="bash">
Match User rernst Host *.nmrbox.org
IdentityFile ~/.ssh/id_ed25519rernst
</syntaxhighlight>

# You should now be able to copy data from the shared account to <code>nmrbox.org</code>:

<syntaxhighlight lang="bash">
scp fid rernst@*element*.nmrbox.org:
</syntaxhighlight>

When prompted:

<syntaxhighlight lang="text">
Enter passphrase for key 'home_directory/.ssh/id_ed25519rernst':
</syntaxhighlight>

Enter the password you used when creating the key pair.

SSH troubleshooting - Revision history

Gweatherby: Expand WinSCP section

Gweatherby: Create from https://github.com/NMRhub/NMRhub_SSH_Troubleshooting/