Reports until 11:40, Monday 17 August 2015
H1 CDS
david.barker@LIGO.ORG - posted 11:40, Monday 17 August 2015 - last comment - 16:59, Monday 17 August 2015(20597)
remote log into CDS system not functioning this morning

We are aware of problems with the remote 2FA Yubikey login system, we are investigating. It has an opened ticket FRS3467.

Comments related to this report
david.barker@LIGO.ORG - 13:59, Monday 17 August 2015 (20600)

Update: Jonathan's email explaining the situation:

There are problems remotely logging into LHO CDS via lhocds.ligo-wa.caltech.edu right now.  It is being looked at, but a solution is not yet known.

It appears that a security update has changed how authentication can work in the ssh server and is no longer allowing multiple passes/layers of authentication.  So your initial password (ie your LIGO.ORG) password is being checked by the LIGO.ORGauthentication infrastructure and then being passed onto the token system (without the chance of allowing a token to be prompted for).  As your LIGO.ORG password is not the same as the output of your token (yubikey) the authentication fails.

However this only happens most of the time.  Some of the time you do get prompted for both passwords (LIGO.ORG and OTP/token/yubikey) and it works.

Unfortunately we do not have a proper fix at this time.  Until such a time as we do, please try again.
---
Jonathan Hanks
CDS Software Engineer
LIGO Hanford Observatory

jonathan.hanks@LIGO.ORG - 16:59, Monday 17 August 2015 (20607)CDS

Logins are now working.