SSH (Secure Shell) Remote Login Program
SSH (Secure Shell) is software that, like telnet, enables you to log into
another computer over a network. SSH improves on telnet by providing strong
authentication and secure communications over insecure channels. For more
information about the SSH protocol, visit the SSH Homepage.
Who needs to use SSH?
Every user who is currently using telnet, rlogin, or rsh
to login to the UNIX workstations should begin to use ssh instead. This
includes users of PCs and Macintoshes in campus offices, as well as PPP home
dialup users, and especially people who travel out of the area. If you are not
sure whether this applies to you, please ask consult@econ.Berkeley.EDU.
Why?
The primary reason we want you to use SSH is that it will prevent clear-text passwords from being sent across the internet. This will improve the security of the system and reduce the number of account break-ins.
Reading Email (without remote login)
If you cannot dial directly to EML modems or somehow run SSH software at your
travel location, then the only access to EML that you will have is email.
We now have available a secure web page on our server from which you will be
able to read your email. Through this web page, you can read and delete
messages, as well as send email through the EML server. The URL for this
service is http://www.econ.berkeley.edu/email.
If you find that this is not suitable for your needs, your other options include:
- IMAP with SSL encryption.
While unencrypted IMAP access is still
restricted to the UC Berkeley network (and SSH tunnels),
IMAP with SSL encryption is allowed from anywhere on the internet.
The following mail programs
are known to support IMAP with SSL: Netscape Mail (mac,win,unix),
Microsoft Outlook98 (win), and Microsoft OutlookExpress (mac,win).
First, set the incoming mail server protocol to IMAP
and set the incoming mail server name to econ.Berkeley.EDU.
Then find the option that turns on SSL encryption.
For Netscape, look in the various Mail Preferences for
a setting like "Mail server supports encrypted connections (SSL)".
For the Microsoft Outlook family, in Windows, look in
Tools->Accounts->Properties->Advanced, and on the Mac look in
Edit->Preferences->Accounts->E-mail->Advanced,
and below the field "Incoming mail server (IMAP)" set the option
"This server requires a secure connection (SSL)."
- Mail Forwarding/Copying. You can forward your mail to any other
email address which does not require encrypted connections, including a uclink
email account, private ISP accounts and free WebMail sites like
Yahoo!Mail and
HotMail. If you need assistance
configuring your UNIX account to forward (and/or copy) mail,
please ask
consult@econ.Berkeley.EDU.
Downloading SSH
If you have a CalNet ID, you can download SSH software from http://software.berkeley.edu. If you do
not have a CalNet ID, you can download SSH from one of the site listed
below.
Software for Windows and Macintosh
There are several implementations of SSH for Windows and Macintosh, ranging
from simple ports of the UNIX command-line version all the way up to
professional quality GUI-based terminal emulators. Some are free and others are
commercial. You may try any or all of the SSH versions below.
Windows
MacOS
MacOS X
This operating system ships with a command-line SSH program that you can access with the Terminal program.
Java (for all Java-capable platforms)
Software for UNIX
If you need help with SSH on UNIX, read a UNIX-oriented Getting Started document, and also refer to a FAQ (Frequently Asked Questions document) on SSH.
Getting help
If you need assistance with SSH software, please read our local collection of
SSH tips and FAQs. If you
still need help after that, don't hesitate to ask consult@stat.Berkeley.EDU.