The problem has been solved.

-----------------

The problem has been solved.

-----------------

Since today, 4.3.2026 approx. 10.30 h it is not possible to log in to the web analytics tool Matomo. Therefore, editors of DESY websites are currently unable to access web statistics via the Matomo analytics tool (https://matomo.desy.de).

Trouble caused by: Probleme mit einem Update

more information about this entry

On Tuesday, 03.02.2026, between 2:10 PM and 2:15 PM, a central Oracle database cluster (IT-RAC) was unavailable. As a result, some central database applications were temporarily inaccessible.

Trouble caused by: Issues with the Underlying Storage System (NetApp)

Between 6:40 p.m. and 7:35 p.m., there was a disruption to Cisco IP telephony. As a result, no calls could be made or received.

ISDN/analogue telephones were not affected by this problem and the technical emergency service was available.

Trouble caused by: Cisco IP telephony malfunction

Today, Monday, 02.02.2026 the on-site service of the UCO (02b/131d) is not staffed.

Support via telephone (5005) and email (uco@desy.de) is available as usual.

Trouble caused by: Limited staff availability due to strikes in public transportation.

Currently, initial registration for Jabber is only possible using Cisco VPN.
Initial registration is required if you have never logged into the service before or you have reset your Softphone and need to log in again.

If you are already logged into the Jabber Softphone, you can continue using the service seamlessly via eduVPN or from outside the DESY network.

We are working on a solution.

The DFN Association (Association for the Promotion of a German Research Network) has informed us that the eduroam service (Easyroam) is currently experiencing disruptions.

Network connections via eduroam cannot be established reliably at this time.

The DFN is working on a solution; no further information is available at this time.

Trouble caused by: Unknown

The maintenance has been finished at about 12 o'clock.

-----------------

On Donnerstag, 5.2.2026 the whole day maintenance works on all SYMPA mailing list servers will take place.

The following SYMPA instances are affected:

- DESY
- Belle2
- CSSB
- dCache
- XFEL

During the maintenance the web page of the respective Sympa servers won't be available for a longer time period. During the downtime of each server no emails will be distributed to the affected mailing lists.

All e-mails will be temporarily stored and distributed after the affected server is up and running again.

Maintenance caused by: Applying current security updates on the SYMPA servers.

more information about this entry

Today, Tuesday, 03.02.2026 between 18:00 and 18:30 the DESY guest printer service desyguestprint10 will not be available due to maintenance work. It can therefore not be used during this time to send print jobs to public printers.

Maintenance caused by: Maintenance of the Underlying Virtualization Platform

The maintenance has been finished.

-----------------

On the second Friday of every month, the monthly Windows updates are released. Please install them on your DESY Windows devices as soon as possible to ensure that they are up-to-date and secure.

To do this, connect your Windows device to the internal DESY network after the updates have been released. Use VPN if you are extern. When prompted or at the end of the day, restart or shut down your Windows device.

Seven days after the release of the updates, a forced restart of the computers will take place if this has not taken place in the meantime.


Hint:
On Wednesday which follows the release of the updates from 17:00 to max. 20:00, trouble-free working in the Windows environment cannot be guaranteed due to the monthly maintenance work on the central Windows servers.

It is recommended to log off or shut down DESY Windows devices on Wednesday before the maintenance starts. You should also log off from public Windows systems (terminal servers) beforehand.

Maintenance caused by: Windows updates and the monthly maintenance work on the corresponding central computers

more information about this entry

Regular Maintenance Slot: TSM (ADSM) backup server

Time: each Tuesday, 12:00 pm - 8:30 pm
Systems: all

Impact: The TSM backup servers will be partly down. It will not be possible to restore files on the central Unix or Windows systems from backups made by the TSM.

An apology must be made in advance: It is always possible that things do not work as planned. Therefore the given ending times may not be kept as promised.

Maintenance caused by: Update of the Service

more information about this entry

In this storage service, the default settings for permissions when sharing a directory may lead to unplanned behaviour, which we would like to draw your attention to with this information.

The behaviour is based on the fact that the default settings also include the right to delete. The result can be that data becomes inaccessible to the person who shared the data if one of the persons with whom the data was shared moves it; this corresponds to copying it to the target folder and then deleting it in the source folder.
The files and directories are not lost, but are now in the directory tree of the person who moved them.

To work around this issue until it is fixed, the recommendation is not to move any data that has been shared with you via Sync & Share. Persons already affected will be informed directly.

A support request is in progress at the manufacturer.

If you have any questions, please contact uco@desy.de.
more information about this entry

Starting Wednesday, 04.02.2026, at 12:00 PM, Cisco VPN-based connection attempts originating from devices with outdated operating systems will be blocked.
Additionally, only the Cisco VPN Client will be supported for Cisco VPN connections. Connection attempts via native VPN clients (such as IPSec on macOS) will no longer be possible from that point.

Further details on the implementation of these measures, as well as recommended actions, can be found on the following webpage:
https://it.desy.de/services/networks/vpn/vpn_access_restrictions

Please also note that unblocking your IP address may be needed. In that case use the service https://it-access.desy.de. Additional information on this service can be found here:
https://it.desy.de/services/external_access/it_access

We previously informed about these planned measures in mid-January:
https://it-news.desy.de/?TicketID=1197&lang=en

From Wednesday, 04.02.2026 access to the following services from outside will be restricted:

- Login via Kerberos (a central authentication service)
- Access to AFS (a central Linux file system)

To continue accessing these services from outside, please open the page https://it-access.desy.de beforehand. Only after that, login commands like kinit or aklog (for Kerberos) as well as fs listacl, fs setacl, or fs listquota (for AFS) can be executed.

Further information about IT-Access can be found on the following web page:
https://it.desy.de/services/remote_access/it_access

For security reasons, it is necessary to protect as many services as possible with multi-factor authentication (MFA). Since Kerberos and AFS themselves do not offer the option to secure access via MFA, restricting access in this way is required instead.

Starting Tuesday, 13.01.2026, users establishing Cisco VPN connections with outdated operating systems will receive individual email notifications.

This is a preparatory measure ahead of the planned blocking of such connections from 03.02.2026, to ensure network security in compliance with the requirements of the Computer Security Council (RSR).

For macOS users, the option to use Apples native VPN client (IPSec) will no longer be available in the future. Alternatives are eduVPN or the Cisco VPN client (download via https://vpn.desy.de).

For further information, please refer to the VPN documentation:
https://it.desy.de/dienste/netzwerke/vpn

We will provide separate updates once the blocking of connections is activated.

If you have any questions, please contact the IT Helpdesk at any time (uco@desy.de, phone: 5005).