sphenix-l AT lists.bnl.gov
Subject: sPHENIX is a new detector at RHIC.
List archive
[Sphenix-l] tomorrow MFA for IMAP will be implemented - this is the final warning
- From: pinkenburg <pinkenburg AT bnl.gov>
- To: PHENIX Current Participants <phenix-p-l AT lists.bnl.gov>, "sphenix-l AT lists.bnl.gov" <sphenix-l AT lists.bnl.gov>
- Subject: [Sphenix-l] tomorrow MFA for IMAP will be implemented - this is the final warning
- Date: Tue, 14 Apr 2020 10:25:33 -0400
Hi folks
this is just a repetition of last weeks mail and it is a reminder that tomorrow is April 15th and IMAP access from outside will need Multi Factor Authentication. Let me just include the mail from last week which gives links to some docs.
So far I haven't gotten feedback about things not working, this is your last chance.
Chris
again - this only affects users of rcf mail who do not use the BNL Office 365 outlook with a BNL domain account and itd mail and it does not affect outgoing mail.
But the vast majority of us has to deal with this change if we want to continue reading our mails with an email client.
Yesterday dual factor authentication became mandatory for webmail, racf has put out instructions for this:
https://www.racf.bnl.gov/docs/services/email/MFA
what isn't mentioned in these instructions that the google authenticator can also be run in chrome, so you do not need a smart phone (Thanks Maxim) - you can run both and their code actually agrees
https://chrome.google.com/webstore/detail/gauth-authenticator/ilgcnhelpchnceeipipijaljkblbcobl
The web interface looks decent on my cell, certainly good enough to read everything.
Now to the looming April 15 deadline where DOE mandates that IMAP needs Multi Factor Authentication (MFA).
racf has a little documentation about it:
https://www.phy.bnl.gov/computing/index.php/RCF_Email_MFA
In the long run email clients will support MFA and then this becomes a non issue but not in time for this change and the bottom line is that most likely you need to set up an ssh tunnel and you probably want to do this before the deadline.
I use cygwin but would recommend PuTTY if you just need the ssh tunnel since it is simpler to install. I played around with it today and wrote up how to set up a tunnel using it and what needs changing in thunderbird. I put this in our respective wikis (they are identical)
PHENIX: https://www.phenix.bnl.gov/WWW/offline/wikioff/index.php/MFA_for_racf_mail
sPHENIX: https://wiki.bnl.gov/sPHENIX/index.php/Mfaemail
I suspect that there will be problems, chances are they will be similar. Please let's use mattermost, one channel for both PHENIX and sPHENIX:
https://chat.sdcc.bnl.gov/phenix/channels/rcf-email
everyone with an rcf account can join (if you have rcf email you have an rcf account) rather than having one on one emails.
Chris
--
*************************************************************
Christopher H. Pinkenburg ; pinkenburg AT bnl.gov
; http://www.phenix.bnl.gov/~pinkenbu
Brookhaven National Laboratory ; phone: (631) 344-5692
Physics Department Bldg 510 C ; fax: (631) 344-3253
Upton, NY 11973-5000
*************************************************************
- [Sphenix-l] tomorrow MFA for IMAP will be implemented - this is the final warning, pinkenburg, 04/14/2020
Archive powered by MHonArc 2.6.24.