====== Server access for usage of Geneious LIMS/FIMS ======

In order to fully use Geneious with the LIMS/FIMS system, encrypted access to the server on which Geneious is running is necessary. This is possible either via a **Virtual Private Network (VPN)** or via an **ssh tunnel**. Both options are described here. VPN is more difficult to set up, but runs automatically in the background afterwards. The ssh connection must be __started before usage of Geneious__. VPN cannot be used if a firewall blocks VPN traffic (e.g. at the LIB), in this case only SSH is possible.

===== Virtual Private Network (VPN) =====

Access to the server is possible via VPN. We use eduVPN.

{{:server:eduvpn_client_ggbc-server.png?400|}}

The following must be done for this:

  * Download and install the eduVPN client from https://app.eduvpn.org/.
  * Open
  * Enter ''vpn.ggbc.eu'' in the search field above **Institute Access** and click on the name displayed below.
  * This opens the website of the VPN server where you log in with your VPN user name and password.
  * Click on the blue **Approve** button to authorise client access.
  * In the eduVPN client, double-click on the entry **vpn.ggbc.eu** to connect to the server.

{{:server:eduvpn_client_ggbc-server-authorization.png?400 |}}{{:server:eduvpn_client_ggbc-server-approve.png?400|}}

Congratulations! Now you can access e.g. the LIMS/FIMS database!
===== Encrypted connection using SSH =====


Documentation: https://www.howtogeek.com/762863/how-to-generate-ssh-keys-in-windows-10-and-windows-11/

In the power shell/command line of Windows the command:
 
''ssh-keygen -t ed25519''

and confirm all questions with Return.

{{ :server:server_ssh-keygen_windows.png?nolink |}}
 
This creates a directory ''.ssh'' and two files in your own directory (e.g. C:\Home\<username>). The file ''id_ed25519.pub'' contains the __public key__, which can be shared. The other file, ''id_ed25519'', is the private key. __This must never be copied or shared under any circumstances__.
Please send the public key to [[mailto>datacenter@leibniz-lib.de?subject=CaBOL:Public key for server access|datacenter@leibniz-lib.de]] so that access can be set up.

For daily use, it makes sense to store a shortcut for the connection: Create the file named ''config'' in the .ssh directory and copy in the following content (the ''User pgrobe'' must first be replaced by your own username!):

<code>
host cabol
    HostName 217.147.233.16
    User pgrobe
    LocalForward 3317 127.0.0.1:3306
</code>

Please pay attention: Windows tends to create file name extensions (.txt, .cfg) itself. This must be deleted, the file must only be called "config", otherwise it will not work!

The connection then works with: ''ssh cabol'' from Powershell.
 
 
The FIMS/LIMS connection is then:


  ; Server : 127.0.0.1
  ; Port : 3317
  ; Table : fims
  ; Username : cabol_db_user
  ; Password :