Differences

This shows you the differences between two versions of the page.

--- announce:spring-2019 [2019/05/30 09:51]
Hans
+++ announce:spring-2019 [2019/06/06 11:23] (current)
Hans [Duo Maintenance Update]
@@ Line 1: / Line 1: @@
 ===== Spring Quarter 2019 Announcements =====
+====New Openlab Instructional Nodes====
+UCI and ICS received the donation of several racks of high density computing during the spring 2019 term.  Some of that equipment has already been deployed as part of the [[https://swiki.ics.uci.edu/doku.php/virtual_environments:inst|virtual machine instructional cluster (centaurus)]].   We are working on deploying the rest to further expand the centaurus cluster as well as replace equipment in the openlab instructional clusters for shell service and as SGE compute nodes.
+====Openlab:Archer, Openlab:Andromeda Planned Retirement====
+**Date**:  Summer Term 2019 (exact date TBD)
+**Reason**:
+  * To make space and power available for newer openlab instructional nodes
+  * Unsupported hardware, newer kernels and related packages do not run.
+  * A veritable cornucopia of security concerns related to running old packages.
+**Affects**:  All equipment in openlab:archer and openlab:andromeda clusters will be powered down and permanently removed this summer.  New equipment will be added to the openlab cluster for shell service and as SGE compute nodes.
 ====Duo Maintenance Update====
-Changes will be made to duo process running on emp.ics.uci.edu.   Beginning in early June, in order to accommodate Duo hardware tokens,  users that are enrolled in Duo  will be presented with the following menu when logging in:
+Changes will be made to duo process running on emp.ics.uci.edu.
+Users may force the old behavior, an autopush to their phone or tablet ap, by setting and exporting the following variable:
+<code>
+DUO_PASSCODE=push
+</code>
+Beginning in early June, in order to accommodate Duo hardware tokens,  users that are enrolled in Duo will be presented with the following menu when logging in:
 <code>
 Duo two-factor login for ____
@@ Line 13: / Line 35: @@
 Passcode or option (1-2):
+</code>
+  * Users that use the Duo app should choose option 1 to continue to have Duo push to their phone.
+  * Users that will use a hardware token or phone app //passcode// can simply enter it now.
+**Note about ssh-keys**:  All users logging into emp.ics.uci.edu will receive this prompt regardless of whether or not they are using [[accounts:ssh_keys|ssh-keys]].   At this time we only expect to make this change on emp.ics.uci.edu and multi factor authentication prompts will not appear on other hosts for users using ssh-keys.
+==== SendEnv DUO_PASSCODE per Platform  ====
+=== Linux ===
+Add the following line in ///etc/ssh/ssh_config//:
+<code>
+SendEnv DUO_PASSCODE
 </code>
-All users logging into emp.ics.uci.edu will receive this prompt regardless of whether or not they are using [[accounts:ssh_keys|ssh-keys]].   At tthis time we only expect to make this change on emp.ics.uci.edu and multi factor authentication prompts will not appear on other hosts for users using ssh-keys.
+Then, in your environment, set DUO_PASSCODE variable:
+<code>
+export DUO_PASSCODE=push
+</code>
+=== Putty===
+Navigate to Connection->Data
+ {{:accounts:putty-duo_passcode.jpg?300|}}
 ==== Retire faculty and students server ====