Question
How do I connect to the Bastion Host using PuTTY and Duo?
Overview
PuTTY, an open source SSH client, available only for Windows and can be downloaded here - http://www.putty.org
To get started with Duo you'll need to have an account and the application installed, running and configured on your smartphone. For more information on getting started with Duo, please see KB0002934.
Answer
- Download and install the application.
- When you launch the application you'll be presented with the application preferences window
- In the Host Name (or IP address) field enter LoginID@dyad.ucdavis.edu and set the Port to 22
- LoginID - Enter your LoginID
- Set the Connection type to SSH
Although not required, to save the hassle of repeating entering this information each time you connect, you can store these particular connection profile settings for future use.
Saved Sessions
- Enter a Name for the session (that will use the above Host Name, Port and Connection Type)
- Click Save
The next time you launch PuTTY, selecting that profile will automatically launch a command prompt window to that host.
Connecting with Duo
Note: The first time you connect to Duo with PuTTY you will receive a request to verify and validate the rsa2 key fingerprint.
- If you select YES it will store this key and not present you with this challenge each time you connect.
- If you select NO it will not store this key and you will be presented with this challenge each time you connect.
- If you select CANCEL it will terminate the session.
- When the command prompt window opens, your LoginID will be automatically entered and you will be immediately asked for your Kerberos Passphrase.
- Enter your Kerberos Passphrase and then choose the Duo two-factor validation method.
You are now authenticated into the Bastion Host.