ITS Service Status Report

Due to more university systems requiring Duo, owners of AFS-based websites may need to change how they work. Please share the information below with your community, and contact webmaster@umich.edu if you have any questions or requests.
 

• Starting at 7:30 a.m. on March 17, sftp.itd.umich.edu will require Duo to log in.

  1. This will break updates for WordPress websites hosted in ITS Web Virtual Hosting that use the SSH SFTP Updater Support plugin for WordPress.  When WordPress administrators attempt to update WordPress, plugins, or themes from the WordPress dashboard, they will simply be prompted for their connection details multiple times without receiving any error message and the update will not occur.  We will send targeted emails to affected website owners in the coming week.
     
     Solution 1: Change the value of the Hostname field in the Connection Information form to sftp.web.itd.umich.edu. (The old values, sftp.itd.umich.edu, login.itd.umich.edu, and cheerleading.dsc.umich.edu, will no longer work.)
      

  2. Some SFTP clients that do not support keyboard-interactive authentication (and hence do not work with Duo) may no longer connect. Depending on which client they are using, people may get a message saying that all authentication methods were exhausted, or that the username or password was incorrect.
     
     Solution 2: Use the server name/hostname sftp.web.itd.umich.edu from on-campus or while connected to the U-M VPN (does not require Duo).
     
     Solution 3: Switch to a different SFTP client that supports keyboard-interactive authentication (such as Duo), for example, Cyberduck.
      

• At 7:30 a.m. on April 4, the old Red Hat 6 Web Hosting login server cheerleading.dsc.umich.edu will be permanently turned off.

  Solution 4: The replacement server is umpire.dsc.umich.edu, which is Red Hat 8 and requires Duo to log in. Change the server name or hostname in your SFTP or SSH client software to umpire.dsc.umich.edu.
  
  Solution 5: For a server that does not require Duo, use sftp.web.itd.umich.edu.  This server only supports SFTP (not SSH) and can only be accessed from university networks, including the U-M VPN.
  
  Solution 6: For automatic website updates from off-campus systems (such as GitHub or Bitbucket), set up a sponsored uniqname that does not require Duo for managing website files.