Internal and Remote Login
You can log in to other FLC hosts (and also to a few more hosts in the DESY network) with ssh, and you can copy data from host to host with scp or sftp. If you own a valid Kerberos 5 ticket, you won’t even need to type your password in many cases. Most other services (rlogin, rcp, telnet, ftp, …) are disabled.
In order to log in from outside the DESY network via ssh, you should use either the group server flcl01.desy.de or the DESY-wide login host bastion.desy.de. The bastion also runs an HTTP server which offers a Java applet with a terminal emulation (“MindTerm”) – you can use this if you don’t have an SSH client like PuTTY at hand, but only a web browser. Most of the other FLC hosts are inaccessible from the outside world because requests are blocked by the DESY firewall for security reasons. However, you can define a ProxyCommand like “ssh flcl01.desy.de netcat -w 3 %h %p” in your SSH configuration file in order to reroute your connection via flcl01.
You have to use X11 forwarding if you don’t just want to use the terminal interface, but graphical windows. This is enabled on the FLC hosts by default, but on other computers you may have to use the “-X” option (note the capitalisation) of ssh.
If you need remote access to certain resources which cannot be reached from the outside, you can either request a VPN access (this will temporarily give you an IP address which belongs to the DESY network) or play around and try your best with port forwarding through an SSH tunnel (results may vary).
In case you happen to sit in front of a “true” X terminal somewhere (possibly outside the DESY network), you can connect to flcl01.desy.de via XDMCP.
If you need access to a Windows system, you can log in to the Windows Terminal Server either from your Linux machine via rdesktop or from any of the public terminals (in the hallway of building 1 or next to the UCO).