Connect to the IU Sitehosting servers

On this page:


Overview

The IU Sitehosting servers support SSH and SFTP, the use of personal IU and group account credentials, SSH keys, Two-Step Login (Duo), IU SSL Groups VPN, and more. These options are briefly explained below.

Use an SSH client with personal IU account credentials

This is the best option for getting connected as quickly as possible. You use your personal account credentials and do not need the group account credentials. Plus, you will not need to connect to the VPN when on campus. To use this method, the account owner must grant the user the developer or proxy role; see Manage IU Sitehosting accounts with the Enterprise Web Technical Services site.

Note:
You should use an SSH client instead of an SFTP client whenever possible. To use an SFTP client, you must use group account credentials. However, you should use an SSH client with personal IU credentials (your IU username and passphrase) to eliminate the need for sharing group account credentials. Plus, an SSH client allows you to use one connection to access all the accounts you own or have been granted the developer or proxy role. Using an SFTP client requires you to use close and reopen the client to change accounts.

On-campus SSH connections

  1. Connect to the IU Sitehosting server using your personal IU credentials. You will be prompted to select an option for Two-Step Login (Duo).
  2. By default, you have access to your personal IU account file space.
  3. To access your group account file space, issue the become command and enter your personal IU credentials.

For detailed instructions:

Off-campus SSH connections

  1. Connect to the IU SSL VPN using your personal IU credentials. You will be prompted for a secondary password from Duo.
  2. By default, you have access to your personal IU account file space.
  3. To access your group account file space, issue the become command and enter your personal IU credentials.

For detailed instructions:

Use SSH keys

This is the most secure option. This option allows the use of private SSH key and its passphrase. You do not need the group account credentials. Plus, you will not need to connect to the VPN when on campus. To use this method the account owner must grant the user the developer or proxy role; see Manage IU Sitehosting accounts with the Enterprise Web Technical Services site.

This option requires that you first generate the SSH key as described in Generate and use SSH keys with IU Sitehosting. The initial setup takes additional time, but it is more secure than using username and passphrase to authenticate. The extra effort to set up SSH keys makes sense if you plan to connect frequently.

Note:
You should use an SSH client instead of an SFTP client whenever possible. To use an SFTP client, you must use group account credentials. However, you should use an SSH client with personal IU credentials to eliminate the need for sharing group account credentials. Plus, an SSH client allows you to use one connection to access all the accounts you own or have been granted the developer or proxy role. Using an SFTP client requires you to use close and reopen the client to change accounts.

On-campus connections with SSH keys

  1. Connect to the IU Sitehosting server using your private SSH key.
  2. By default, you have access to your personal IU account file space.
  3. To access your group account file space, issue the become command.

For detailed instructions:

Off-campus connections with SSH keys

  1. Connect to the IU SSL VPN using your personal IU credentials. You will be prompted for a secondary password from Duo.
  2. Connect to the IU Sitehosting server using your private SSH key.
  3. By default, you have access to your personal IU account file space.
  4. To access your group account file space, issue the become command.

For detailed instructions:

Use an SFTP client with group account credentials

SFTP connections are available for situations when an SSH connection is not possible or applicable. You will still need to enter their personal IU credentials to connect to the IU Groups VPN. Then, use the group account credentials for the SFTP connection. This is the least secure option, so it should only be used when the other options will not meet your need.

Note:
You should only use an SFTP client when the SSH client options will not meet your need. To use an SFTP client, you must use group account credentials. Instead, you should use personal IU credentials to eliminate the need for sharing group account credentials and allows for change tracking.

On- and off-campus SFTP connections

  1. Connect to the IU SSL Groups VPN using your personal IU credentials. You will be prompted for a secondary password from Duo. If presented with a list of groups, select IU-Linux-Hosting-Users.
  2. Connect to the IU Sitehosting server using your group account credentials.
  3. By default, you have access to your group account file space.

For detailed instructions:

Connect to IU Sitehosting in various applications

This is document azft in the Knowledge Base.
Last modified on 2019-12-03 10:30:15.

Contact us

For help or to comment, email the UITS Support Center.