Linux Cluster: Two factor authentication Pilot operation

Update (March 1, 2023)

Due to issues with the realm-based authentication mechanism, the pilot phase has been suspended. We will notify you when it will be resumed.

Dear users of the Linux Cluster systems at LRZ,

In order to continue assuring adequate security of cluster operation, it is our intent to move the authentication procedure for all cluster systems to a two-factor mechanism in the course of this year.

As a first step, this new functionality will be enabled on lxlogin4.lrz.de on February 24, 2023. This is to permit users to try out the new mechanism and report back any issues encountered.

Existing user connections will be removed when the changeover happens. After this, access to the login node lxlogin4 will only be possible through the two-factor mechanism.

The details of the new login procedure, specifically the handling of tokens via the hpcusers.lrz.de realm of the LRZ MFA portal, are described in https://doku.lrz.de/display/PUBLIC/Two-Factor+Authentication+on+the+Linux+Cluster 

In case you run into problems with the new mechanism, please open a ticket through https://servicedesk.lrz.de

---