From 34ca315918f54a2d3abef5e55f424e2ec46b9c1f Mon Sep 17 00:00:00 2001
From: Jan Siwiec <jan.siwiec@vsb.cz>
Date: Mon, 1 Nov 2021 10:38:50 +0100
Subject: [PATCH] updated security requirements for barbora and karolina
---
docs.it4i/general/shell-and-data-access.md | 18 +++++-------------
1 file changed, 5 insertions(+), 13 deletions(-)
diff --git a/docs.it4i/general/shell-and-data-access.md b/docs.it4i/general/shell-and-data-access.md
index c1f5a04e4..105d9dd6e 100644
--- a/docs.it4i/general/shell-and-data-access.md
+++ b/docs.it4i/general/shell-and-data-access.md
@@ -7,14 +7,14 @@ All IT4Innovations clusters are accessed by the SSH protocol via login nodes at
!!! note "Workgroups Access Limitation"
Projects from the **PRACE** workgroup can only access the **Barbora** and **Salomon** clusters.<br>Projects from the **EUROHPC** workgroup can only access the **Karolina** cluster.
-### Karolina Cluster
-
-!!! important
- Karolina has gone into production with updated security requirements.
- Only clients based on OpenSSH 7.4p1 and later will be able to connect (including other SSH clients with compatible security algorithms).
+!!! important "Karolina and Barbora updated security requirements
+ Due to updated security requirements on Karolina and Barbora,
+ only clients based on OpenSSH 7.4p1 and later can connect (including other SSH clients with compatible security algorithms).
This means that starting with RHEL/Centos 7, Debian 9 or Ubuntu 18.04, you are good to go.
Some users who still have DSA keys will be also unable to connect and are urged to update their keypairs, preferably to Ed25519 format.
+### Karolina Cluster
+
| Login address | Port | Protocol | Login node |
| ----------------------- | ---- | -------- | ------------------------------------- |
| karolina.it4i.cz | 22 | SSH | round-robin DNS record for login[1-4] |
@@ -25,14 +25,6 @@ All IT4Innovations clusters are accessed by the SSH protocol via login nodes at
### Barbora Cluster
-!!! important
- Barbora will have its security requirements updated.
- Only clients based on OpenSSH 7.4p1 and later will be able to connect (including other SSH clients with compatible security algorithms).
- This means that starting with RHEL/Centos 7, Debian 9 or Ubuntu 18.04, you are good to go.
- Some users who still have DSA keys will be also unable to connect and are urged to update their keypairs, preferably to Ed25519 format.
-
- This change will be implemented in early October 2021.
-
| Login address | Port | Protocol | Login node |
| ------------------------- | ---- | -------- | ------------------------------------- |
| barbora.it4i.cz | 22 | SSH | round-robin DNS record for login[1-2] |
--
GitLab