Computer Science
Technical Database

Remote Login and Access


Service Addresses

A quick reference to the addresses for various servers on the York CS network. Some servers may share the same address but have a different name. This means that name used for that service is a special alias and should be used where possible in case the service moves to another server in the future.

Please note that computers outside of York CS should not use mail.cs.yorku.ca to forward SMTP mail; it will be rejected. Access to POP3 and IMAP is not restricted on mail.cs.yorku.ca.

Service Server Name Server IP Address
DNS green.cs.yorku.ca 130.63.92.20
WINS green.cs.yorku.ca 130.63.92.20
Mail (SMTP,POP3,IMAP) mail.cs.yorku.ca 130.63.92.20
FTP (anonymous) ftp.cs.yorku.ca 130.63.96.21
SSH and FTP (undergraduates) red.cs.yorku.ca 130.63.96.21
SSH and FTP (other users) blue.cs.yorku.ca 130.63.92.22
Web (HTTP) www.cs.yorku.ca 130.63.92.20
XDM (undergraduates) red.cs.yorku.ca 130.63.96.21
XDM (other users) blue.cs.yorku.ca 130.63.92.22

York Dialup Access

Dialup access for users with modems is provided by Computing and Network Services, the central computing body at York. See their web page at http://www.cns.yorku.ca/ for information on how to obtain an account for their modem pool. This service is provided free to faculty, staff, and graduate students, and for a small fee to undergraduate students.

Remote Access Servers

The York CS network supports remote SSH sessions via red.cs.yorku.ca (undergraduate users) and blue.cs.yorku.ca (other users).

Remote Login Protocols

There are a number of protocols that can be used to access Computer Science systems:

Rlogin/Rsh The rlogin and rsh protocols are supported within the department only. You may use it to connect to a Unix machine within the department from another machine within the department, but not from a machine outside the department. When accessing the system from a managed Unix machine, you do not need to enter your password when using rlogin or rsh.

SSH Also known as Secure Shell. This is similar to the telnet protocol except that the connection is encrypted. This prevents other people on the network from reading the packets in transit (also known as "sniffing" the packets) and extracting your password. SSH is a good protocol to use when connecting to the departmental machines from a host outside of the department.

XDM UNIX systems running X, X-terminals, and some X servers for PCs and Macs will speak the XDMCP protocol which allows it to start up an X session just like a local X-terminal. This will give you the same environment that you would get logging into a workstation or X-terminal but requires a lot of bandwidth. It is unlikely to be useful over long distances or over an analog modem (phoneline). Please note that although we do not limit access to XDM currently, we do not guarantee that this protocol will be generally available in the future.

The Trouble With Rhosts

By placing lists of remote hosts and remote users in a file called .rhosts in your home directory, you can avoid having to type in your password when connecting from that account on the remote machine. For example, the following entry

somehwere.foobar.com  joe
would allow someone logged in as joe on the machine somewhere.foobar.com to log into your account without entering a password using the rlogin or rsh protocols.

UNIX machines in York CS are configured to allow rsh and rlogin access from other machines in the their respective network. You do not need to add them to your .rhosts file.

Think very carefully before you add a machine outside the department to your .rhosts file. It is possible to spoof a remote machine's IP address under some circumstances and thus gain access. Never put a wildcard ("+") in your .rhosts file as either the host or the user. The "+ +" entry means that anybody from anywhere can access your account without entering a password. Even only putting a wildcard in one of the fields makes your account extremely vulnerable.

SSH Support

The preferred protocol for connecting to the department from your home ISP or from another remote computer is SSH or Secure Shell. This protocol provides for the encryption of traffic in transit making it very difficult (and in most cases, nigh impossible) for a third party to snoop or listen in.

We operate ssh servers on our time-sharing servers. SSH clients must be used to access the Computer Science time-sharing servers from outside the department. Telnet and rlogin protocols may not be used when connecting to departmental machines from outside the department. Local users (i.e. computers within the department) can still use telnet, rlogin, rsh, and similar protocols.

There are freely available ssh clients for Unix, Windows and Macintosh. An online list of these clients is available at http://www.freessh.org. The clients we recommend are:

Java SSH Applet Notes

The Java SSH Applet is provided as a convenience when accessing the department's computers from remote machines which do not have readily available SSH support, but do have a Java-enabled web browser.

You can get a copy of the applet (including the source code) on the Java Telnet App Site.


(webmaster@cs.yorku.ca)