CSS Labs

MPI Setup Using SSH with Certificates

The message passing interface (MPI) system requires the ability connect to the Linux machines in the UW1-320 lab without providing a password. That is, you can use SSH from a command line on one Linux machine and run a command on a remote machine without re-entering your password. This is accomplished through an asymmetric key exchange similar to a web secure connection.

When you have correctly configured your SSH for MPI, you will be able to enter the following at a shell prompt and the response will return without requesting a password.

ssh uw1-320-15 'date'
Tue Dec 31 13:44:16 PST 2002


To configure the bare minimum to allow SSH to use a certificate type the following commands at a shell prompt:

mkdir -p ~/.ssh
chmod 0700 ~/.ssh
ssh-keygen -t rsa -b 4096 -f ~/.ssh/id_rsa -N ""
cp ~/.ssh/id_rsa.pub ~/.ssh/authorized_keys
chmod 0600 ~/.ssh/authorized_keys
cp /net/metis/usr/apps/known_hosts ~/.ssh/

Now test your keys with the 'date' command above.

Note that these commands will not associate a password with your SSH key and as such should not be used anywhere else.

For more in-depth information regarding the use of SSH keys please refer to the 'Using SSH Keys' on the UWB CSS Wiki.

For support questions please contact uwbstitl@uw.edu.