NPPS Leadership Team

[Brett Viren <bv AT bnl.gov>]

Tom Throwe is actively following this.  It would be good that any action
we may try to take is coordinated with / informed by him.

My understanding is that, (as of now), two-factor authentication is
needed for access to any IMAP server from the Internet.  This
requirement is driven by DOE and is not an ITD initiative.

IMAP servers which do not listen to the Internet may continue with
single-factor auth.  Again, as of now.  There's some concern that this
internal access may be in jeopardy in the future.

I know that on Android it is possible to use SSH tunnels to access
internal IMAP servers.  I do this with K-9 Mail and Juice SSH to access
the Physics Dept. IMAP server which has no perimeter firewall conduit
and which allows single-factor auth (the SSH access being #2 in many
people's minds).  I don't know the iPhone equiv.

-Brett.

pinkenburg via Phys-npps-mgmt-l <phys-npps-mgmt-l AT lists.bnl.gov> writes:

> Hi folks,
>
> it was mentioned in a recent racf liaison meeting that cyber has
> demanded changes to the rhic mail. I guess this only affect the rhic
> experiments which use rcf as their main mail provider. Basically cyber
> wants to enforce dual authentication - the consequence would be that
> reading emails from your cell will not work anymore since no dual auth
> mail client for cellphones exists.
>
> Does anyone have more info on this and is this something we should
> become active? At least for sPHENIX this would mean that we likely
> have to move away from rcf as mail provider as long as we still can.
>
> Chris

Attachment: signature.asc
Description: PGP signature