Description

The following instructions describe setting up a secure tunnel via SSH to the internal UCONN database's. There are multiple connection methods described below. Please follow the method best suited for your operating system and configuration. 

MAC OS X ("Mountain" Lion 10.8 or Higher)

Configure SSH Access:

Please follow these instructions to configure Mac OS X to work properly with UCONN's SSH requirements.

Acquire Kerberos Ticket:

Getting a Kerberos Ticket using Ticket Viewer app

Ticket Viewer is a Kerberos GUI application included in OS X. It can be found under /System/Library/CoreServices and a shortcut can be created to it (desktop or taskbar)

Once ticket viewer is open, choose Add Identity and enter your <netid>@UCONN.EDU and then your password to save the "ticket" into ticket viewer. Tickets can then be created/destroyed using the "arrow" and "X" icons under the identity name.

Getting a Kerberos Ticket through the Terminal

Terminal is the basic command line application that comes with OS X. To create a Kerberos ticket using Terminal open a session.

• Enter the command kinit <netid>@UCONN.EDU
• Enter your password when prompted
• Enter the command klist to verify your ticket was created successfully, similar to the below screen

Creating the Database Tunnel:

Terminal Method:

• Acquire a Kerberos ticket by either using the Terminal or the Ticket Viewer app

• Connect to non-production databases (DEV, UAT) using

• ssh -fNL 1522:dbserver02.uits.uconn.edu:1521 <yournetid>@gateway.uits.uconn.edu

• Connect to production database (PRD) using

• ssh -fNL 1521:dbserver01.uits.uconn.edu:1521 <yournetid>@gateway.uits.uconn.edu

Application Method:

There are various GUI applications for creating SSH tunnels on OS X.  SSH TUNNEL MANAGER and FUGU SSH are both supported.

SSH Tunnel Manager

FUGU SSH

Network Identity Manager / Putty Method:

• Download and install Putty from Centrify website.http://www.centrify.com/resources/putty.asp
• Download and install the latest MIT kerberos.
• Configure user account in Kerberos and create a ticket.
• Follow the instructions on the Centrify help document to configure Putty - Document is part of the downlaod package.
• Start the Putty session from Start up -> Centrify -> Putty
• type 'gateway.uits.uconn.edu' into the hostname field
• select the Connection -> SSH -> Kerberos from the categories on the left hand side and enable "Attempt Kerberos Auth"
• Enter <netid>@UCONN.EDU Service Principal Name section.
• Under Auto-Login, select third radio - User name portion of user principal name
• <SET UP THE TUNNEL>
• Select the Sessions category from the left hand side
• Type a meaningful name such as 'gateway server' into the saved sessions text field
• click the save button

SSH shared keys / Putty Method:

http://www.howtoforge.com/ssh_key_based_logins_putty

• Download Putty: http://the.earth.li/~sgtatham/putty/latest/x86/putty.exe and save it to somewhere where you can access it
• Download PuttyGen: http://the.earth.li/~sgtatham/putty/latest/x86/puttygen.exe and save it to somewhere you can access it
• Run PuttyGen.exe
• click the 'Generate' button
• move the mouse around in the window until the progress bar is complete (puttygen uses this to make the key random, this isn't a joke)
• click the 'Save public key' button, and ignore the warning about the keyphrase (what do we click to ignore it?) save the file somewhere handy, name it 'public'
• click the 'Save private key' button, save the file in the same location as the private key, name it 'private'
• Send an email to Mitch and Jim with the subject 'putty public key' and attach the 'public' file that we saved two steps prior
• close 'PuttyGen.exe'
• open 'Putty.exe'
• type 'gateway.uits.uconn.edu' into the hostname field
• select the SSH -> Data from the categories on the left hand side 
• type your netid (is this true for the gateway server?) into the 'Auto login user' field
• select SSH -> Auth from the categories on the left hand side
• click the 'Browse' button to the right of the 'Private key file for authentication' field
• Select the file named private that was saved in one of the previous steps
• <SET UP THE TUNNEL>
• Select the Sessions category from the left hand side
• Type a meaningful name such as 'gateway server' into the saved sessions text field
• click the save button

<SET UP THE TUNNEL> Putty

• in putty select tunnel from the category list from the left hand side "Connection -> SSH -> Tunnels"
• In source port type 1521
• in Destination type:
  
  • dbserver02.uits.uconn.edu:1521      (For non-production)
  • dbserver01.uits.uconn.edu:1521      (For production)
• click the 'add' button

Usernames and passwords

For usernames and passwords please contact james.gedarovich@uconn.edu

Environment Connection Parameters