Making access to login.eecs “opt-in”

The department unix login server, login.eecs, allows access for all EECS Standard account holders via SSH. Authentication uses one’s EECS username and EECS Windows/LDAP password.

Being open for all EECS users — even those who never intend to use login.eecs — increases our chance of being attacked by brute-force methods, or abuse by those with stolen credentials. In an effort to limit our attack surface, we will be restricting who can login on login.eecs.

Beginning Tuesday, August 11, SSH access to login.eecs will be restricted to members of a new LDAP group. Anyone who has used login.eecs recently has already been added to this group.

If you would like to utilize login.eecs, and have not yet been added to this access group, please email help@eecs.berkeley.edu to request login.eecs access.