Skip to Content.
Sympa Menu

sphenix-l - [Sphenix-l] Multi Factor Authentication for rcf mail in 8 days

sphenix-l AT lists.bnl.gov

Subject: sPHENIX is a new detector at RHIC.

List archive

Chronological Thread  
  • From: pinkenburg <pinkenburg AT bnl.gov>
  • To: "sphenix-l AT lists.bnl.gov" <sphenix-l AT lists.bnl.gov>, PHENIX Current Participants <phenix-p-l AT lists.bnl.gov>
  • Subject: [Sphenix-l] Multi Factor Authentication for rcf mail in 8 days
  • Date: Tue, 7 Apr 2020 22:24:19 -0400

Hi folks,

again - this only affects users of rcf mail who do not use the BNL Office 365 outlook with a BNL domain account and itd mail and it does not affect outgoing mail.

But the vast majority of us has to deal with this change if we want to continue reading our mails with an email client.

Yesterday dual factor authentication became mandatory for webmail, racf has put out instructions for this:

https://www.racf.bnl.gov/docs/services/email/MFA

what isn't mentioned in these instructions that the google authenticator can also be run in chrome, so you do not need a smart phone (Thanks Maxim) - you can run both and their code actually agrees :)
https://chrome.google.com/webstore/detail/gauth-authenticator/ilgcnhelpchnceeipipijaljkblbcobl

The web interface looks decent on my cell, certainly good enough to read everything.

Now to the looming April 15 deadline where DOE mandates that IMAP needs Multi Factor Authentication (MFA).

racf has a little documentation about it:
https://www.phy.bnl.gov/computing/index.php/RCF_Email_MFA

In the long run email clients will support MFA and then this becomes a non issue but not in time for this change and the bottom line is that most likely you need to set up an ssh tunnel and you probably want to do this before the deadline.

I use cygwin but would recommend PuTTY if you just need the ssh tunnel since it is simpler to install. I played around with it today and wrote up how to set up a tunnel using it and what needs changing in thunderbird. I put this in our respective wikis (they are identical)

PHENIX: https://www.phenix.bnl.gov/WWW/offline/wikioff/index.php/MFA_for_racf_mail
sPHENIX: https://wiki.bnl.gov/sPHENIX/index.php/Mfaemail

I suspect that there will be problems, chances are they will be similar. Please let's use mattermost, one channel for both PHENIX and sPHENIX:
https://chat.sdcc.bnl.gov/phenix/channels/rcf-email
everyone with an rcf account can join (if you have rcf email you have an rcf account) rather than having one on one emails.

Chris





--
*************************************************************

Christopher H. Pinkenburg ; pinkenburg AT bnl.gov
; http://www.phenix.bnl.gov/~pinkenbu

Brookhaven National Laboratory ; phone: (631) 344-5692
Physics Department Bldg 510 C ; fax: (631) 344-3253
Upton, NY 11973-5000

*************************************************************




  • [Sphenix-l] Multi Factor Authentication for rcf mail in 8 days, pinkenburg, 04/07/2020

Archive powered by MHonArc 2.6.24.

Top of Page