[Server-devel] [support-gang] Value of remote access to School Servers.

[James Cameron]

On Wed, Jul 03, 2013 at 12:45:35PM +0530, Anish Mangal wrote:
> James wrote:
> > Would the person accessing their XSCE remotely then establish
> > another tunnel to your OpenVPN server, or would your server do
> > inbound connection forwarding?
> 
> Hmm. I'm not so clear on that. I can give the example of a setup in
> Bhagmalpur (a pilot we recently did).
> 
> 1. There is an openVPN server hosted by Sameer.
> 2. The XSCE when connected to the internet dials into this open vpn
>    server.

Thanks, I understand the first two steps, and they sound good.

> 3. I can login to the XSCE through the openVPN connection through
>    ssh and administer remotely.

How is this last step achieved?  There's much flexibility, so I'm
curious.  I imagine one of three methods:

a.  does the user first SSH into an account on the OpenVPN server and
then SSH again to the XSCE, or;

b.  does the user SSH to a particular port on the OpenVPN server that
is automatically forwarded to the XSCE, or;

c.  does the XSCE have a routable IP address, courtesy of the OpenVPN
server, to which SSH is directed?

-- 
James Cameron
http://quozl.linux.org.au/