Skip to content
MSV IncognitoMSV IncognitoIncognito Wiki

Linux Tricks

This guide collects practical starting points for Linux users who need Maastricht University network and remote-access services. Distribution packages and university connection details can change, so obtain current hostnames, identity formats, and configuration profiles from UM before connecting.

Eduroam

Section titled “Eduroam”

Most desktop environments can configure Eduroam through NetworkManager or their built-in Wi-Fi settings. Prefer a university-provided installer or configuration profile when one is available: it can set the expected authentication method and certificate validation safely.

When entering an institutional username or realm, copy the format from current UM instructions. Do not disable certificate validation merely to make the connection succeed, and do not save your password in a world-readable configuration file.

Useful background documentation:

VPN and library access

Section titled “VPN and library access”

OpenConnect supports several enterprise VPN protocols and is packaged by many Linux distributions. Install it through your distribution’s package manager.

Arch Linux:

Terminal window
sudo pacman -S openconnect

Debian, Ubuntu, and derivatives:

Terminal window
sudo apt install openconnect

Use the VPN gateway, protocol, and username format supplied by UM. Avoid copying old hostnames from forum posts or archived instructions. Let the client prompt securely for credentials instead of placing a password in shell history or a script.

For journal and database access, the Maastricht University Library may offer browser-based institutional access that does not require a full VPN connection.

If UM supplies a graphical VPN client, use the vendor’s current Linux package and the university’s setup instructions. Package names and supported authentication methods vary by distribution.

University file services

Section titled “University file services”

Linux can access SMB file services with tools such as smbclient and mount.cifs. Install the client packages with your distribution’s package manager, then use the current server and share paths supplied by UM.

List shares without embedding a password in the command:

Terminal window
smbclient -L //server.example.edu -U your-username

For a temporary mount, create a mount point and let the mount command request credentials or use a protected credentials file:

Terminal window
sudo mkdir -p /mnt/um-drive
sudo mount -t cifs //server.example.edu/share /mnt/um-drive \
  -o username=your-username,uid="$(id -u)",gid="$(id -g)"

Replace the example server and share with current institutional details. If you use a credentials file, restrict it to your account with chmod 600.

Remote desktop

Section titled “Remote desktop”

UM may provide browser-based or client-based access to a managed desktop environment. If a native Linux client is offered, install it from the official vendor or distribution repository and use the connection address from current university documentation.

A remote desktop can help when required software is available only on university-managed Windows systems, but performance and file-transfer behavior depend on your connection.

Useful resources

Section titled “Useful resources”

When troubleshooting, record the exact client, Linux distribution, authentication stage, and error message—but never publish passwords, recovery codes, private keys, or full authentication logs.