Oceans and Coastal Research Information Pages
Here is information of interest to OCR staff.
To access the intranet off-site:
- You need an account on portal. Ask the MIMS system administrator to set one up for you. Provide the public part of a SSH-key pair in your request.
- Use puttygen, part of the putty package. Download putty from the link here .
- Mac, Linux, and other Unix
- Use ssh-keygen from the terminal command line.
- The system administrator will provide you with a <username>, usually something based on your <first initial><surname>, like zbeeblebrox.
- Choose a port number that makes sense for you: usually choose something related to 80, the HTTP port, like 8080 or 8008 or 8888 or something that is not already being used by another app.
- Make the connection to the firewall.
- Set up a session on putty.
- Start putty and enter <username>@ocean.gov.za in the hostname field of the Session panel.
- Expand the SSH tab under the Connection tab.
- Open the Auth panel and enter the location of the private key associated with the public key you sent to the system administrator.
- Open the Tunnels panel. Enter the port number you chose in the port field, “ocean.gov.za” in the Destination field and choose the Dynamic radio button. Click Add. D<portnumber> should appear in the panel.
- Open the Session panel again, and save the configuration under an appropriate name. (If you forget this step you will have to re-enter everything above again next time you want to connect!)
- Use the putty session to start a SSH connection with portal.
- Start putty (or open the Session panel) and Load the tunnel session you created.
- Click Open. A shell window to portal will open. Leave it open until you are done with browsing the intranet sites. There are ways to make the connection without explicitly opening this window, but that is left to you to figure out if the open terminal window annoys you.
- Use ssh -D <port-number> <username>@ocean.gov.za to make a connection to the firewall.
For extra credit:
- See the script at http://gitlab.ocean.local/duncombe/browseintranet/blob/master/browseintranet for hints on how to create the SSH tunnel in a script. You would have to change this script to get it to work on your system.
- See this question on the StackExchange/superuser, about creating PAC (Proxy AutoConfiguration) files.
- Open your browser.
- There are a couple of requirements for the browser you use.
- The browser needs to be able to use Remote DNS; Chrome does not allow you to set this in the browser options. You need to start Chrome in a different way.
The browser needs to use a proxy through SOCKS5; Opera insists on using the system proxy settings, which is fine if you only ever want to connect to the intranet to use your browser. Not so fine if you want to use a direct internet connection unless you are specifically going to the intranet resources. I have been informed that unlike on Linux, Firefox on a Mac does not allow different sessions with different profiles to be started concurrently.
- Set your browser to use socks5.
- In Firefox,
- open advanced settings,
- choose network,
- choose connection settings, and
- change the proxy settings.
- Choose Manual settings, ensure all the options are unchecked other that SOCKS5.
- Enter localhost and the <portnumber> you chose in the SOCKS host and check the SOCKS5 field.
- Choose “Proxy DNS when using SOCKS”
- Save your settings.
- For Chrome:
- Start chrome specifying a new user folder and setting the proxy on the command line, like this:
google-chrome --user-data-dir=~/.config/google-chrome/Intranet --proxy-server="socks5://localhost:8888"
- Browse the intranet. Click on http://twiki.ocean.gov.za/.