From 5e04cdfa423acacf8587e18893a2b7217cfa0c0a Mon Sep 17 00:00:00 2001
From: Jan Siwiec <jan.siwiec@vsb.cz>
Date: Wed, 4 Aug 2021 10:34:48 +0200
Subject: [PATCH] security requirement update

---
 docs.it4i/general/shell-and-data-access.md | 14 ++++++++++++++
 1 file changed, 14 insertions(+)

diff --git a/docs.it4i/general/shell-and-data-access.md b/docs.it4i/general/shell-and-data-access.md
index 093e3ec39..e3b9019da 100644
--- a/docs.it4i/general/shell-and-data-access.md
+++ b/docs.it4i/general/shell-and-data-access.md
@@ -9,6 +9,12 @@ All IT4Innovations clusters are accessed by the SSH protocol via login nodes at
 
 ### Karolina Cluster
 
+!!! important
+    Karolina has gone into production with updated security requirements.
+    Only clients based on OpenSSH 7.4p1 and later will be able to connect (including other SSH clients with compatible security algorithms).
+    This means that starting with RHEL/Centos 7, Debian 9 or Ubuntu 18.04, you are good to go.
+    Some users which still have DSA keys will be also unable to connect and are urged to update their keypairs, preferably to Ed25519 format.
+
 | Login address           | Port | Protocol | Login node                            |
 | ----------------------- | ---- | -------- | ------------------------------------- |
 | karolina.it4i.cz        | 22   | SSH      | round-robin DNS record for login[1-4] |
@@ -19,6 +25,14 @@ All IT4Innovations clusters are accessed by the SSH protocol via login nodes at
 
 ### Barbora Cluster
 
+!!! important
+    Barbora will have its security requirements updated.
+    Only clients based on OpenSSH 7.4p1 and later will be able to connect (including other SSH clients with compatible security algorithms).
+    This means that starting with RHEL/Centos 7, Debian 9 or Ubuntu 18.04, you are good to go.
+    Some users which still have DSA keys will be also unable to connect and are urged to update their keypairs, preferably to Ed25519 format.
+
+    This change will be implemented in early October 2021.
+
 | Login address             | Port | Protocol | Login node                            |
 | ------------------------- | ---- | -------- | ------------------------------------- |
 | barbora.it4i.cz           | 22   | SSH      | round-robin DNS record for login[1-2] |
-- 
GitLab