Description
The following instructions describe setting up a secure tunnel via SSH to the internal UCONN database's. There are multiple connection methods described below. Please follow the method best suited for your operating system and configuration.
MAC OS X ("Mountain" Lion 10.8 or Higher)
Configure SSH Access
Please follow these instructions to configure Mac OS X to work properly with UCONN's SSH requirements. Ensure you have submitted a formal request for a UITS admin to add you to the UConn Gateway Server.
Acquire Kerberos Ticket
Getting a Kerberos Ticket using Ticket Viewer app
Ticket Viewer is a Kerberos GUI application included in OS X. It can be found under /System/Library/CoreServices and a shortcut can be created to it (desktop or taskbar)
Once ticket viewer is open, choose Add Identity and enter your <netid>@UCONN.EDU and then your password to save the "ticket" into ticket viewer. Tickets can then be created/destroyed using the "arrow" and "X" icons under the identity name.
Getting a Kerberos Ticket through the Terminal
Terminal is the basic command line application that comes with OS X. To create a Kerberos ticket using Terminal open a session.
- Enter the command kinit <netid>@UCONN.EDU
- Enter your password when prompted
- Enter the command klist to verify your ticket was created successfully, similar to the below screen
Creating the Database Tunnel
Terminal Method
- Acquire a Kerberos ticket by either using the Terminal or the Ticket Viewer app
Connect to non-production databases (DEV, UAT) using
- ssh -fNL 1522:dbserver02.uits.uconn.edu:1521 <yournetid>@gateway.uits.uconn.edu
Connect to production database (PRD) using
- ssh -fNL 1521:dbserver01.uits.uconn.edu:1521 <yournetid>@gateway.uits.uconn.edu
Application Method
There are various GUI applications for creating SSH tunnels on OS X. SSH TUNNEL MANAGER and FUGU SSH are both supported.
SSH Tunnel Manager
FUGU SSH
Windows (Windows 7 and higher)
Ensure you have submitted a formal request for a UITS admin to add you to the UConn Gateway Server.
Configure MIT Kerberos for WIndows
- Download and install the latest MIT Kerberos for Windows
- Choose "Typical Installation"
- Once the client is installed, open it and choose "Get Ticket". Enter your <netid>@UCONN.EDU and password to create a ticket.
Configure PUTTY to create Tunnel(s)
PUTTY is an SSH client that can create secure tunnels into remote systems. It is used to create tunnels to the UCONN database servers via the Gateway Server.
- Download the latest version of PUTTY for Windows
- Choose the version "A Windows Installer for everything except PuttyTel" (you will need the PuttyGen tool)